Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/oV1XfTCeu37MvjghGCaoLGhw7Cc.roa
File: oV1XfTCeu37MvjghGCaoLGhw7Cc.roa (raw, json)
Hash identifier: 3G2GyHnPaJXDTSaOL43ZJf0ompkjOcL63QMmmYmPiaA=
Subject key identifier: A1:5D:57:7D:30:9E:BB:7E:CC:BE:38:21:18:26:A8:2C:68:70:EC:27
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 01857246EB468AC296B07029CDC7324C4439
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/oV1XfTCeu37MvjghGCaoLGhw7Cc.roa
Signing time: Mon 02 Jan 2023 11:38:48 +0000
ROA not before: Mon 02 Jan 2023 11:38:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61967
IP address blocks: 185.20.232.0/22 maxlen: 22
91.220.244.0/24 maxlen: 24
45.137.92.0/22 maxlen: 22
2a04:1600::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:eb:46:8a:c2:96:b0:70:29:cd:c7:32:4c:44:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Jan 2 11:38:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a15d577d309ebb7eccbe38211826a82c6870ec27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:15:1b:59:32:3d:6a:00:ae:89:b2:1e:e1:eb:
af:1a:b8:5c:3d:78:dd:7f:2a:78:99:27:8c:22:3c:
0b:90:b9:7e:d9:8c:89:b3:fa:6a:a5:c0:c0:3c:99:
76:e9:3f:07:f7:d2:6b:84:6c:8b:1e:94:07:9d:41:
2a:79:9a:39:f1:b5:27:bf:eb:aa:0f:d0:55:a0:91:
44:31:c2:9b:82:a2:cd:c2:b6:5c:e5:44:4d:65:82:
67:81:64:46:62:c6:a6:d3:46:f6:81:ec:ce:ce:70:
92:1b:64:f3:36:1e:f3:1e:05:e8:32:c2:2a:15:22:
f2:59:f1:79:6d:5a:96:66:a4:a3:94:9e:eb:39:88:
4e:ca:86:9a:81:0b:7f:c9:e5:f9:dd:0f:d0:03:d7:
1e:cd:15:cf:21:29:db:cc:b6:ec:92:3b:bc:ef:4a:
e2:fc:ff:bf:65:68:f7:3f:58:0e:60:bd:07:8c:b8:
f3:22:f8:db:54:bf:e7:47:b6:04:19:f9:65:b4:2a:
df:3c:a1:72:71:c1:47:b8:b5:91:dc:2d:54:e2:7c:
d9:9d:fa:6e:5e:cf:b2:83:ae:07:07:8c:35:11:56:
74:f2:ba:9d:e9:bc:0d:d1:ed:a0:e5:2d:77:ab:00:
5c:59:cc:e2:77:b9:80:e7:c9:9d:6e:ef:1a:63:2f:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5D:57:7D:30:9E:BB:7E:CC:BE:38:21:18:26:A8:2C:68:70:EC:27
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/oV1XfTCeu37MvjghGCaoLGhw7Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.92.0/22
91.220.244.0/24
185.20.232.0/22
IPv6:
2a04:1600::/29
Signature Algorithm: sha256WithRSAEncryption
3a:7e:bd:5c:37:85:be:30:46:10:db:9c:5b:40:53:3f:19:a5:
19:c3:a1:33:37:6f:a2:10:43:77:84:5f:29:55:0b:e0:e3:9e:
c7:90:9a:d7:5f:d7:1f:98:6f:85:68:82:a1:2b:b8:fc:16:e2:
15:e2:e5:98:4e:07:7d:7e:bf:d3:0a:2d:58:bd:2c:b7:d1:96:
2f:d6:62:d6:2a:59:3b:2d:98:a1:8b:84:a4:9b:b1:db:a2:34:
c0:9e:0e:3b:2c:c1:01:d6:ef:11:6e:bd:f0:56:a5:61:19:c2:
9e:f8:1f:c0:a4:49:76:85:72:8c:b1:37:32:f2:7f:9d:5c:f8:
4b:be:16:7d:09:f2:ba:5d:7f:e5:78:1a:cb:f3:4d:b7:34:e3:
7b:9e:d9:de:2f:a6:06:48:47:8d:1b:7a:23:d8:5a:27:52:8a:
5e:96:5d:3c:4d:1c:34:ec:89:d9:10:ad:27:aa:e0:86:f3:65:
5d:d9:77:e4:0a:68:30:78:fb:b0:66:4c:64:30:87:27:a1:66:
ec:f4:fa:fe:27:89:ce:8d:97:28:6f:9e:9a:92:fd:24:b6:d9:
28:07:4f:ec:92:18:1d:4a:62:97:44:7a:0e:35:e4:cd:68:48:
50:d3:f3:f1:19:5d:05:44:1e:79:8a:23:fd:50:2a:54:e7:a2:
ac:77:4a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:48 2023 by rpki-client on console-ams.rpki-client.org