Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ZGD3s6tWOVLnfdceDQPZlxr3wV4.roa
File: ZGD3s6tWOVLnfdceDQPZlxr3wV4.roa (raw, json)
Hash identifier: d6t/2yPDLLn6sehlTE0m0yaUiGzM4CwMSgwAhX1ghrE=
Subject key identifier: 64:60:F7:B3:AB:56:39:52:E7:7D:D7:1E:0D:03:D9:97:1A:F7:C1:5E
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01881DE99E3B751B19BE5B88E583DCC4B528
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ZGD3s6tWOVLnfdceDQPZlxr3wV4.roa
Signing time: Mon 15 May 2023 05:37:09 +0000
ROA not before: Mon 15 May 2023 05:37:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
185.114.144.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 10:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1d:e9:9e:3b:75:1b:19:be:5b:88:e5:83:dc:c4:b5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: May 15 05:37:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6460f7b3ab563952e77dd71e0d03d9971af7c15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:79:d9:48:8f:1d:0b:64:57:87:71:8a:0f:
81:fa:1b:0f:c5:3f:87:05:bf:59:b0:f0:5b:bb:b8:
9b:db:d6:e3:fd:80:ee:b9:10:9d:12:85:ca:3c:a4:
10:28:ce:79:48:f1:e5:20:ca:3a:0c:25:6f:cb:a0:
85:7e:47:ef:12:6e:98:25:0a:0a:0c:a5:19:66:20:
d3:a2:57:d7:d5:2f:8e:06:3c:80:b8:18:54:f4:0d:
34:cc:ee:44:65:18:38:a4:b1:03:a4:48:c8:64:3a:
11:11:04:41:7b:df:61:bb:74:77:c4:73:9f:1b:9f:
36:35:c7:8e:83:08:50:09:fe:95:78:5b:df:02:ab:
17:c4:a6:09:d8:6f:31:1a:63:2c:ee:54:a9:18:34:
ad:30:fa:08:6d:8b:4a:b9:45:e9:ce:63:ed:33:ef:
9e:0e:0c:c2:9d:8f:00:d8:1f:47:bd:d2:a5:41:ba:
d3:38:b9:14:19:de:27:19:6b:f3:24:ff:e6:bc:e4:
aa:23:1e:83:28:2b:b6:aa:40:5d:3f:b5:6f:95:bc:
2c:0f:f4:b1:9c:01:c4:04:16:a8:84:7b:19:c1:51:
53:86:a7:47:08:88:ce:7b:53:f8:e8:44:94:49:56:
48:5d:b4:24:ac:b9:11:8e:8a:bc:18:a3:52:53:48:
2c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:F7:B3:AB:56:39:52:E7:7D:D7:1E:0D:03:D9:97:1A:F7:C1:5E
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ZGD3s6tWOVLnfdceDQPZlxr3wV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
185.114.144.0/22
Signature Algorithm: sha256WithRSAEncryption
11:f5:97:fb:30:28:15:7c:c2:ab:10:0d:0d:96:79:5a:e4:55:
89:8a:b9:59:e4:5f:5d:b8:9c:b3:8a:79:75:5b:78:e9:d6:f4:
26:78:df:ac:9c:61:0f:fe:0c:5b:cb:fb:f8:4c:92:65:f9:aa:
76:6f:2c:02:7c:a7:dc:0c:bf:be:be:a7:9a:f4:53:88:ee:50:
2b:2a:86:b9:1f:7a:8d:09:1f:2b:2b:0b:9b:df:ce:22:c2:b9:
b9:60:06:b1:d7:86:f4:4d:75:f1:d1:7d:a6:db:08:59:57:a0:
c5:4b:bc:3c:9f:80:12:30:a5:ab:26:28:ce:95:f3:67:a2:ae:
ff:7a:fc:ec:44:86:8b:f0:c0:da:c5:bd:08:98:50:e4:06:07:
ee:68:6a:e4:df:a8:95:08:4a:77:79:75:91:33:98:7b:7a:3e:
b0:b1:ed:e5:72:af:82:8a:c7:e6:e9:e6:66:55:bd:05:56:aa:
7e:15:22:6a:de:3e:4e:7f:bd:a1:66:12:da:0e:64:d8:ba:84:
ea:dd:1a:37:6f:da:f1:6f:fc:4a:02:66:7b:c4:15:44:72:7a:
8e:a6:82:1f:98:d8:7d:38:56:bf:9a:6e:cd:89:78:3b:4f:7d:
3c:49:6d:92:91:de:1a:4f:92:e9:56:f5:95:8f:70:9e:29:92:
24:06:2d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org