Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/xyYMrBcC9KRrA1re4hlkZS0WtOA.roa
File: xyYMrBcC9KRrA1re4hlkZS0WtOA.roa (raw, json)
Hash identifier: d/U4usWt57o+lUZlJgrxwOS0C5ZvGkzLgf8CrsgP/dQ=
Subject key identifier: C7:26:0C:AC:17:02:F4:A4:6B:03:5A:DE:E2:19:64:65:2D:16:B4:E0
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018823A5357B296949320ECD3C2366E36BD7
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/xyYMrBcC9KRrA1re4hlkZS0WtOA.roa
Signing time: Tue 16 May 2023 08:20:09 +0000
ROA not before: Tue 16 May 2023 08:20:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:a5:35:7b:29:69:49:32:0e:cd:3c:23:66:e3:6b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: May 16 08:20:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7260cac1702f4a46b035adee21964652d16b4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:7c:c4:35:90:a2:19:73:a5:59:ea:6b:bc:
2a:f7:41:f5:1f:b1:fa:0c:0a:16:ac:c7:35:91:bb:
07:48:2b:31:9f:53:c0:45:b4:a5:85:98:5e:af:64:
aa:44:97:61:bd:d5:ed:a4:0a:40:5d:93:63:6e:2d:
44:d4:23:a3:8c:de:7f:bf:15:4f:d4:27:0d:2c:2c:
33:a4:07:a8:da:5d:3b:6f:da:04:7c:da:9c:3f:b3:
ef:92:46:69:28:aa:91:ca:54:78:55:8f:df:b6:0d:
93:e6:0b:56:8d:44:ac:bd:1c:9c:6c:bc:7b:23:1b:
08:d2:f8:4c:c0:1a:7d:e2:21:e6:1e:00:10:37:6e:
e9:14:ef:44:35:c7:02:e4:9b:fa:ae:1f:56:cc:c0:
d9:c3:19:66:97:97:34:90:7b:75:2c:40:bd:7e:c1:
31:84:35:8c:ce:ae:83:9f:f3:5a:79:75:0d:dd:fd:
45:1d:50:57:87:f8:1a:77:5a:39:5f:2b:46:96:bf:
76:07:91:d2:dc:04:16:4c:7f:17:a2:8e:23:2b:08:
26:8b:e8:d6:fd:a6:c3:c9:5c:bf:7b:5b:e9:f3:50:
64:cb:7d:72:d0:a9:ef:b9:52:40:80:6f:57:c6:e1:
d0:da:e6:cb:7e:3f:28:87:f3:19:ad:6e:9c:49:4b:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:26:0C:AC:17:02:F4:A4:6B:03:5A:DE:E2:19:64:65:2D:16:B4:E0
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/xyYMrBcC9KRrA1re4hlkZS0WtOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
80:ca:85:e6:ee:cb:91:e9:99:4f:ee:3b:0d:4b:06:1d:eb:4a:
7b:78:9a:25:9f:ce:4f:9d:91:91:05:79:5d:36:1e:ed:06:32:
02:74:44:85:79:75:59:b6:74:3f:25:86:d5:d6:0c:94:13:b0:
da:ea:6e:a4:23:57:eb:d4:f3:42:22:7a:cc:3c:cf:d9:fd:a2:
0a:00:e0:6b:35:4d:49:25:91:7c:df:d3:2d:b3:12:4c:9f:73:
b8:87:19:fb:c0:cb:ea:d7:62:21:30:26:f8:c5:45:f8:55:5b:
27:79:aa:f7:87:5f:de:3f:96:b8:4c:c2:36:db:cd:97:7a:cc:
b4:8a:d0:98:cf:fd:6d:5c:e7:88:fe:9d:d4:3f:7a:99:70:ce:
8c:38:1a:40:29:97:33:84:d9:7b:b5:e7:95:2c:60:5e:d1:8d:
8b:12:60:fb:d7:0f:8d:d0:7f:3f:1a:06:b3:8e:f3:d2:06:2e:
00:06:eb:08:67:c3:8b:b4:8f:2f:c1:d1:32:6e:e0:76:a3:e8:
2b:d5:6a:d4:28:95:49:b9:94:54:d7:bd:34:3f:db:0e:58:ef:
98:a6:1b:c5:26:61:bd:09:a6:ad:dd:62:fc:e4:f5:34:fc:9e:
a1:1d:1e:cf:ff:6c:f9:a6:f2:66:ec:5d:f3:ca:2d:10:01:ad:
af:fb:f3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:40 2023 by rpki-client on console-fra.rpki-client.org