Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/dspfwcjFTueOYiDPh5VvQOmbwj4.roa
File: dspfwcjFTueOYiDPh5VvQOmbwj4.roa (raw, json)
Hash identifier: Scv07q0nW5O8AG/+NQSFcS6fARLf7E96PYZPlL3HuyU=
Subject key identifier: 76:CA:5F:C1:C8:C5:4E:E7:8E:62:20:CF:87:95:6F:40:E9:9B:C2:3E
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018CB4AD30989FB204317DFC65F3703FF7DA
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/dspfwcjFTueOYiDPh5VvQOmbwj4.roa
Signing time: Fri 29 Dec 2023 08:24:58 +0000
ROA not before: Fri 29 Dec 2023 08:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
45.141.168.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:ad:30:98:9f:b2:04:31:7d:fc:65:f3:70:3f:f7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Dec 29 08:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76ca5fc1c8c54ee78e6220cf87956f40e99bc23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:22:54:4a:12:37:c6:fb:a5:52:8c:5d:ab:
d8:8f:89:c6:ad:eb:5a:18:ea:60:b2:b0:5a:39:af:
2b:b6:f9:9a:94:3c:47:a8:12:b8:48:6f:b2:f5:1d:
94:9d:5e:c7:1c:a8:11:58:91:1f:ec:90:f0:d0:77:
07:69:82:e4:b1:24:f6:01:d5:6f:fb:33:f3:0f:1d:
c9:4a:63:bf:e0:f2:52:0e:5f:2b:60:43:3c:2a:ba:
f3:7c:73:fe:e5:ce:01:22:83:47:6d:23:97:86:85:
35:d2:54:a9:d3:3f:37:45:30:9c:31:40:6b:c5:9d:
6d:7d:9b:f1:57:1d:b7:bf:f2:f6:82:3e:15:63:23:
b2:eb:8d:d9:99:b9:ec:0b:e2:dd:e7:6d:30:1e:c9:
f7:25:17:63:cf:34:f3:4d:3a:11:57:37:19:80:1f:
0c:1b:a3:f2:b7:82:fe:a9:c1:99:ee:de:f2:37:09:
97:30:67:c0:56:81:31:36:24:4d:84:8a:d3:a0:2f:
94:52:21:5a:cb:e3:84:c0:d3:9e:a1:34:29:d6:79:
8d:09:67:03:c9:65:16:ca:28:bd:32:c3:fd:66:f6:
b3:5b:25:4a:ac:b5:ab:db:0e:84:ea:e3:70:04:01:
dd:06:55:d2:87:3f:bb:0d:89:bc:f6:2b:dd:c2:53:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CA:5F:C1:C8:C5:4E:E7:8E:62:20:CF:87:95:6F:40:E9:9B:C2:3E
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/dspfwcjFTueOYiDPh5VvQOmbwj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.168.0/23
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
03:fa:b9:e8:1e:6b:c1:44:42:f1:00:a7:a8:5a:ae:c3:6e:39:
7a:35:fa:f2:ec:6c:88:fa:d1:5c:c4:b3:f1:d2:8b:6e:8d:a5:
13:a1:86:41:01:97:0d:6b:27:33:ef:06:59:59:b9:9a:ba:9d:
e4:5b:98:7d:56:89:a0:b7:a0:4b:7a:fb:16:a4:12:50:19:51:
4f:be:48:4e:e0:66:6d:4f:61:f9:b9:1a:a5:8f:a7:bf:ff:64:
d2:1e:00:ac:4f:af:32:3d:73:ae:e3:f4:95:75:18:32:b5:e5:
70:04:c2:6c:66:79:9f:ea:d7:ca:d0:9c:ce:54:09:ec:ff:05:
12:97:0a:9a:76:57:de:63:b0:26:1f:51:4b:41:a2:b0:86:5b:
b8:3f:32:27:c1:1d:05:64:14:ba:92:8a:99:ca:8e:5b:23:0e:
be:2f:cc:95:b3:93:d8:17:75:ff:07:36:09:04:68:74:55:6b:
3d:ec:03:5c:45:95:1f:e9:22:ce:73:ad:5a:f8:7c:4c:27:10:
7a:d2:f3:08:fd:5f:30:9a:79:f1:36:aa:d6:e1:f7:20:6d:75:
9c:05:d5:5a:00:19:6d:e2:e5:0a:7b:ee:2d:8a:4d:97:ff:d4:
1a:86:4e:4e:dc:64:09:c7:18:2b:13:d5:72:c7:00:43:08:d3:
ff:f2:ed:60
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYy0rTCYn7IEMX38ZfNwP/faMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjMxMjI5MDgyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmNhNWZjMWM4YzU0ZWU3OGU2MjIwY2Y4Nzk1NmY0MGU5OWJjMjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiEiVEoSN8b7pVKMXavYj4nGreta
GOpgsrBaOa8rtvmalDxHqBK4SG+y9R2UnV7HHKgRWJEf7JDw0HcHaYLksST2AdVv
+zPzDx3JSmO/4PJSDl8rYEM8KrrzfHP+5c4BIoNHbSOXhoU10lSp0z83RTCcMUBr
xZ1tfZvxVx23v/L2gj4VYyOy643ZmbnsC+Ld520wHsn3JRdjzzTzTToRVzcZgB8M
G6Pyt4L+qcGZ7t7yNwmXMGfAVoExNiRNhIrToC+UUiFay+OEwNOeoTQp1nmNCWcD
yWUWyii9MsP9ZvazWyVKrLWr2w6E6uNwBAHdBlXShz+7DYm89ivdwlMbLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHbKX8HIxU7njmIgz4eVb0Dpm8I+MB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvZHNwZndjakZUdWVPWWlEUGg1VnZRT21id2o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLY2oAwQC
uVEcMA0GCSqGSIb3DQEBCwUAA4IBAQAD+rnoHmvBRELxAKeoWq7Dbjl6Nfry7GyI
+tFcxLPx0otujaUToYZBAZcNaycz7wZZWbmaup3kW5h9Vomgt6BLevsWpBJQGVFP
vkhO4GZtT2H5uRqlj6e//2TSHgCsT68yPXOu4/SVdRgyteVwBMJsZnmf6tfK0JzO
VAns/wUSlwqadlfeY7AmH1FLQaKwhlu4PzInwR0FZBS6koqZyo5bIw6+L8yVs5PY
F3X/BzYJBGh0VWs97ANcRZUf6SLOc61a+HxMJxB60vMI/V8wmnnxNqrW4fcgbXWc
BdVaABlt4uUKe+4tik2X/9Qahk5O3GQJxxgrE9VyxwBDCNP/8u1g
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org