Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/9hP-5fhGHhBco26lpkmRpreg-Gc.roa
File: 9hP-5fhGHhBco26lpkmRpreg-Gc.roa (raw, json)
Hash identifier: 5+xdj67lhDwelyHuNiMT8x3MosO+ckx9kO7xaU7hOzE=
Subject key identifier: F6:13:FE:E5:F8:46:1E:10:5C:A3:6E:A5:A6:49:91:A6:B7:A0:F8:67
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0BF65A80355443B9D9F5C7FC86C29
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/9hP-5fhGHhBco26lpkmRpreg-Gc.roa
Signing time: Mon 02 Jan 2023 05:25:03 +0000
ROA not before: Mon 02 Jan 2023 05:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203389
IP address blocks: 82.177.184.0/22 maxlen: 22
88.220.62.0/23 maxlen: 23
195.136.124.0/22 maxlen: 22
82.177.210.0/23 maxlen: 23
88.220.96.0/23 maxlen: 23
88.220.100.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:bf:65:a8:03:55:44:3b:9d:9f:5c:7f:c8:6c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f613fee5f8461e105ca36ea5a64991a6b7a0f867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:67:f2:46:62:61:59:2c:da:76:8e:1c:e0:e8:
b7:97:75:c4:ab:34:c5:91:3d:63:71:14:bc:97:6b:
ad:1d:29:d0:d2:d8:8b:37:b3:b1:8e:e8:7d:59:c7:
ff:42:97:19:1f:3b:07:3e:a2:c1:93:7b:ef:61:1f:
cb:dc:50:62:de:fe:ab:fd:c7:a5:27:94:f9:d0:df:
15:76:27:e6:93:c9:74:29:9e:c0:61:ef:07:21:a3:
e2:09:33:69:37:f7:cd:91:34:c9:c0:40:ec:fa:7e:
6b:67:6b:49:a1:6e:93:40:69:15:47:1d:7f:d0:28:
f5:d2:cc:92:3c:ab:30:18:15:ce:00:bf:93:83:af:
99:f2:76:83:43:5d:64:da:ea:63:00:1c:9f:ac:47:
a6:00:01:a1:bf:91:5e:6f:e7:89:11:21:fc:2e:08:
82:59:ee:ce:92:7a:1c:53:46:f8:2a:31:d6:f7:0e:
b6:eb:3a:9b:f6:4e:c5:50:e9:9e:1c:00:16:49:f6:
36:71:5e:f8:94:22:56:b4:c7:b6:b5:29:58:45:8e:
8f:03:b0:aa:a5:b3:f5:47:52:2d:ee:dc:a7:9d:25:
17:b9:a7:5b:d0:a9:32:c6:ee:b5:1d:ee:7b:c2:63:
2a:34:18:ef:dd:b0:75:81:a0:30:9c:72:5e:bd:57:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:13:FE:E5:F8:46:1E:10:5C:A3:6E:A5:A6:49:91:A6:B7:A0:F8:67
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/9hP-5fhGHhBco26lpkmRpreg-Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.184.0/22
82.177.210.0/23
88.220.62.0/23
88.220.96.0/23
88.220.100.0/22
195.136.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:b1:a1:ab:3e:3f:3f:4c:b0:32:e7:33:52:61:9a:4d:d0:4f:
de:70:45:31:0f:91:ec:0a:63:3f:69:a6:48:04:7c:8c:18:1a:
99:77:b0:8d:c8:1f:9b:b2:55:d0:9d:f1:57:67:5f:b2:de:c6:
5b:81:af:46:02:ad:11:ef:62:23:d5:93:38:d1:c4:bb:c0:11:
fd:e1:69:24:fa:86:e4:ff:b3:28:45:26:85:58:eb:df:67:64:
a9:27:c1:ea:b4:1f:1e:a0:7d:3f:7c:71:87:91:19:0c:0d:a2:
90:66:22:f8:d8:74:8a:22:34:0b:d2:ce:3d:bc:d7:b8:7a:98:
d1:4b:9f:e5:e4:80:b3:d8:d6:37:3c:ae:f4:81:47:45:25:6c:
25:ea:34:0c:b7:fb:e6:16:9d:fa:ce:d1:ba:f6:6c:12:9a:92:
1c:26:88:a7:d0:1f:b5:80:e4:51:d4:70:60:30:f3:f6:ac:e5:
f6:ab:e2:79:60:1f:6a:79:ec:40:73:5b:73:e3:6e:a8:ce:8c:
0b:a4:54:8a:fb:57:0c:e2:03:47:e3:45:27:87:ff:a1:93:98:
1a:53:02:bf:02:c1:e2:ea:fc:aa:27:78:c3:eb:88:24:68:2f:
d1:0d:5f:05:6a:87:84:0c:3e:10:bc:b1:66:24:17:fc:c0:c6:
3f:77:80:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:36 2024 by rpki-client on console-fra.rpki-client.org