Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/OMyLsDUCrIKCn92NTcf62tiBQsE.roa
File: OMyLsDUCrIKCn92NTcf62tiBQsE.roa (raw, json)
Hash identifier: QGOtdG74kEB7i2aATwwQtGCdKTpGPl32BjOabV/8mLw=
Subject key identifier: 38:CC:8B:B0:35:02:AC:82:82:9F:DD:8D:4D:C7:FA:DA:D8:81:42:C1
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018BE715045D8AF94EC8337F94898C8054EF
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/OMyLsDUCrIKCn92NTcf62tiBQsE.roa
Signing time: Sun 19 Nov 2023 10:16:36 +0000
ROA not before: Sun 19 Nov 2023 10:16:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e7:15:04:5d:8a:f9:4e:c8:33:7f:94:89:8c:80:54:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Nov 19 10:16:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38cc8bb03502ac82829fdd8d4dc7fadad88142c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:ef:88:91:63:7a:c9:00:16:94:03:75:fb:
a4:ee:3c:17:81:19:03:3a:83:be:ac:89:28:eb:fb:
c2:58:d7:48:81:51:e2:30:8e:de:ff:f1:b2:fd:88:
84:c8:12:97:80:84:f1:b9:af:41:fc:57:27:7b:05:
4e:04:28:d4:f1:0c:f0:48:55:1e:6e:a0:e6:1c:15:
b5:22:0b:d5:97:53:f1:8a:78:8f:c7:86:55:c1:2c:
2f:67:e0:c1:20:01:8b:b0:57:f3:f4:ff:90:7d:8d:
30:f3:c9:00:bc:35:7e:3b:74:9a:12:8b:57:3b:4c:
94:63:c5:8e:92:d9:b3:41:e3:2a:ef:f6:46:e2:16:
f6:4b:4e:fe:23:f8:e0:07:b5:83:3e:0b:00:41:bf:
9d:8d:d1:29:42:ee:ca:15:f6:27:10:5c:38:6d:0a:
2a:40:ae:84:f3:1b:6f:8f:21:5e:a5:57:3b:7c:6b:
80:17:22:6c:ee:0d:f0:f9:d2:4e:f1:d1:f2:e2:3f:
42:c7:4d:93:3a:bc:bd:7d:2d:76:f5:c2:30:d1:6a:
00:90:2c:bb:6f:cf:42:84:4a:3f:c9:db:53:d8:5d:
7d:d9:bc:42:56:0e:79:63:22:d9:ba:72:66:b8:bb:
4b:2a:55:60:52:bf:f8:05:a7:ad:65:4d:51:40:dd:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CC:8B:B0:35:02:AC:82:82:9F:DD:8D:4D:C7:FA:DA:D8:81:42:C1
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/OMyLsDUCrIKCn92NTcf62tiBQsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:aa:62:cc:ae:89:6c:c1:39:dd:73:8b:ac:28:b1:a4:bb:bc:
af:2f:45:76:2b:2b:d1:cf:91:3c:86:71:b9:6f:d5:d8:05:2f:
b2:cd:30:3c:33:11:5b:10:c2:82:86:67:64:6e:2e:cf:24:ab:
92:ff:2a:24:f0:e2:b4:75:d6:cb:65:67:6d:54:a8:71:c7:e4:
d9:99:d9:bd:d3:67:90:4c:29:29:d4:8a:5b:2a:c9:1a:4c:59:
fb:f5:d8:14:b1:26:19:7d:f6:bd:3b:84:06:cd:b2:7b:78:f7:
5f:83:de:a9:61:c4:8f:8b:44:28:cb:8e:9a:b8:6e:e9:ad:99:
f4:0a:1e:ee:9d:5b:c3:ac:89:15:fd:d1:54:5b:09:7d:0c:bb:
fd:fa:d3:b5:f4:bb:4a:f3:f8:5d:4c:f6:9e:bc:31:f8:ba:d4:
a3:8b:ea:f7:f4:69:e2:ce:1a:88:07:a2:8a:39:fe:7b:18:e8:
be:03:09:5c:25:96:83:67:bf:8a:72:97:0f:01:03:b1:8b:fd:
1f:db:3a:35:13:e0:00:7c:21:f4:b7:48:3f:9f:b2:57:df:62:
f4:1e:b3:34:52:ba:35:62:55:8b:09:bc:85:a0:e1:55:a1:12:
69:98:b7:ca:60:28:c0:92:06:d1:20:5c:10:f8:61:d0:36:c9:
20:2a:6c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 11:08:57 2023 by rpki-client on console-ams.rpki-client.org