Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/QTDLbfNjIkjgEm1stMMbVG8pyJ8.roa
File: QTDLbfNjIkjgEm1stMMbVG8pyJ8.roa (raw, json)
Hash identifier: wq7mjHGOPQtTtGjv3NZUDaZbp8rKoQ+6hg/2NBgXKoE=
Subject key identifier: 41:30:CB:6D:F3:63:22:48:E0:12:6D:6C:B4:C3:1B:54:6F:29:C8:9F
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018C8CD722043A161B5EE6745899C4208F10
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/QTDLbfNjIkjgEm1stMMbVG8pyJ8.roa
Signing time: Thu 21 Dec 2023 14:45:58 +0000
ROA not before: Thu 21 Dec 2023 14:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
185.179.218.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:d7:22:04:3a:16:1b:5e:e6:74:58:99:c4:20:8f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Dec 21 14:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4130cb6df3632248e0126d6cb4c31b546f29c89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:fc:4c:83:5f:e8:f1:e4:c7:2b:e4:f8:32:
eb:db:ce:c0:d7:db:b3:57:f3:6f:8e:d1:e9:28:86:
60:64:e2:72:12:e7:fb:47:e4:8d:f8:6a:cd:be:b3:
5a:13:03:c3:ec:d1:d4:f7:cc:0d:48:be:0e:50:e6:
3e:39:fe:db:73:0d:26:e4:50:c9:6d:96:07:6e:38:
af:eb:83:fd:f3:63:99:70:e4:b4:0d:8f:9c:40:62:
63:49:9d:a5:39:b7:f0:69:a4:3e:9b:c5:7e:6d:99:
9a:3a:1c:7d:fc:a5:b7:ee:6a:9e:ac:f0:d5:2e:96:
d4:db:81:89:d7:a7:86:be:28:7d:b2:fa:55:d1:ae:
a2:51:60:1c:72:61:f7:e7:6e:b4:b7:3d:09:c7:6d:
a2:1e:ef:74:f8:78:9b:81:57:c2:81:29:43:9e:65:
01:ee:9c:6c:c3:99:66:ad:6a:28:a4:7d:39:15:65:
79:a7:06:97:97:dc:ee:6f:4a:9b:64:2e:42:c5:28:
36:1d:8d:ca:80:da:df:c5:3c:f1:cf:82:5b:d6:7e:
b7:9e:57:ef:cd:19:9f:de:0b:eb:e0:43:dc:a3:e0:
59:91:99:a7:d3:40:6a:9c:0e:7e:02:bd:52:04:ba:
96:a4:1b:45:36:de:a9:e4:82:85:62:82:e7:76:ea:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:30:CB:6D:F3:63:22:48:E0:12:6D:6C:B4:C3:1B:54:6F:29:C8:9F
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/QTDLbfNjIkjgEm1stMMbVG8pyJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
185.179.218.0/23
Signature Algorithm: sha256WithRSAEncryption
34:2f:d9:71:f6:db:5b:e8:46:4e:34:94:b0:61:3b:7d:b6:07:
a8:1d:bf:34:4e:cc:6a:ea:2b:0e:26:30:c8:85:9a:4b:c9:98:
de:0b:3c:47:36:7c:b8:d2:11:a6:19:35:e0:52:20:7b:2c:35:
2e:a3:cf:66:f4:59:ff:e9:9f:cf:5a:45:79:ee:30:06:ab:d6:
9b:28:3b:98:be:47:a9:ea:f6:30:47:6d:e2:48:66:1d:68:4d:
09:ee:95:78:f7:23:3f:94:b2:05:bb:ec:79:45:13:f1:17:78:
7a:df:1b:80:62:3a:44:dc:b1:6d:10:64:b8:7a:db:0c:f3:10:
dd:31:ad:be:63:23:89:4b:94:54:72:9d:f9:a8:51:53:33:9a:
0e:4d:3b:3c:fe:e5:24:6e:e4:ce:dc:19:9a:4f:8c:c3:09:ae:
ea:21:a5:4a:97:3e:b8:93:9f:14:04:65:95:94:99:b7:72:a2:
d3:8d:76:ee:2c:3c:80:43:79:29:7a:36:56:a0:04:64:e1:3a:
67:c8:ad:10:c7:5c:0e:a7:ee:42:07:2b:61:23:f1:1e:eb:c1:
62:e2:33:80:3e:02:68:64:35:e0:af:5e:00:9c:0e:e4:ef:34:
54:52:d1:86:d0:e1:cf:0a:2c:e0:e0:d7:43:fb:02:4b:ed:ba:
2c:58:8a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 10:26:25 2023 by rpki-client on console-ams.rpki-client.org