Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Jk45Q5CXCULpboEkSbZaeFmFQhI.roa
File: Jk45Q5CXCULpboEkSbZaeFmFQhI.roa (raw, json)
Hash identifier: EU/qktvpMSfqhZSoT9sVVH+jD1QEtXQpsSMLONJFqYw=
Subject key identifier: 26:4E:39:43:90:97:09:42:E9:6E:81:24:49:B6:5A:78:59:85:42:12
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018AA1A8D2215F0D6565CCF0A53DBFCE6CB7
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Jk45Q5CXCULpboEkSbZaeFmFQhI.roa
Signing time: Sun 17 Sep 2023 05:41:50 +0000
ROA not before: Sun 17 Sep 2023 05:41:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
45.141.170.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a1:a8:d2:21:5f:0d:65:65:cc:f0:a5:3d:bf:ce:6c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Sep 17 05:41:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=264e394390970942e96e812449b65a7859854212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2d:02:fd:7a:a4:af:c9:f3:07:fb:2a:aa:ce:
dd:51:4f:57:29:c7:b8:3f:75:c1:67:65:55:eb:b6:
16:80:9b:46:39:58:04:2c:5e:ee:a6:b8:33:bc:17:
24:e3:40:38:8d:e5:03:09:6b:79:bb:09:ed:f5:e9:
ab:c0:5d:51:fd:47:bd:ad:a3:ce:bc:ff:7a:eb:56:
72:e9:1b:3a:44:5b:60:c4:b8:be:cc:84:85:fc:e8:
f5:cd:5f:c7:36:f6:6a:90:d6:30:2a:c2:7a:3a:01:
ad:f6:d4:94:62:60:96:71:6d:ca:eb:68:91:25:bd:
c1:4e:ed:a8:a7:aa:7d:04:9c:05:41:48:4a:de:85:
24:21:dc:1b:f2:2a:af:f4:53:e3:8b:7b:ce:18:4e:
c1:c9:b8:49:0e:b3:42:c4:f0:2f:17:52:d0:bc:18:
91:9b:c8:2e:77:9e:b0:07:18:60:3b:45:96:36:71:
d0:58:5d:83:b8:35:9a:f1:48:f1:bc:5c:02:d4:db:
13:90:28:0f:c0:25:4b:44:0b:89:79:a2:13:a8:f7:
5c:ff:29:aa:92:5c:25:9a:9a:cc:8a:1e:ee:be:53:
81:05:a5:84:25:e1:a0:70:15:56:cd:1f:6f:13:79:
a5:27:bb:c7:cb:94:fb:34:74:ef:99:9c:bf:99:bb:
0b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4E:39:43:90:97:09:42:E9:6E:81:24:49:B6:5A:78:59:85:42:12
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Jk45Q5CXCULpboEkSbZaeFmFQhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.170.0/23
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
14:7f:4e:35:13:4b:7f:07:83:b9:11:1b:ca:19:b0:8d:59:e2:
0f:99:dc:90:7b:02:c8:e4:34:04:82:c9:f1:e4:79:0d:47:72:
7e:e8:e2:73:da:f7:ac:32:c3:78:eb:f6:45:7f:05:62:4e:6d:
12:08:12:69:be:3c:10:8e:00:d4:a1:cb:eb:99:13:29:71:18:
91:e9:02:48:f6:66:fa:21:94:6c:80:a7:b3:f1:e3:04:e2:67:
50:bd:53:d9:a4:63:63:8e:6b:13:f1:90:80:c8:7a:8b:03:a3:
28:fc:72:36:6f:30:92:c6:87:ff:68:1b:76:81:8e:92:27:02:
d5:1d:1c:1e:d6:c4:48:77:cf:06:1b:a0:31:d3:cb:ce:72:ba:
44:9b:d3:30:58:e3:3d:d7:5b:f3:1d:ca:61:95:38:10:0e:0d:
53:40:2e:7c:18:de:2e:54:5a:24:1c:06:46:69:af:5e:73:96:
0e:1b:53:ab:b9:bd:5f:00:75:8f:7b:45:a2:84:d5:ac:63:1e:
ec:cd:40:25:66:9a:92:5a:31:ae:6c:0e:24:ff:0e:31:58:87:
df:0a:2a:76:97:da:c7:98:17:f3:aa:78:f3:a5:b6:6e:6e:86:
b9:a0:43:3b:2b:81:3f:91:e1:9c:17:7d:7a:86:bc:af:dc:14:
a8:c9:dc:a0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqhqNIhXw1lZczwpT2/zmy3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjMwOTE3MDU0MTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjRlMzk0MzkwOTcwOTQyZTk2ZTgxMjQ0OWI2NWE3ODU5ODU0MjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y0C/Xqkr8nzB/sqqs7dUU9XKce4
P3XBZ2VV67YWgJtGOVgELF7uprgzvBck40A4jeUDCWt5uwnt9emrwF1R/Ue9raPO
vP9661Zy6Rs6RFtgxLi+zISF/Oj1zV/HNvZqkNYwKsJ6OgGt9tSUYmCWcW3K62iR
Jb3BTu2op6p9BJwFQUhK3oUkIdwb8iqv9FPji3vOGE7BybhJDrNCxPAvF1LQvBiR
m8gud56wBxhgO0WWNnHQWF2DuDWa8UjxvFwC1NsTkCgPwCVLRAuJeaITqPdc/ymq
klwlmprMih7uvlOBBaWEJeGgcBVWzR9vE3mlJ7vHy5T7NHTvmZy/mbsLPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCZOOUOQlwlC6W6BJEm2WnhZhUISMB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvSms0NVE1Q1hDVUxwYm9Fa1NiWmFlRm1GUWhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLY2qAwQC
uVEcMA0GCSqGSIb3DQEBCwUAA4IBAQAUf041E0t/B4O5ERvKGbCNWeIPmdyQewLI
5DQEgsnx5HkNR3J+6OJz2vesMsN46/ZFfwViTm0SCBJpvjwQjgDUocvrmRMpcRiR
6QJI9mb6IZRsgKez8eME4mdQvVPZpGNjjmsT8ZCAyHqLA6Mo/HI2bzCSxof/aBt2
gY6SJwLVHRwe1sRId88GG6Ax08vOcrpEm9MwWOM911vzHcphlTgQDg1TQC58GN4u
VFokHAZGaa9ec5YOG1Orub1fAHWPe0WihNWsYx7szUAlZpqSWjGubA4k/w4xWIff
Cip2l9rHmBfzqnjzpbZuboa5oEM7K4E/keGcF316hryv3BSoydyg
-----END CERTIFICATE-----
Generated at Mon Sep 18 14:32:29 2023 by rpki-client on console-fra.rpki-client.org