Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/brJYlpjZqWzqGnViG2CoMtrvrXw.roa
File: brJYlpjZqWzqGnViG2CoMtrvrXw.roa (raw, json)
Hash identifier: uAciuSA8ltdc1cr3V8AkOgwHiF8JuR1ruEsMkz3fJHQ=
Subject key identifier: 6E:B2:58:96:98:D9:A9:6C:EA:1A:75:62:1B:60:A8:32:DA:EF:AD:7C
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018AB13931F5B9582E407B13CCA7F4173651
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/brJYlpjZqWzqGnViG2CoMtrvrXw.roa
Signing time: Wed 20 Sep 2023 06:13:50 +0000
ROA not before: Wed 20 Sep 2023 06:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
188.64.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Sep 2023 06:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:39:31:f5:b9:58:2e:40:7b:13:cc:a7:f4:17:36:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Sep 20 06:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eb2589698d9a96cea1a75621b60a832daefad7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:b9:78:78:21:17:a4:68:4f:84:bf:a0:83:
18:12:7e:c3:49:88:67:55:63:7b:7c:5f:b8:c4:aa:
4f:70:1b:49:40:97:92:2f:97:f5:95:38:6b:7b:e8:
19:af:33:f5:ba:3f:b2:08:81:ba:59:c2:97:70:09:
c0:f8:79:fa:bf:03:dd:16:ab:8e:e2:4a:be:39:e4:
13:a5:d4:95:3c:65:c7:f5:b4:93:66:93:4c:11:c6:
54:1d:a6:80:10:b8:c3:f7:d9:11:5f:2c:7e:a2:50:
54:65:6c:9a:0f:29:9b:f4:ae:fb:ec:f1:4b:31:91:
3e:b7:24:e6:20:b1:54:20:d0:c3:18:a0:a4:3a:b2:
1f:80:e0:4a:ba:7b:26:f8:9f:49:a9:1c:2f:bc:33:
b0:8c:2e:11:5c:36:28:56:90:dc:fe:d8:42:4b:90:
23:a2:c9:8c:47:a3:26:73:56:91:15:95:97:6f:84:
ce:c9:73:a6:83:7e:35:03:5b:75:50:0a:5c:bb:c0:
c6:91:16:c1:53:54:ec:b1:14:3a:6e:9a:35:6b:8f:
32:bd:c3:f9:72:32:cb:3f:90:3c:ca:71:a9:ba:3d:
7a:3d:c2:5d:12:5b:8d:a0:d7:3f:ee:d2:a4:3e:86:
82:a2:f3:b4:26:18:96:69:17:b4:e7:f8:9c:be:4c:
79:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B2:58:96:98:D9:A9:6C:EA:1A:75:62:1B:60:A8:32:DA:EF:AD:7C
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/brJYlpjZqWzqGnViG2CoMtrvrXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
188.64.108.0/22
Signature Algorithm: sha256WithRSAEncryption
08:cb:52:0c:cc:45:18:7d:80:0e:0a:c2:7f:14:f3:2d:a8:6e:
c1:4e:c0:67:f4:35:88:94:34:f0:70:2e:71:02:af:77:61:ab:
cf:c4:b0:b9:76:f4:9e:42:11:ff:b0:76:70:83:ba:58:7d:06:
26:70:60:cb:54:7e:aa:d1:a6:e4:d4:e8:1c:d5:0e:a8:7f:1e:
82:1f:96:34:b7:a7:71:c8:ba:66:46:63:c4:65:70:42:ff:b6:
56:5c:e5:5a:54:b9:b8:d8:86:1b:1a:07:ca:42:3a:7a:0f:f8:
3e:ec:75:2f:d0:8f:8a:fe:c1:88:12:c4:0a:57:3f:fc:e9:4d:
09:1b:f8:57:00:d4:1b:82:6c:b7:9d:42:c3:0f:f7:d6:5a:a8:
03:fe:a2:6b:f9:bd:ef:e6:e7:49:eb:3e:a3:86:14:39:b3:05:
db:d0:8a:6d:59:22:fe:ea:ec:13:2f:b6:cd:d8:c1:1f:6a:27:
bc:04:9f:de:4f:db:e8:ce:b5:4e:e5:46:48:0b:dc:d9:f1:ab:
25:de:f3:ef:ef:a1:7d:45:27:d8:8f:90:82:cd:03:99:ac:43:
1a:6f:a7:1e:cd:9b:c0:f0:8b:15:cc:a9:cf:bf:5e:3c:34:f5:
0b:99:11:e0:e0:b0:ae:0e:93:bf:d7:36:69:11:3a:d2:c9:d5:
88:bd:47:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org