Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/o6RDCXoqYnfygAH2EB5OzLHeFYc.roa
File: o6RDCXoqYnfygAH2EB5OzLHeFYc.roa (raw, json)
Hash identifier: /7RyWx500SLTO/6GBDd5Bs9N5bEQeB7gesT+9xU00as=
Subject key identifier: A3:A4:43:09:7A:2A:62:77:F2:80:01:F6:10:1E:4E:CC:B1:DE:15:87
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0187B24864B427DC5E43C98B8A628E9B3C4B
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/o6RDCXoqYnfygAH2EB5OzLHeFYc.roa
Signing time: Mon 24 Apr 2023 08:01:41 +0000
ROA not before: Mon 24 Apr 2023 08:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.81.30.0/23 maxlen: 24
185.81.28.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 14:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:48:64:b4:27:dc:5e:43:c9:8b:8a:62:8e:9b:3c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Apr 24 08:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3a443097a2a6277f28001f6101e4eccb1de1587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:cb:36:f9:51:cf:0c:0f:21:2a:d7:9b:95:
59:c6:ff:a7:72:d8:78:3b:83:02:e1:96:e6:41:43:
50:fe:7a:01:94:bd:40:9b:70:1c:4a:df:8b:28:2b:
8c:2f:dd:40:66:d1:5d:7e:6f:36:a3:27:dd:ba:b2:
e3:1c:ea:ac:07:0f:45:59:cb:08:a2:5f:74:04:6f:
6c:f0:f2:60:6b:75:f9:a8:9d:d4:3e:8f:56:71:8a:
ef:42:e0:2a:92:69:c2:58:af:e4:9d:c1:f8:8e:8c:
90:b5:9d:d6:60:1e:12:af:d6:9d:6d:50:67:ce:93:
02:91:c4:fb:55:b9:4a:ee:62:53:7b:d9:00:c3:a7:
51:33:96:2f:cd:50:03:fb:33:57:12:ae:3a:01:9a:
cd:02:51:84:b2:b8:06:77:50:e7:6b:72:dd:71:a2:
93:b5:07:ab:46:88:98:54:ba:98:b7:be:18:db:aa:
ac:c8:9d:f5:01:51:1d:70:88:7d:ed:fe:8a:38:38:
0b:87:e0:e8:ff:d2:21:3e:f9:ea:f5:c6:95:58:f6:
a4:1f:9a:3a:90:35:b7:64:89:ca:22:b6:dc:19:86:
6d:8e:c8:7e:71:d8:2f:de:f7:80:eb:c8:14:77:d4:
b8:71:0b:bd:7a:b8:20:fd:0d:e3:aa:0d:29:7d:2c:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A4:43:09:7A:2A:62:77:F2:80:01:F6:10:1E:4E:CC:B1:DE:15:87
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/o6RDCXoqYnfygAH2EB5OzLHeFYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:01:2a:ee:32:77:23:08:80:2a:cc:04:4c:ad:b2:4c:06:84:
32:a9:d7:4f:5d:aa:b9:fa:97:4a:2b:ff:50:d4:9f:54:6b:b2:
40:0f:d3:ea:33:a4:98:fc:9d:d0:2d:40:f6:b1:7a:29:f5:b8:
52:fe:5a:78:42:b4:57:43:a7:69:dd:32:5e:63:f7:b7:5b:3a:
87:c0:54:57:9c:b1:b7:e0:03:cd:17:85:6e:ca:99:74:1f:58:
e1:c0:0b:a0:e8:f2:c0:64:b4:58:d4:68:ce:38:f0:15:93:0f:
07:94:88:a2:a3:21:c2:35:c0:54:dc:04:14:3e:2b:89:94:33:
60:66:4f:87:53:1c:4e:b8:4c:cc:13:3e:f2:05:2b:ff:09:81:
c1:a3:2a:cc:68:ee:71:3d:85:cd:52:23:a4:d3:f0:12:49:17:
57:1b:cb:ea:04:a1:0f:7d:55:7f:40:e1:44:d4:37:b1:7a:f0:
41:56:ff:55:22:9e:c8:7d:25:da:4e:9b:9f:b5:1f:3a:46:c1:
70:84:35:96:f6:f1:62:e4:47:20:2d:6a:fc:d6:31:b6:bf:b5:
70:e0:ad:5a:df:ce:fb:7f:9b:31:f8:bd:57:42:ce:23:ac:80:
a9:62:7d:be:a9:05:aa:5c:d7:4a:07:c2:88:a7:15:af:78:3c:
ef:15:c5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org