Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/9WXQQO-ikoCrjy8NeotTaFDVHA8.roa
File: 9WXQQO-ikoCrjy8NeotTaFDVHA8.roa (raw, json)
Hash identifier: k4FBsL8j2qkmiFlfGwws9e/qojUqq+byxaUHumcS2ng=
Subject key identifier: F5:65:D0:40:EF:A2:92:80:AB:8F:2F:0D:7A:8B:53:68:50:D5:1C:0F
Certificate issuer: /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial: 01856D93D236E99A7E5BA8F10FD21F3D27AA
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/9WXQQO-ikoCrjy8NeotTaFDVHA8.roa
Signing time: Sun 01 Jan 2023 13:44:42 +0000
ROA not before: Sun 01 Jan 2023 13:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206121
IP address blocks: 185.177.100.0/22 maxlen: 22
185.177.100.0/23 maxlen: 23
185.177.102.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:d2:36:e9:9a:7e:5b:a8:f1:0f:d2:1f:3d:27:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Validity
Not Before: Jan 1 13:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f565d040efa29280ab8f2f0d7a8b536850d51c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:80:22:b0:9d:ed:88:d6:f8:0f:ec:a6:51:
b8:13:8f:f4:fa:1b:e2:46:02:54:39:f3:1f:2d:6a:
d0:41:78:02:85:c1:5a:f8:1d:48:0a:f7:db:17:b0:
c8:e4:a0:b2:9e:8e:a5:ec:28:56:6c:91:42:5f:45:
70:e6:5b:61:64:d5:04:44:82:bf:cd:89:1c:9e:ea:
9b:44:01:c2:b7:23:23:7e:02:9e:f9:18:da:ee:25:
ed:bf:68:54:dd:aa:be:72:59:93:94:2f:9c:d0:08:
99:bc:ea:9f:59:a3:f7:98:9c:2f:59:e0:ce:fa:55:
c3:83:66:de:2d:a4:90:7b:83:d6:9d:e9:05:11:58:
de:0b:29:97:89:98:09:4e:23:2f:0f:bc:c8:89:a5:
27:4b:57:27:08:49:85:61:98:33:a7:2b:68:67:72:
69:f1:77:31:8c:8f:ca:28:e7:0c:85:f6:06:c1:1d:
ed:02:34:33:53:0b:1f:65:43:06:9e:1f:dc:26:2b:
c3:b2:b2:d0:9e:17:12:3b:a8:b9:72:c6:0a:e1:3f:
4d:c0:42:31:79:9d:6e:4d:60:98:5c:da:6e:8a:2c:
a2:07:2d:bb:22:52:68:f4:18:95:51:b6:19:ce:a6:
1a:ca:2d:c5:0e:24:db:06:40:c1:94:08:2f:61:14:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:65:D0:40:EF:A2:92:80:AB:8F:2F:0D:7A:8B:53:68:50:D5:1C:0F
X509v3 Authority Key Identifier:
keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/9WXQQO-ikoCrjy8NeotTaFDVHA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:ec:46:f7:24:de:f5:4c:09:56:1c:4f:81:67:7b:56:47:05:
20:0d:9a:a2:6b:9a:1b:89:d1:9f:99:a4:c2:06:0a:d6:88:3c:
59:54:f8:0d:c7:7f:16:df:fb:a2:9e:bf:87:b5:04:81:ff:4c:
0c:26:cb:0d:dc:a4:9d:fc:55:73:f2:2d:20:57:3f:85:9e:ca:
3f:99:76:e1:e7:49:be:10:14:1e:05:35:05:e5:0e:a6:56:8e:
21:a8:5f:a3:45:76:d2:a3:53:20:07:7e:02:87:3c:ee:97:5b:
8a:51:2d:ce:bc:32:50:b0:e7:fb:7c:7c:b9:d4:9c:c7:d0:ff:
ad:cb:62:15:ae:cc:8b:1f:33:7b:ec:48:09:cc:fc:c2:58:d6:
6c:a7:27:8f:3b:88:23:20:36:a5:fd:ba:5d:52:8c:1d:87:fb:
f1:22:78:02:be:e0:e3:2d:39:b1:8f:88:65:7f:0f:a6:47:ec:
a8:c0:76:e6:ef:c1:b2:4a:06:9f:13:68:d0:0d:fc:62:3f:11:
a7:c1:d2:1c:de:9a:7e:a8:98:73:d7:3f:cb:03:bf:5e:37:f4:
66:b5:83:55:91:d9:af:8a:b7:4b:0d:4c:ef:e9:5c:2a:3f:5b:
0d:3c:9c:50:1d:e2:65:c8:9b:3f:b3:83:b8:40:47:d1:03:1b:
d5:ba:be:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:30 2024 by rpki-client on console.sobornost.net