Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/a-svNF0bSduUHzBW2SX9pKBxTUw.roa
File: a-svNF0bSduUHzBW2SX9pKBxTUw.roa (raw, json)
Hash identifier: 8/0vDNs9SnS/6e2UTWcRkJTaq9OnBKatNPGRTDCaQdg=
Subject key identifier: 6B:EB:2F:34:5D:1B:49:DB:94:1F:30:56:D9:25:FD:A4:A0:71:4D:4C
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018A428459B42A669146DD249485BD08868F
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/a-svNF0bSduUHzBW2SX9pKBxTUw.roa
Signing time: Tue 29 Aug 2023 18:18:04 +0000
ROA not before: Tue 29 Aug 2023 18:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:42:84:59:b4:2a:66:91:46:dd:24:94:85:bd:08:86:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Aug 29 18:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6beb2f345d1b49db941f3056d925fda4a0714d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a3:5d:12:8f:ad:ae:2a:72:90:ae:bd:83:67:
2a:99:ba:56:5e:65:2f:e5:b0:ff:ce:4a:b5:1e:b5:
84:7c:f3:f6:fc:3b:53:65:3a:e2:14:0d:e3:ab:70:
bb:c9:dd:d7:0a:c1:03:75:7b:7d:09:ee:fb:c7:71:
15:40:4a:f5:86:f5:57:83:44:4f:8f:0e:05:fc:f0:
87:fd:13:ff:7c:12:2a:07:cb:13:ac:60:5e:f3:63:
37:b3:31:96:78:9a:46:1d:64:db:37:f9:b4:d1:b1:
36:79:2f:83:7e:1e:37:d7:71:11:45:ae:4a:5d:bf:
6a:71:4b:9d:bb:48:02:2b:3b:2c:74:ee:dd:17:f5:
a4:8b:88:4d:6d:05:f1:43:95:8c:8f:1c:be:c4:50:
c2:02:67:d6:5f:78:ab:7e:7b:14:ac:1d:60:d3:76:
ad:62:dd:e8:88:64:05:c9:fb:10:ad:12:35:e6:37:
07:5c:75:c8:43:63:35:66:e3:80:a0:9a:46:34:64:
05:a2:5f:c9:fe:f6:a3:13:84:82:3e:a6:c3:23:2a:
f4:fa:c5:1c:ef:27:f5:85:75:59:7f:49:fb:aa:63:
ec:ba:31:cf:58:cc:e0:d9:3d:74:ac:70:55:56:8b:
39:30:12:43:30:61:6e:b5:3b:c7:ea:07:0e:b5:81:
2f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EB:2F:34:5D:1B:49:DB:94:1F:30:56:D9:25:FD:A4:A0:71:4D:4C
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/a-svNF0bSduUHzBW2SX9pKBxTUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
44:86:ff:48:90:3a:16:0e:26:75:68:15:93:19:b6:ed:74:03:
e0:70:eb:f6:25:a8:13:d6:25:f5:c5:c7:62:19:2b:f0:b8:82:
a6:ca:7f:fc:a5:b6:96:94:ec:40:2f:e3:3e:15:1c:e0:d0:ce:
28:45:46:08:fd:db:07:87:94:26:4b:af:0c:7f:af:67:e8:de:
2e:56:ee:f8:93:73:e1:a3:af:61:ba:71:6f:c6:c5:54:65:df:
e6:9d:c1:01:50:cb:ef:29:3a:c3:b6:7f:12:5a:05:d9:9a:82:
96:bd:d5:c2:b2:2e:b4:b4:b5:b0:a5:e2:e7:51:73:45:61:b6:
f0:99:b7:79:7b:8d:41:8c:62:a3:2f:15:56:3b:7e:b9:6c:97:
ae:c6:cd:80:57:6b:21:02:df:bf:dd:70:ee:97:43:93:92:89:
80:00:c0:8b:67:4a:00:ee:cb:7a:a1:58:0f:b3:ba:14:42:0e:
b7:06:c2:40:de:fc:9c:df:3b:15:a0:b6:fa:42:3d:dc:19:32:
d6:ed:9a:06:fb:d3:a4:1b:24:2c:e1:0b:ad:17:5b:df:24:78:
17:78:65:b0:2c:90:f8:20:84:48:f0:2f:a0:c3:ee:a1:ff:0a:
bd:6b:92:9d:d3:ca:de:e4:77:9d:5f:17:7d:b7:7b:a6:73:8e:
c5:d9:4b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 07:43:03 2023 by rpki-client on console-fra.rpki-client.org