Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/fqiRQ56BlQJK9ssOH6oP8KEi7YY.roa
File: fqiRQ56BlQJK9ssOH6oP8KEi7YY.roa (raw, json)
Hash identifier: 7h/EimzejQEcyNlE3qXLO1P4asYkZR3rLuCLlLYXwLI=
Subject key identifier: 7E:A8:91:43:9E:81:95:02:4A:F6:CB:0E:1F:AA:0F:F0:A1:22:ED:86
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018A6423395CE806268E96E2BAE434CDC166
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/fqiRQ56BlQJK9ssOH6oP8KEi7YY.roa
Signing time: Tue 05 Sep 2023 06:59:04 +0000
ROA not before: Tue 05 Sep 2023 06:59:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
45.146.234.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:23:39:5c:e8:06:26:8e:96:e2:ba:e4:34:cd:c1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Sep 5 06:59:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ea891439e8195024af6cb0e1faa0ff0a122ed86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:6a:51:c0:02:a2:72:8e:37:00:d3:5d:11:
6c:4a:b3:83:35:6d:52:b4:2a:d6:50:5c:0a:d4:85:
c2:d4:be:ae:e2:52:9e:5a:f3:74:5d:e7:a4:60:bb:
e8:ef:65:e4:d2:ed:02:bf:bf:a3:a7:89:56:11:06:
c1:44:a6:dc:fe:1c:dd:4c:1c:03:26:a5:91:c8:99:
89:b3:76:27:4e:71:be:f6:e6:5a:71:d1:29:86:4e:
7a:cb:34:a8:bc:25:1a:5c:95:bc:9c:0c:34:6e:a9:
9b:99:02:ea:76:2d:e3:ca:dd:9c:d4:3b:c5:d6:13:
eb:66:5b:6d:a7:db:70:b4:21:79:73:28:ee:69:96:
6f:62:9a:16:e9:ee:92:a5:be:e4:8b:79:0d:71:65:
b9:d5:12:53:7d:1a:2f:86:e4:c7:32:20:65:ce:cd:
d9:b0:0d:fc:fb:cd:bc:30:49:af:ca:f3:9b:42:77:
03:7e:ec:aa:98:6c:8b:34:33:05:40:91:d6:8a:28:
f7:cf:25:da:89:73:c0:44:57:4f:8d:52:64:cd:25:
1d:f4:3a:3a:62:a3:d0:b3:ed:fc:95:c9:6f:32:b7:
59:67:e8:8b:6f:af:9b:43:85:fb:b4:27:fe:ae:9d:
b6:4a:46:ae:ac:96:5a:20:44:66:ca:b2:96:b5:fa:
64:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A8:91:43:9E:81:95:02:4A:F6:CB:0E:1F:AA:0F:F0:A1:22:ED:86
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/fqiRQ56BlQJK9ssOH6oP8KEi7YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.234.0/23
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
17:05:d8:af:a4:29:0d:90:8a:a9:23:91:49:71:8f:4e:d2:46:
04:0a:a0:6b:35:a0:b3:6e:73:68:33:bd:2c:18:11:7c:52:50:
0d:dc:b5:51:34:74:85:c8:b5:e1:17:66:1a:86:b8:a9:0f:e6:
f5:fa:c6:d8:2e:eb:89:e6:96:21:0e:4f:2f:4c:25:20:c6:8b:
f0:0f:dd:c0:21:ab:f2:16:47:04:27:e1:71:fb:80:9e:f0:f6:
c1:49:02:16:4d:0e:f4:63:23:fa:78:50:b0:6e:dc:54:72:de:
62:c0:6b:a1:43:74:2d:71:94:f8:c3:41:c6:28:4c:9c:aa:bd:
4d:1f:14:c2:b3:bf:20:ca:06:c7:b7:01:f4:43:28:3e:d2:5b:
52:ad:d3:89:79:a7:a2:d6:b1:5d:38:a7:7e:a2:8a:29:53:39:
bc:f4:f2:0c:82:39:ea:63:49:a7:d7:15:58:14:48:5c:8b:7b:
7c:05:51:c9:96:1d:de:4e:ef:6b:42:56:fd:84:69:53:6d:13:
70:67:c5:2c:16:50:b5:df:93:0c:e4:6e:6c:2a:c8:eb:70:38:
5f:fe:27:d4:e6:4d:b5:1e:02:4c:56:25:3f:b7:8d:44:1b:e5:
ca:18:f1:fa:e2:4e:b7:c9:73:18:44:a0:31:44:61:5e:20:72:
34:fc:62:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 07:39:44 2023 by rpki-client on console-fra.rpki-client.org