Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/U-WYw2aFQF1bksK7_MJQKVOR5sA.roa
File: U-WYw2aFQF1bksK7_MJQKVOR5sA.roa (raw, json)
Hash identifier: J4jGn15i+W9PjwNd2R8kmkIG0gY5Djr3EuP9oRdvY9o=
Subject key identifier: 53:E5:98:C3:66:85:40:5D:5B:92:C2:BB:FC:C2:50:29:53:91:E6:C0
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0190BDE4012735500A0CF7E4205694AC892E
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/U-WYw2aFQF1bksK7_MJQKVOR5sA.roa
Signing time: Tue 16 Jul 2024 23:32:34 +0000
ROA not before: Tue 16 Jul 2024 23:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bd:e4:01:27:35:50:0a:0c:f7:e4:20:56:94:ac:89:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jul 16 23:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53e598c36685405d5b92c2bbfcc250295391e6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:db:0f:2e:9b:d2:cc:d3:9f:4e:ec:da:ea:
96:03:4e:4e:c3:9d:06:ec:74:09:6d:56:72:0e:fd:
14:97:18:78:83:ec:00:fa:85:8e:83:e6:47:83:aa:
21:3b:27:f7:4a:e3:1f:ce:37:54:19:6f:a8:5b:8d:
02:35:8e:1f:4a:39:f4:e7:54:95:67:35:01:57:16:
96:91:29:9f:f6:1f:25:c8:f3:83:ae:22:ed:3b:e6:
c0:75:fb:9b:41:29:80:b5:51:b7:6c:3c:f7:11:a6:
71:7d:d3:07:76:b9:a2:10:1a:62:e2:e3:ea:4e:bb:
a0:65:cc:7f:12:b6:80:e9:04:1b:a2:af:16:66:00:
59:62:ff:40:bf:8c:66:6a:df:df:39:53:81:59:dc:
f0:b4:99:34:87:67:e6:f5:fe:82:ea:c4:30:2e:fd:
23:45:a0:7e:f7:3c:1f:75:57:26:e1:a3:a8:4d:5f:
ca:d5:00:94:5c:ee:f4:69:e3:34:cf:0f:a6:f2:91:
21:01:de:eb:e0:84:e8:78:98:fb:34:a2:4d:71:7c:
c7:02:9b:82:98:94:8e:6f:2a:bc:c5:d4:84:9f:73:
28:7f:43:7a:a6:34:23:70:f2:fe:56:50:e9:e9:0f:
e3:29:40:aa:f1:96:a9:11:ac:47:ad:ef:e3:0b:e8:
ec:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E5:98:C3:66:85:40:5D:5B:92:C2:BB:FC:C2:50:29:53:91:E6:C0
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/U-WYw2aFQF1bksK7_MJQKVOR5sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:17:ae:47:af:5e:ff:36:c0:9b:1b:54:fe:38:c1:0a:5b:d4:
94:13:58:06:62:f2:94:ce:66:ae:32:6a:31:ad:28:a7:f6:d9:
bd:f3:fa:0c:b3:52:f0:84:07:ef:29:0b:20:0d:4b:d5:20:f2:
0e:6d:e0:9b:ad:bc:08:c9:23:03:c6:cd:ff:4c:b5:f5:b7:d9:
74:5d:69:63:2b:a2:fc:22:57:7b:65:f5:82:76:57:35:a9:52:
43:85:08:39:09:91:c0:5c:35:2b:42:ff:b9:fe:ba:41:e4:83:
ba:cb:cf:27:86:ef:4b:5e:9d:75:3f:6c:51:b7:d3:a4:b7:13:
28:9f:1b:9d:f0:33:ef:23:33:d1:7a:34:b3:7d:be:87:5b:a7:
77:0f:64:d3:44:d1:3a:ba:8c:fc:76:24:f2:c3:aa:57:cb:c8:
f3:5b:c3:52:26:cc:f6:51:55:ee:6d:15:8c:2f:18:63:19:7d:
27:1c:dd:6c:90:56:94:76:31:5e:94:c3:cf:57:b5:1b:6f:59:
42:3f:82:ee:5a:61:ca:4a:c6:71:69:b8:d8:38:d3:65:75:72:
e2:df:01:7f:de:f5:35:ef:d7:03:70:af:30:c0:42:2c:e5:11:
f5:ab:b3:12:40:c6:35:bd:26:ce:43:b2:47:56:6e:45:a8:7f:
15:0c:3b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:40 2025 by rpki-client