Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GLO1jBpW82yW0cRPjGc78iYLBiw.roa
File: GLO1jBpW82yW0cRPjGc78iYLBiw.roa (raw, json)
Hash identifier: pIktjfnzzYpSgPZu17ymcuDIPAeG1qo0kIWbtBtb/w0=
Subject key identifier: 18:B3:B5:8C:1A:56:F3:6C:96:D1:C4:4F:8C:67:3B:F2:26:0B:06:2C
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018AA8A219DF1C8FEDB051879F17D4BCF83D
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GLO1jBpW82yW0cRPjGc78iYLBiw.roa
Signing time: Mon 18 Sep 2023 14:11:50 +0000
ROA not before: Mon 18 Sep 2023 14:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.81.30.0/23 maxlen: 24
185.81.28.0/23 maxlen: 24
45.141.170.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Sep 2023 06:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:a2:19:df:1c:8f:ed:b0:51:87:9f:17:d4:bc:f8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Sep 18 14:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18b3b58c1a56f36c96d1c44f8c673bf2260b062c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:00:d5:59:10:e4:a3:80:96:53:7a:ed:88:
17:62:6b:ab:3c:62:d8:70:6e:14:10:47:61:f8:a8:
68:f5:94:09:51:4c:cf:53:00:aa:ed:d3:e6:b1:9d:
cd:fb:09:a3:05:38:9a:7a:73:97:13:84:16:5a:18:
62:81:20:ea:0f:0c:aa:ed:77:c2:63:41:72:f5:5d:
3e:a1:c5:ee:2c:a2:a9:94:63:ac:1a:0a:f3:b5:9b:
03:f0:70:76:fd:a8:6e:7c:72:08:74:f6:f8:ce:a5:
05:e0:ba:a4:de:cc:06:a4:85:b8:e0:06:84:ff:be:
59:32:e6:aa:0b:25:a0:24:3a:d6:7a:39:a4:57:cf:
66:ca:a8:3e:ee:59:5c:26:55:cc:25:78:41:f2:7f:
f7:cb:13:69:d2:29:b6:ff:71:5f:6d:df:1c:7d:bd:
98:b9:5b:55:a2:9e:d1:8f:f4:96:de:8d:c9:0f:35:
90:1c:4e:68:b8:7f:dd:c5:ea:ba:df:4f:34:98:f9:
75:4c:4a:9d:2e:ce:e6:ab:86:fa:3f:0b:8a:3b:fe:
ef:5c:e5:f6:79:92:6d:65:d1:4f:04:2a:f1:ca:f2:
30:82:de:10:f9:26:ed:28:78:4a:16:a5:37:3e:10:
9a:11:a6:0a:5d:e0:16:81:cc:81:2c:9a:72:b6:9c:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B3:B5:8C:1A:56:F3:6C:96:D1:C4:4F:8C:67:3B:F2:26:0B:06:2C
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GLO1jBpW82yW0cRPjGc78iYLBiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.170.0/23
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
17:c8:fc:77:b9:1c:bd:79:ac:63:98:be:8b:12:d7:e0:fb:7c:
c3:e1:b7:41:4d:86:a3:22:b1:6d:59:c7:7d:9e:02:de:76:1d:
12:b4:31:af:64:9d:78:e1:53:89:c9:34:cc:99:ec:35:ae:88:
cd:e6:62:8d:f6:18:b6:bd:8b:15:b9:fc:8c:05:df:37:02:df:
03:1a:15:42:d8:b6:8e:d2:33:52:81:e3:7d:60:39:34:20:e1:
60:0a:cc:56:f8:d8:43:e0:97:9d:03:91:f2:e2:ec:1d:dc:55:
a2:d8:f4:ed:d1:ee:ce:47:7b:72:5c:d2:75:a8:e2:26:15:9a:
53:06:af:cd:29:1a:c5:d9:d4:49:31:74:16:a9:13:0e:f9:bc:
55:f0:35:83:76:20:22:53:10:04:0b:58:74:f2:b4:fd:8a:fc:
ff:0b:be:3c:89:2b:41:36:90:2f:23:d1:2f:67:b2:1d:ca:2e:
25:bc:9d:c5:a3:83:3a:de:a3:4e:3f:01:c0:3e:4b:f6:92:9e:
a0:23:5c:6f:9f:a8:71:df:93:2c:67:cb:95:fe:57:d5:37:12:
c2:a8:a3:b0:1f:c1:14:1a:77:e8:7f:ff:ed:a0:8a:4a:8a:72:
5f:58:58:7a:12:e0:46:25:3e:96:61:e2:66:1c:78:d8:34:c2:
04:17:3a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org