Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/i-aW6M-NhA0uGG41AVEENADUg6Y.roa
File: i-aW6M-NhA0uGG41AVEENADUg6Y.roa (raw, json)
Hash identifier: TpvgNUQpFPkqkk0MDCIlyFMgvlzHlk4aigQyIn2EpTo=
Subject key identifier: 8B:E6:96:E8:CF:8D:84:0D:2E:18:6E:35:01:51:04:34:00:D4:83:A6
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018D862125B646A89EDC8A2655D0B9C1D6EE
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/i-aW6M-NhA0uGG41AVEENADUg6Y.roa
Signing time: Thu 08 Feb 2024 00:32:15 +0000
ROA not before: Thu 08 Feb 2024 00:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 185.114.144.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 15 Apr 2024 06:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:86:21:25:b6:46:a8:9e:dc:8a:26:55:d0:b9:c1:d6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Feb 8 00:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8be696e8cf8d840d2e186e350151043400d483a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:ca:91:6e:5f:f2:0e:d8:93:cb:7d:d5:90:
a9:b5:f3:a3:0b:be:a7:b4:c7:d8:ef:73:40:ce:b6:
c7:38:8e:aa:e6:27:4b:18:38:49:08:8c:50:05:c6:
6c:7f:91:5c:82:8f:cf:fd:fc:67:17:bb:cc:0f:f5:
70:e5:8e:39:a6:2e:08:e7:a9:48:fd:27:02:2b:f0:
d2:cc:27:07:a3:5f:ef:60:49:ff:54:c5:90:d4:9f:
92:04:d8:75:f5:77:ca:a1:ae:e3:ea:d7:a5:d9:81:
b8:78:87:42:77:1f:9b:7d:e4:66:37:85:ab:ab:1c:
55:bc:3c:4e:b1:c7:22:bd:26:b6:03:1b:80:ff:41:
06:7b:71:65:b4:42:08:62:13:58:c6:f0:51:8a:98:
42:eb:fc:54:3e:5f:65:d0:26:86:ea:40:0f:e8:ac:
88:92:a4:8d:1c:f5:82:4f:06:0a:84:48:34:7e:ca:
81:f2:c2:cf:66:23:23:3f:89:7e:9f:d4:f2:e0:70:
de:d7:6d:74:0b:28:e0:ec:67:c2:17:95:ba:76:d9:
26:b8:bf:70:4e:6b:00:dc:0d:c2:be:30:ac:35:33:
74:31:9e:c7:45:4b:0c:06:b4:66:38:ca:4a:d1:88:
7d:5a:ef:aa:80:90:04:f5:b7:be:4e:5c:c7:51:b2:
ec:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E6:96:E8:CF:8D:84:0D:2E:18:6E:35:01:51:04:34:00:D4:83:A6
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/i-aW6M-NhA0uGG41AVEENADUg6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.144.0/23
Signature Algorithm: sha256WithRSAEncryption
62:c8:b9:29:48:8a:ff:f5:4c:71:ed:48:8c:05:ea:2a:ec:af:
d9:a2:6c:0a:9f:28:1c:4b:96:c8:97:53:23:c6:9a:b5:34:99:
fe:ea:a1:26:04:a9:cf:27:10:11:09:17:e2:60:a6:be:23:20:
2a:57:c1:a9:3b:b8:29:d6:ec:e6:51:c0:1c:ba:62:b3:09:63:
82:3c:43:a3:04:c3:d3:b4:22:45:a2:93:eb:ce:88:44:40:46:
b4:89:c9:c8:85:99:67:e1:79:64:6f:2a:1a:cd:97:98:37:a0:
f5:db:1a:ff:02:e1:fb:20:4c:38:76:9a:0a:c1:d7:62:c4:e2:
7f:c2:1f:1b:af:68:d9:0e:83:b5:aa:cc:c7:6e:ed:5a:a9:3a:
e4:9d:de:d6:b5:e5:83:86:f1:ef:b0:3f:7c:62:48:ef:a3:7f:
ff:32:94:ee:84:13:69:b9:11:00:36:d6:b7:ed:6b:f4:dc:ac:
04:e7:7f:79:eb:09:fb:84:4a:ed:2f:f3:f3:e3:24:ec:38:20:
35:fa:31:d6:4d:34:e6:a3:b7:87:33:bd:5d:d1:eb:69:32:ed:
d5:fe:df:75:07:91:42:8a:4e:c2:17:4e:8e:2c:db:52:9b:12:
1a:a0:a6:31:d5:5e:c3:11:bf:f3:77:41:2d:9b:98:6d:b4:84:
19:fb:28:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 09:34:04 2024 by rpki-client on console-fra.rpki-client.org