Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/trc9i_oOdnIepW3ndL3WSkB3bzM.roa
File: trc9i_oOdnIepW3ndL3WSkB3bzM.roa (raw, json)
Hash identifier: +EfgMe8ooDWN6pNlotsp2oKBslSOfm8O+j4HslvLOBw=
Subject key identifier: B6:B7:3D:8B:FA:0E:76:72:1E:A5:6D:E7:74:BD:D6:4A:40:77:6F:33
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0185A52CFF405987B40C1C0B0E5EC7838AE3
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/trc9i_oOdnIepW3ndL3WSkB3bzM.roa
Signing time: Thu 12 Jan 2023 08:51:07 +0000
ROA not before: Thu 12 Jan 2023 08:51:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 185.81.30.0/23 maxlen: 24
185.81.28.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:2c:ff:40:59:87:b4:0c:1c:0b:0e:5e:c7:83:8a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 12 08:51:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6b73d8bfa0e76721ea56de774bdd64a40776f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ac:c8:fa:14:d4:cb:ad:c0:23:8c:b2:dc:9f:
9a:94:9d:d0:24:ed:03:46:f8:1d:d7:2b:0a:df:3b:
e6:94:c0:67:0d:ae:d0:94:d3:d1:5d:2e:43:3b:6e:
2e:4c:48:29:eb:3f:e7:b8:bb:c5:5b:5b:09:4e:8e:
f5:da:f9:2b:33:f3:cf:21:e8:fb:eb:91:e7:82:d6:
c2:d5:a2:e5:44:1f:4d:de:47:4b:a4:db:a2:eb:0c:
b7:84:75:fb:1a:33:e8:de:46:07:fa:da:6f:0d:d7:
ee:33:a9:4a:0a:75:8c:48:25:fc:ac:d7:16:2a:5b:
e4:e8:a9:2d:48:b2:00:88:2f:60:f3:8e:51:f0:28:
23:5e:cb:4d:a2:e4:9b:87:ee:8c:e0:5a:ae:dd:6e:
62:d2:73:83:cd:cf:9a:fa:74:80:e2:55:8c:0f:b7:
36:7f:f9:54:b2:d0:86:aa:f2:df:20:74:9c:74:dc:
9f:8d:39:9b:fa:18:ad:59:0f:14:17:10:6c:4d:b6:
36:d6:ed:c7:14:59:7b:80:24:80:35:1a:53:ef:63:
3b:fd:b4:1f:78:dc:fb:aa:f5:79:8c:a3:f3:b2:05:
af:01:3c:d4:e6:b0:f7:f6:d5:4b:c2:83:9c:44:5b:
f9:d1:23:5b:5b:4b:a0:45:eb:fd:55:29:88:11:fa:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B7:3D:8B:FA:0E:76:72:1E:A5:6D:E7:74:BD:D6:4A:40:77:6F:33
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/trc9i_oOdnIepW3ndL3WSkB3bzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
04:74:5e:44:08:07:13:0e:37:54:4c:3b:0d:24:f8:2e:02:d2:
a8:8a:bc:38:d2:4a:ce:97:a0:41:6e:9c:fd:1f:e5:02:ff:5d:
f5:ed:ff:b5:28:38:b8:70:ca:0e:ea:9e:00:d4:f2:d5:9d:a4:
e8:74:14:09:ce:c2:1c:fc:d5:ac:e0:18:4c:e0:d8:ac:8d:4c:
cd:53:eb:49:9f:9b:e1:8d:d3:9c:3e:b9:30:7e:29:38:a7:58:
b7:16:a2:f4:50:21:f3:63:14:98:c0:82:a7:d8:24:8a:d5:06:
33:e1:d9:94:58:1a:f9:d5:92:56:17:bd:d6:59:09:45:26:50:
1f:aa:b7:f4:f1:4c:22:e2:38:be:fb:4c:94:98:6b:45:ff:a7:
ba:19:5c:7a:07:b6:d2:bc:35:74:01:fe:27:fb:4a:4e:4e:0f:
d0:fe:0c:a4:fc:a6:14:83:7c:eb:81:da:1f:90:dd:2a:11:b2:
57:34:a0:59:40:47:72:10:85:99:0a:eb:30:b9:19:95:90:fc:
3f:90:50:3c:9f:01:ac:1c:18:c2:99:d9:02:df:7f:e2:85:c1:
ab:d3:12:18:dc:29:03:18:85:2c:b0:bf:2a:64:61:fa:51:fe:
9f:3f:58:eb:69:55:2f:ca:c8:31:d6:e6:84:ed:4d:b1:df:01:
5b:47:12:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-ams.rpki-client.org