Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/i_KGtPrIrLXzfc6MYVU7D58caDQ.roa
File: i_KGtPrIrLXzfc6MYVU7D58caDQ.roa (raw, json)
Hash identifier: V0QfRA5QOt6qNK3lvVOQtLG67vXGnxBO2Fd+nH3RyQs=
Subject key identifier: 8B:F2:86:B4:FA:C8:AC:B5:F3:7D:CE:8C:61:55:3B:0F:9F:1C:68:34
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018ADFD2AA92C150AB8B5328E565F17AF733
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/i_KGtPrIrLXzfc6MYVU7D58caDQ.roa
Signing time: Fri 29 Sep 2023 07:23:59 +0000
ROA not before: Fri 29 Sep 2023 07:23:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
185.81.28.0/23 maxlen: 24
185.81.30.0/23 maxlen: 24
45.146.232.0/23 maxlen: 24
188.64.108.0/22 maxlen: 24
45.141.168.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 14:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:d2:aa:92:c1:50:ab:8b:53:28:e5:65:f1:7a:f7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Sep 29 07:23:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bf286b4fac8acb5f37dce8c61553b0f9f1c6834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:82:d2:dd:e1:84:71:e9:13:e5:6f:b0:29:9b:
8b:e5:d5:23:0f:9d:6c:3a:84:82:3a:bd:f9:d8:b0:
6c:5d:08:1d:7c:af:de:e2:96:31:1e:d1:20:77:cf:
7e:7b:dd:e7:36:24:9c:f0:38:fb:4f:a5:4f:4b:e3:
20:63:d5:3a:9f:69:c8:3d:f1:18:e0:d6:bd:df:a2:
e0:8e:90:29:67:57:27:6e:0e:25:8a:00:bd:80:ef:
35:17:a9:70:10:e2:2f:8e:f2:ab:27:27:a5:83:29:
89:14:00:31:cf:25:71:ac:83:42:1e:33:7c:2e:b2:
ad:0d:8b:14:60:25:2b:52:26:a8:08:c7:c7:08:f4:
9b:f7:be:57:4c:94:22:9a:37:b7:36:54:d7:d9:44:
24:e1:a0:80:51:a8:c6:9a:c5:fe:65:d9:c6:2a:b9:
dd:6b:e2:32:b0:ed:3b:a5:6d:43:9f:40:da:49:cd:
ac:d7:1f:72:9b:23:98:b0:9b:3c:34:6f:ac:76:fc:
f8:5e:47:ad:dc:87:fc:b9:72:05:80:ba:56:b3:f2:
4e:7e:a5:64:b1:04:f3:d3:e4:04:de:85:87:3c:6a:
08:91:31:03:3c:49:c2:de:d4:41:88:88:b8:16:69:
3b:50:b5:61:c9:78:e0:a9:5b:ea:84:1f:4f:a1:d5:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F2:86:B4:FA:C8:AC:B5:F3:7D:CE:8C:61:55:3B:0F:9F:1C:68:34
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/i_KGtPrIrLXzfc6MYVU7D58caDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.168.0/23
45.146.232.0/23
185.81.28.0/22
188.64.108.0/22
Signature Algorithm: sha256WithRSAEncryption
20:10:90:bd:32:53:91:47:04:e6:8c:55:dc:75:3c:80:fe:39:
52:4a:68:f4:dd:6a:00:48:8d:0f:8b:8b:4d:ac:6e:27:6e:a6:
5f:a1:14:8e:e9:b1:39:dd:f2:fa:9a:58:f0:9b:fa:7f:7c:f8:
db:ba:fa:de:1c:2a:28:d0:a9:4a:90:2b:47:ba:81:2a:71:c0:
9b:42:68:c7:40:87:94:2f:ab:d5:7a:2a:44:6d:58:21:09:96:
43:b5:23:f7:40:64:90:9a:4c:2a:d8:e5:f4:91:3c:97:66:9c:
fd:fa:ac:f8:34:2f:c0:ca:e4:ec:69:86:1f:49:58:0e:4a:12:
5f:eb:ac:30:31:f3:fe:58:d4:1d:ea:73:e1:04:3e:1d:56:b3:
80:e9:1f:88:3c:88:7a:4b:37:ea:6f:ee:bd:6c:bc:1b:3c:07:
e6:95:47:42:b6:c4:79:db:fd:47:57:05:87:56:d6:5d:4e:e5:
f6:2b:05:ed:07:55:39:1c:9e:08:17:17:dc:22:4f:26:6d:7e:
19:0f:c9:f8:d9:53:c2:1c:0a:f1:71:68:56:89:9b:e3:24:f5:
05:eb:44:12:4f:b3:c5:0d:01:6c:1e:4e:38:62:eb:d5:b1:ab:
d3:c5:3c:5d:15:7e:d0:94:52:14:10:5d:92:fc:4a:ba:49:3f:
03:ce:94:8d
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYrf0qqSwVCri1Mo5WXxevczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjMwOTI5MDcyMzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmYyODZiNGZhYzhhY2I1ZjM3ZGNlOGM2MTU1M2IwZjlmMWM2ODM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4LS3eGEcekT5W+wKZuL5dUjD51s
OoSCOr352LBsXQgdfK/e4pYxHtEgd89+e93nNiSc8Dj7T6VPS+MgY9U6n2nIPfEY
4Na936LgjpApZ1cnbg4ligC9gO81F6lwEOIvjvKrJyelgymJFAAxzyVxrINCHjN8
LrKtDYsUYCUrUiaoCMfHCPSb975XTJQimje3NlTX2UQk4aCAUajGmsX+ZdnGKrnd
a+IysO07pW1Dn0DaSc2s1x9ymyOYsJs8NG+sdvz4Xket3If8uXIFgLpWs/JOfqVk
sQTz0+QE3oWHPGoIkTEDPEnC3tRBiIi4Fmk7ULVhyXjgqVvqhB9PodUElwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIvyhrT6yKy1833OjGFVOw+fHGg0MB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvaV9LR3RQcklyTFh6ZmM2TVlWVTdENThjYURRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLY2oAwQB
LZLoAwQCuVEcAwQCvEBsMA0GCSqGSIb3DQEBCwUAA4IBAQAgEJC9MlORRwTmjFXc
dTyA/jlSSmj03WoASI0Pi4tNrG4nbqZfoRSO6bE53fL6mljwm/p/fPjbuvreHCoo
0KlKkCtHuoEqccCbQmjHQIeUL6vVeipEbVghCZZDtSP3QGSQmkwq2OX0kTyXZpz9
+qz4NC/AyuTsaYYfSVgOShJf66wwMfP+WNQd6nPhBD4dVrOA6R+IPIh6Szfqb+69
bLwbPAfmlUdCtsR52/1HVwWHVtZdTuX2KwXtB1U5HJ4IFxfcIk8mbX4ZD8n42VPC
HArxcWhWiZvjJPUF60QST7PFDQFsHk44YuvVsavTxTxdFX7QlFIUEF2S/Eq6ST8D
zpSN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org