Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/jrukS6_PI4eQZmAVT42sMa5y5ig.roa
File: jrukS6_PI4eQZmAVT42sMa5y5ig.roa (raw, json)
Hash identifier: wvJSpxPC4XV4YgcvNSgwTKxcTJptz+9uaUJ1TuVibos=
Subject key identifier: 8E:BB:A4:4B:AF:CF:23:87:90:66:60:15:4F:8D:AC:31:AE:72:E6:28
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018C90FA8796FCE5C25FE58D7D440F3E471B
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/jrukS6_PI4eQZmAVT42sMa5y5ig.roa
Signing time: Fri 22 Dec 2023 10:03:06 +0000
ROA not before: Fri 22 Dec 2023 10:03:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210542
IP address blocks: 188.64.104.0/22 maxlen: 24
185.179.218.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:fa:87:96:fc:e5:c2:5f:e5:8d:7d:44:0f:3e:47:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Dec 22 10:03:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ebba44bafcf2387906660154f8dac31ae72e628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:db:2b:8d:61:a3:47:ac:9e:17:a8:77:98:fe:
c3:e0:4c:22:1f:2c:59:20:dd:68:a4:13:f3:3e:b1:
c3:31:b4:59:2d:6c:0d:f9:e5:0c:d7:5e:4c:49:bc:
2e:94:42:4a:7f:b2:3d:a5:d7:7f:b3:9e:0f:71:b9:
90:8f:84:3a:97:7d:cf:35:e8:aa:39:79:ed:88:4f:
74:09:56:b2:69:cd:b7:8d:d4:8a:de:38:1d:c9:57:
13:89:2e:62:76:75:ef:af:40:af:fe:33:61:4f:27:
32:cd:bd:ea:35:9b:64:54:89:5d:5c:b3:63:e9:5b:
01:9c:f3:27:e6:28:0d:6d:a1:dc:b4:d7:55:01:51:
5c:85:54:8a:9c:a4:b8:a7:84:56:7e:09:33:83:05:
fe:bf:00:09:d1:57:75:87:1d:05:b0:5d:c1:46:9e:
5a:45:94:03:fe:b9:f4:ec:85:9e:00:86:c8:3a:90:
7c:fb:24:8b:cd:6e:d4:1a:c9:8e:4d:1f:72:df:61:
bd:8d:24:88:cb:d5:93:78:93:4b:57:03:b4:48:a3:
c2:55:77:5b:d1:f3:8a:f0:b2:8e:3f:53:d5:b7:09:
90:41:da:35:e9:d5:a8:6a:5f:65:45:a2:66:5e:19:
d5:d3:a3:f6:1d:2b:02:0d:d6:29:f0:11:90:ac:db:
3d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BB:A4:4B:AF:CF:23:87:90:66:60:15:4F:8D:AC:31:AE:72:E6:28
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/jrukS6_PI4eQZmAVT42sMa5y5ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.218.0/23
188.64.104.0/22
Signature Algorithm: sha256WithRSAEncryption
16:24:35:87:d4:b6:f1:d3:27:05:b9:c0:ee:c5:4d:40:47:00:
c6:03:09:a7:f8:cf:91:89:4e:ca:e7:33:3d:a4:40:1f:ec:04:
1b:58:ea:84:47:7a:9c:93:cb:c9:84:8c:b0:87:4c:33:de:75:
11:ed:93:c9:8c:db:ff:83:a5:98:00:4e:d4:76:c9:14:fa:eb:
80:6c:2b:c9:80:11:3d:4a:6c:eb:77:8e:37:c7:66:4a:22:d3:
f2:93:53:08:c7:e6:13:c0:f0:8b:f9:da:a8:12:52:82:12:27:
44:d6:72:42:47:9c:07:cd:56:70:bf:b8:f8:a2:81:c0:04:54:
e0:a7:03:bc:e8:7e:0a:16:a2:15:04:47:aa:8d:e9:56:05:e5:
2f:c9:ee:2d:c5:52:22:dc:30:06:f7:39:f2:f9:a1:c4:af:ff:
47:7b:0c:20:34:0e:28:2b:56:5a:90:b9:5e:e6:ac:ee:bf:02:
72:42:c3:07:ce:83:7a:03:b1:06:4c:14:ea:eb:d3:66:f8:78:
d5:43:79:17:10:f0:01:6f:67:92:85:fa:d2:10:a9:58:0e:17:
67:a4:5b:64:df:99:57:10:c3:0d:43:58:10:62:f4:a4:75:92:
7d:5d:f4:e9:2d:ab:90:5d:1a:cd:82:60:2a:f3:ac:1c:d1:70:
ea:b7:41:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:38 2024 by rpki-client on console-ams.rpki-client.org