Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/FpCd1fZ3nxlcG2TltWrsKhe1BbQ.roa
File: FpCd1fZ3nxlcG2TltWrsKhe1BbQ.roa (raw, json)
Hash identifier: oI8sbqIfyYuMJlran6iY6Kx6Mk5E9Jryl7xeLAvGZuA=
Subject key identifier: 16:90:9D:D5:F6:77:9F:19:5C:1B:64:E5:B5:6A:EC:2A:17:B5:05:B4
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018AF0C91137CC35261470382F08911F3F7C
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/FpCd1fZ3nxlcG2TltWrsKhe1BbQ.roa
Signing time: Mon 02 Oct 2023 14:27:03 +0000
ROA not before: Mon 02 Oct 2023 14:27:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
185.81.28.0/23 maxlen: 24
185.81.30.0/23 maxlen: 24
45.146.232.0/23 maxlen: 24
188.64.108.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:c9:11:37:cc:35:26:14:70:38:2f:08:91:1f:3f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Oct 2 14:27:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16909dd5f6779f195c1b64e5b56aec2a17b505b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:75:fe:79:4c:0f:4b:75:38:8b:41:d0:5a:
d6:a9:38:ef:1e:4c:46:91:27:30:8a:8e:27:0f:aa:
23:c4:70:84:38:74:dc:f1:b5:b7:77:98:82:c7:1e:
c1:3b:f7:9b:fb:4f:22:d4:6b:aa:ce:ab:97:a6:b1:
bf:9b:69:98:b4:0d:53:7c:ba:49:09:10:6d:d7:49:
f8:c7:2c:77:f8:8e:6e:6d:5e:08:0d:32:5f:e5:94:
cc:33:eb:52:cb:59:a7:85:b1:b4:2f:21:b3:d5:2e:
93:4c:22:e1:80:89:cc:af:ae:91:61:31:bc:02:1b:
34:61:d5:9c:eb:dc:5b:d3:cb:7b:fa:4e:58:92:f6:
61:62:88:c3:40:ad:ea:95:93:43:50:24:d6:ca:9f:
d1:d7:a3:35:c6:e8:15:10:f5:2b:cf:0f:36:86:ea:
6e:17:85:a3:ed:0c:84:aa:2b:32:34:dd:c5:82:1e:
b4:8d:e8:5d:ed:70:2b:78:1d:7a:ca:ba:15:e5:c1:
30:43:40:8b:a7:61:12:93:72:f9:db:0c:7f:80:a9:
b7:97:24:54:b4:e9:be:59:bd:f6:d3:21:a0:3e:5b:
2a:3c:bb:64:9d:22:4b:89:af:23:61:ba:de:b4:9c:
5a:62:e4:0f:d4:f5:e4:08:69:86:a0:07:6d:bb:18:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:90:9D:D5:F6:77:9F:19:5C:1B:64:E5:B5:6A:EC:2A:17:B5:05:B4
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/FpCd1fZ3nxlcG2TltWrsKhe1BbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.232.0/23
185.81.28.0/22
188.64.108.0/22
Signature Algorithm: sha256WithRSAEncryption
39:1e:58:c3:b4:58:72:8b:4b:7f:e8:6b:96:0e:74:cb:cc:b2:
c8:de:e7:83:ea:98:b5:32:1d:c1:25:58:d2:33:db:0b:8d:9a:
68:44:f1:64:b6:bd:06:1d:12:5c:03:2e:61:91:01:c7:4e:4f:
c7:7f:45:39:b0:07:20:cd:20:0a:ab:60:32:f8:14:80:32:c5:
f2:db:8b:a9:d8:1a:c4:40:72:ca:2d:88:ea:97:a6:c2:1d:fa:
ad:6e:b4:64:5d:e1:d0:e8:f2:9e:04:36:31:db:a2:21:ff:c4:
c2:1d:70:2e:03:f4:a9:5d:68:24:23:99:f0:00:fd:7d:8d:53:
c3:ff:73:c1:bd:cc:c7:9e:3f:a2:a7:56:56:65:c5:1d:f5:19:
c3:b0:23:80:00:2b:7d:f8:16:16:f4:6d:33:93:80:18:66:c1:
f7:ea:f8:f2:fe:05:32:29:34:3e:af:b5:69:d0:8b:d3:dc:cd:
c3:6d:83:e4:84:a5:0c:38:72:03:05:25:c6:87:0f:85:b6:21:
1f:53:ff:f2:24:ba:53:a1:b1:f1:83:01:bd:9b:a0:c1:25:b1:
07:93:87:03:de:07:bd:51:ab:4b:4d:86:aa:01:25:b0:77:29:
b5:15:d0:0d:27:36:28:7f:87:66:1d:2e:06:fe:a7:e3:77:02:
92:a1:7c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 10:54:08 2023 by rpki-client on console-fra.rpki-client.org