Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/RsdSNgG6_XmHui8BsToH45qteIk.roa
File: RsdSNgG6_XmHui8BsToH45qteIk.roa (raw, json)
Hash identifier: +9E+EwDaryEZEf/TIAwg/UkFSuRLRIO9LvHgovGKuX4=
Subject key identifier: 46:C7:52:36:01:BA:FD:79:87:BA:2F:01:B1:3A:07:E3:9A:AD:78:89
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018DBB145A5F00BDF32452C267C9E5CF18F9
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/RsdSNgG6_XmHui8BsToH45qteIk.roa
Signing time: Sun 18 Feb 2024 07:18:09 +0000
ROA not before: Sun 18 Feb 2024 07:18:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 10:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bb:14:5a:5f:00:bd:f3:24:52:c2:67:c9:e5:cf:18:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Feb 18 07:18:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46c7523601bafd7987ba2f01b13a07e39aad7889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:80:6a:16:02:d9:cf:97:b1:5b:50:27:32:2c:
35:14:e1:41:0e:83:d1:23:58:ae:52:f9:69:ab:4f:
fd:c9:fc:ab:19:e1:81:f5:7f:46:bb:6d:31:48:73:
ea:7b:05:09:b0:d1:3b:a0:45:37:4a:fc:d7:39:b9:
89:08:bd:dc:dc:c4:36:8d:4e:f1:2f:8e:94:d5:6d:
50:27:4a:e0:70:38:37:20:56:ff:fe:d2:d1:02:f6:
11:28:1e:21:e9:29:39:f1:a3:9c:8c:de:a8:35:03:
6d:1a:40:66:17:5b:db:83:6e:df:4e:d1:3e:44:30:
7b:69:bc:27:5f:83:68:51:31:4f:b6:29:0b:5f:cb:
d8:ed:45:5a:f3:0e:31:04:51:b5:bb:18:13:66:53:
37:6d:e2:d6:d1:b4:23:af:0a:65:6a:82:c1:33:4e:
2b:e3:47:ef:19:83:dd:ba:41:50:13:93:ba:e4:98:
31:43:46:56:9c:db:4e:9c:e7:42:3f:4c:eb:18:18:
aa:af:3e:f6:af:68:ad:f5:72:cf:9d:ce:57:44:a1:
f6:68:b8:57:f6:e2:15:60:6b:e3:aa:21:cb:7d:49:
d5:10:2a:e6:e2:19:2f:f6:5f:2c:9f:14:02:24:ca:
2c:31:e7:95:e0:f0:e0:c0:bc:63:51:96:55:b3:e5:
0a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C7:52:36:01:BA:FD:79:87:BA:2F:01:B1:3A:07:E3:9A:AD:78:89
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/RsdSNgG6_XmHui8BsToH45qteIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:75:6c:63:cf:1a:62:a1:09:a4:4f:c0:6e:67:02:6a:a7:75:
54:95:0d:eb:86:fa:73:57:ec:64:27:44:7a:87:85:0d:69:68:
f3:eb:f1:f3:c4:05:93:f2:59:54:26:d9:f3:1f:88:a8:e1:81:
01:36:b4:58:e5:4c:ff:67:a4:2d:97:d1:5b:c1:31:69:1d:1e:
be:21:df:43:32:c8:46:67:08:91:51:e8:fe:d4:99:fc:8a:0f:
26:a2:54:61:1f:67:74:ec:d3:45:2a:69:a2:00:58:ce:47:0f:
7e:91:c6:24:53:c9:d8:be:57:89:31:5a:4d:e6:25:30:cb:69:
82:37:d8:64:db:2e:d6:e8:1b:a1:51:2c:c5:11:04:13:53:e0:
b1:a9:d4:13:f7:59:55:1c:9e:40:43:33:91:0a:34:4b:a5:1d:
6f:ae:fe:78:09:ca:c4:7b:15:b1:4c:f6:d9:71:62:04:1f:90:
e4:d2:43:60:07:a0:4c:70:a3:93:cd:01:c0:1e:da:0f:97:9d:
82:1a:9f:68:1b:59:0a:09:d3:44:9d:ef:12:a7:bc:e1:55:b9:
5b:c3:25:6d:ce:b4:16:db:9d:ef:b6:e2:48:3d:67:73:ee:e0:
65:0e:1f:86:c8:6a:c5:6e:88:05:50:9d:91:1c:b9:f3:35:e8:
b4:43:49:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 14:19:02 2024 by rpki-client on console-ams.rpki-client.org