Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/k4WPX3GCJ3YIUGwmtNCrwsK1-F4.roa
File: k4WPX3GCJ3YIUGwmtNCrwsK1-F4.roa (raw, json)
Hash identifier: 9RLNgL4V4E8LnUt4ispw7naLDka1XCmkTDIvcePOySk=
Subject key identifier: 93:85:8F:5F:71:82:27:76:08:50:6C:26:B4:D0:AB:C2:C2:B5:F8:5E
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 01856DD3ED877CD0992E621D39C9E772E53B
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/k4WPX3GCJ3YIUGwmtNCrwsK1-F4.roa
Signing time: Sun 01 Jan 2023 14:54:43 +0000
ROA not before: Sun 01 Jan 2023 14:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60479
IP address blocks: 185.17.80.0/24 maxlen: 24
185.17.80.0/22 maxlen: 24
185.17.83.0/24 maxlen: 24
185.17.82.0/24 maxlen: 24
185.17.82.0/23 maxlen: 24
185.17.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:ed:87:7c:d0:99:2e:62:1d:39:c9:e7:72:e5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Jan 1 14:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93858f5f7182277608506c26b4d0abc2c2b5f85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:76:30:a1:49:d4:24:da:75:e5:08:49:f4:b1:
fb:23:6e:b1:e7:9e:f1:42:4f:b3:12:6b:4b:79:53:
d3:2e:e0:6f:12:3f:7d:a4:4b:d9:42:45:db:81:5f:
06:18:35:d3:00:95:ed:14:b5:cb:08:00:74:da:de:
5c:11:82:f6:1f:8e:53:fe:9c:d2:5d:18:2c:af:cd:
af:45:b6:8c:e9:04:4c:ed:da:d0:1e:fa:ff:49:5e:
42:ad:a1:7a:a9:c6:c2:63:ad:2f:67:ea:b9:f9:2f:
a0:36:9d:ab:6c:32:ed:c1:f7:76:b7:cf:bb:53:64:
ba:0d:a1:e4:12:95:76:4f:c3:ff:47:3b:95:21:ec:
ae:23:82:1a:84:c6:01:0e:d4:61:2b:7a:0e:9f:63:
70:bf:00:1b:d6:63:5f:9f:44:97:9c:ed:e4:3b:14:
95:c9:ca:76:d2:c9:1d:95:23:6f:48:0f:47:97:56:
b8:73:48:66:04:82:bd:ba:b6:c6:d0:fb:20:42:21:
82:8e:f1:45:c4:b3:90:72:6c:03:cb:c5:80:39:90:
5a:c0:e2:85:86:85:ea:7a:66:33:e9:0f:11:fd:63:
d9:0d:82:a5:dc:31:80:26:78:dc:66:4d:4e:c0:e4:
dd:93:c7:f8:1c:bd:af:3a:9a:8a:ee:9f:fe:dc:fa:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:85:8F:5F:71:82:27:76:08:50:6C:26:B4:D0:AB:C2:C2:B5:F8:5E
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/k4WPX3GCJ3YIUGwmtNCrwsK1-F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.80.0/22
Signature Algorithm: sha256WithRSAEncryption
59:8f:c2:27:8c:52:af:47:c5:97:d4:eb:61:6c:37:ed:47:d1:
17:c2:ae:0f:d6:b7:f3:e0:4a:9a:2a:f1:d7:2e:a9:6c:e8:1c:
eb:ff:eb:12:ff:d1:0b:15:9d:f7:cf:59:f6:12:23:ab:28:4d:
b2:09:78:6b:f0:07:e9:87:2a:92:5d:bb:2d:a3:20:93:47:47:
24:65:a0:ea:46:d3:b6:d3:97:cd:36:97:df:62:03:a4:99:36:
7f:2b:f4:dc:02:16:88:e6:8b:5f:49:c5:39:dd:29:3e:f5:4e:
6e:23:31:1d:c2:5e:f9:b1:02:d5:4d:0a:c5:76:bb:9e:02:ac:
28:e8:2c:7f:60:e3:c8:55:1f:63:c0:c5:09:d2:48:94:79:2e:
bf:f3:7d:d4:2a:08:12:d5:34:c4:1a:81:bd:b1:61:36:b5:5e:
a2:40:fe:f1:5b:3d:db:4d:11:f7:51:f1:2b:d4:df:f7:50:af:
50:b3:11:a5:96:90:3a:23:82:4c:c8:68:eb:8f:3e:17:10:c1:
e0:cd:38:e1:5d:83:e5:0c:c3:bf:f1:47:4d:f7:04:43:15:6e:
e3:94:bf:8a:d5:19:62:a8:61:50:a4:72:3a:3f:71:ad:35:3b:
dc:be:df:30:93:41:b7:e6:5f:0f:54:20:0e:76:25:c3:94:df:
ea:5c:23:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:05 2024 by rpki-client on console.sobornost.net