Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/7CT_1BOzbt5R8-qHCDKYNoO9RPw.roa
File: 7CT_1BOzbt5R8-qHCDKYNoO9RPw.roa (raw, json)
Hash identifier: qHM5QYcD4HC5H1isA7mbF/n8OlfYtz1e3+X8Pqwqk28=
Subject key identifier: EC:24:FF:D4:13:B3:6E:DE:51:F3:EA:87:08:32:98:36:83:BD:44:FC
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0188E6E8CCDE6A2B9773ADDD8949AC17593F
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/7CT_1BOzbt5R8-qHCDKYNoO9RPw.roa
Signing time: Fri 23 Jun 2023 06:19:56 +0000
ROA not before: Fri 23 Jun 2023 06:19:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
188.64.104.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e6:e8:cc:de:6a:2b:97:73:ad:dd:89:49:ac:17:59:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jun 23 06:19:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec24ffd413b36ede51f3ea870832983683bd44fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:10:7c:fd:5a:b3:c6:12:5a:65:8a:5e:3e:
a1:9a:cb:83:db:cb:9e:ce:1e:a1:93:2e:a6:b9:52:
ef:68:ea:dd:f3:e7:bb:c0:e2:d8:e5:63:e2:9a:f2:
10:10:43:dd:9c:8c:de:ee:2c:f3:a9:3a:5f:52:ce:
00:52:fe:6f:93:b9:19:f2:02:da:04:d1:0c:e5:c7:
0b:84:dd:54:67:d5:82:ab:73:ba:2a:ac:da:2a:4d:
00:22:1c:b5:2a:bb:e3:bd:8c:25:6d:8f:f7:4b:72:
a9:51:64:ca:ea:b8:7e:bf:af:34:12:70:61:cf:dd:
67:e4:83:93:3a:4d:0a:47:58:43:46:33:1f:83:12:
4a:00:2e:81:72:75:44:c6:8c:48:6e:86:23:e6:24:
a8:67:97:30:05:33:3e:bf:25:a2:11:c6:dc:c3:5b:
bf:e0:ac:96:91:7b:6d:34:2b:5c:f3:3e:9e:bd:31:
2f:53:b8:0c:46:c4:f7:08:31:98:ed:30:21:37:1b:
82:2b:ce:93:6d:2c:61:e3:a3:f8:df:0b:5f:de:b8:
72:0b:0b:e4:0a:03:ed:2a:64:8a:dc:91:69:d7:21:
cd:ed:37:57:78:8d:d4:02:5a:da:54:19:d1:03:d3:
fd:be:f0:e5:20:68:db:8f:e7:06:db:a3:7a:3c:21:
ce:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:24:FF:D4:13:B3:6E:DE:51:F3:EA:87:08:32:98:36:83:BD:44:FC
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/7CT_1BOzbt5R8-qHCDKYNoO9RPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
188.64.104.0/22
Signature Algorithm: sha256WithRSAEncryption
25:a4:a8:8d:2a:b4:bb:85:e9:c8:94:fb:4a:98:e5:46:35:4d:
13:9c:7f:06:ad:8b:ea:0e:39:88:5c:ea:61:1e:3c:4e:1e:87:
95:f6:b6:7c:5c:1c:70:7a:d0:1e:00:01:f7:18:5c:b7:be:3d:
b1:ca:dc:8f:fc:5e:6d:77:a9:21:93:f1:fa:20:bc:31:a1:3d:
6e:a2:ca:81:e6:41:8b:69:c7:eb:41:75:74:f5:0f:69:be:1f:
05:b5:b1:44:c9:ff:ec:f9:98:24:8a:4c:0b:c7:64:02:a2:b5:
27:be:61:44:af:33:be:6e:d9:b9:88:40:83:e4:0d:ed:c6:26:
a2:cb:93:50:47:8c:d7:da:10:3b:c1:18:62:9f:2a:3f:5f:e8:
41:cf:eb:8a:dd:0a:64:61:c6:2d:56:3c:a6:88:45:39:5f:f8:
23:b3:d4:7c:4a:b1:70:48:6f:7b:87:b0:37:02:8a:93:2c:a2:
e5:f3:67:90:0c:e1:ee:0e:2c:6f:79:4a:b4:e2:f6:a0:36:3e:
05:38:b3:e7:81:cf:27:80:a0:ba:6b:0d:63:07:1f:92:b1:e8:
04:7a:c2:88:cb:57:1e:16:da:7b:5c:09:d1:84:34:7d:07:c7:
e9:7b:68:a3:9b:fd:aa:62:8c:d4:5b:7c:5e:07:85:38:eb:18:
90:e4:e8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:52 2023 by rpki-client on console.sobornost.net