Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/bprzp5D76fmusqnAnwZiep_fuj8.roa
File: bprzp5D76fmusqnAnwZiep_fuj8.roa (raw, json)
Hash identifier: odylHnFgP6h67n7tROImPxZsegyiAmUiG6XC4h4ZQjI=
Subject key identifier: 6E:9A:F3:A7:90:FB:E9:F9:AE:B2:A9:C0:9F:06:62:7A:9F:DF:BA:3F
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018B93EA1F937139E0586A41E0C3B2489CC5
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/bprzp5D76fmusqnAnwZiep_fuj8.roa
Signing time: Fri 03 Nov 2023 06:41:16 +0000
ROA not before: Fri 03 Nov 2023 06:41:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:ea:1f:93:71:39:e0:58:6a:41:e0:c3:b2:48:9c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Nov 3 06:41:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e9af3a790fbe9f9aeb2a9c09f06627a9fdfba3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:37:ed:de:ab:00:e4:ad:57:6a:5d:cf:00:6e:
ad:a2:c1:fb:d2:ca:db:76:f3:c5:c7:fa:1e:b8:67:
29:70:9f:60:c1:e0:e4:92:da:8d:5a:c9:32:4e:ab:
9c:0c:b0:7f:9a:72:e5:a4:52:2c:16:d5:38:8a:e0:
7e:5e:21:aa:0a:b7:34:e8:45:f6:08:b3:dd:20:59:
3f:6f:1e:d1:c4:5f:e3:ff:48:f6:85:e6:63:ad:8d:
53:6e:3f:74:01:29:dc:22:05:1e:84:ae:3f:f0:96:
d8:42:2c:0d:9e:6c:0b:d8:5e:72:d3:ec:03:99:a7:
bc:2e:ad:58:af:0c:ce:23:bd:ab:5b:c9:b2:4a:d3:
f9:9a:81:dd:99:55:c1:d0:37:1e:4d:4e:cd:64:cc:
fd:a3:e2:ca:2c:73:e7:f2:5d:d7:25:17:9d:94:5b:
cf:35:15:b2:35:f3:7a:6b:1d:ec:c9:bb:21:99:c6:
6d:77:44:de:b7:f1:77:f3:1e:44:3d:33:c1:8d:3a:
f5:c8:b7:99:69:5c:38:95:4c:ff:c4:30:7d:cc:bb:
35:18:59:9a:b1:ea:4f:38:43:7e:05:79:db:a1:3f:
6d:87:48:77:c9:99:4c:11:00:15:2a:04:bc:0a:3b:
76:4f:ae:73:08:e8:47:ad:d1:eb:a4:96:c4:ad:a7:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9A:F3:A7:90:FB:E9:F9:AE:B2:A9:C0:9F:06:62:7A:9F:DF:BA:3F
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/bprzp5D76fmusqnAnwZiep_fuj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
71:6a:11:6f:0f:da:23:23:0e:51:a3:67:b4:9d:d6:23:f4:27:
40:e9:dd:7e:0b:88:72:8f:5b:3e:3a:1f:2b:48:73:7a:46:4c:
d3:58:17:17:e8:0a:4b:ea:c2:aa:51:c7:61:00:6e:8f:c2:e8:
3b:fe:76:2b:9f:c0:dd:df:d7:f5:92:df:6f:2d:4b:06:ae:24:
6d:7a:e4:c6:59:99:25:ac:e6:89:a6:87:92:a1:c9:79:40:cb:
bf:8c:57:5e:6a:f9:36:27:d9:88:53:1d:96:16:e9:d2:2f:4c:
a1:27:31:71:51:31:13:b9:4a:0c:4c:75:ab:4e:8a:ef:2d:79:
48:8c:4a:37:25:13:26:8d:c4:74:13:05:30:be:b2:91:93:00:
c2:84:76:d7:c4:95:e3:96:f5:e7:63:71:31:c5:41:7f:cb:fd:
6b:1d:36:48:d4:42:cd:68:16:4f:ec:7a:a9:96:14:12:95:ac:
3d:df:a3:7f:61:51:30:7c:73:21:d9:77:bc:24:6e:a0:bc:a7:
23:df:a7:36:82:02:9c:dc:04:41:97:c3:b3:a2:8c:a7:d2:68:
4e:1c:22:c7:30:86:32:fc:bd:57:d5:9d:52:68:f6:d7:21:fb:
18:05:8e:20:6b:7f:db:82:71:c1:af:73:e0:ec:69:09:05:00:
b0:c0:74:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 00:38:40 2023 by rpki-client on console-fra.rpki-client.org