Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/sCmnl6btBkOg5KMSvas4tee3sgM.roa
File: sCmnl6btBkOg5KMSvas4tee3sgM.roa (raw, json)
Hash identifier: 4tF4kmqC+CORIUcuwfJjTFqjqAcXYV3c5aWLfqlw1uk=
Subject key identifier: B0:29:A7:97:A6:ED:06:43:A0:E4:A3:12:BD:AB:38:B5:E7:B7:B2:03
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 0185B9ECCB221365FAA1A7303467CA8251C0
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/sCmnl6btBkOg5KMSvas4tee3sgM.roa
Signing time: Mon 16 Jan 2023 09:33:01 +0000
ROA not before: Mon 16 Jan 2023 09:33:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61967
IP address blocks: 185.20.232.0/22 maxlen: 22
91.220.244.0/24 maxlen: 24
45.137.92.0/22 maxlen: 22
2a04:1600::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:ec:cb:22:13:65:fa:a1:a7:30:34:67:ca:82:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Jan 16 09:33:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b029a797a6ed0643a0e4a312bdab38b5e7b7b203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:13:ee:2d:d1:c9:94:02:0a:0b:d7:43:c1:a7:
66:1e:d2:1b:54:ad:32:8c:c0:88:ff:5a:21:e5:29:
1d:0f:d7:28:62:f2:8e:f5:ab:7a:c5:3d:6b:e5:a6:
96:c8:b8:67:32:4a:a8:2f:5d:af:f0:e0:f2:3c:fd:
2c:32:49:13:08:15:10:bf:29:6e:8f:3e:31:a9:51:
48:c2:a9:ae:ee:9c:4a:ed:22:00:30:f2:9e:f5:88:
99:27:84:d8:40:04:72:2a:11:6b:b7:92:1d:54:a2:
32:4f:84:16:e7:97:d5:72:48:e8:0e:bf:77:1b:ab:
db:2a:14:88:80:6b:96:82:23:66:24:b2:05:99:9b:
15:ea:6b:9f:f0:7f:66:53:45:21:cd:c3:80:e4:53:
48:f1:df:7c:93:bc:a0:52:22:c2:45:74:20:c2:50:
21:5c:e6:ee:d6:62:f8:c8:47:5a:db:5d:49:d8:0e:
7d:f1:65:42:7e:88:05:c6:e0:7e:41:80:89:59:7b:
14:dd:ae:d2:0c:02:99:8d:12:05:ef:4e:74:63:5d:
bf:15:8e:35:16:50:49:0a:77:21:13:1b:66:d5:29:
64:09:b7:71:8f:c9:70:6b:ea:9c:db:77:db:ff:5b:
09:0f:8f:99:17:9b:5f:4f:73:f7:41:fb:d9:a8:3d:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:29:A7:97:A6:ED:06:43:A0:E4:A3:12:BD:AB:38:B5:E7:B7:B2:03
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/sCmnl6btBkOg5KMSvas4tee3sgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.92.0/22
91.220.244.0/24
185.20.232.0/22
IPv6:
2a04:1600::/29
Signature Algorithm: sha256WithRSAEncryption
97:6e:f6:fa:db:b3:d7:13:2a:36:1b:85:ff:cd:12:c1:8a:b8:
27:de:1d:8d:58:24:83:82:ec:40:0d:96:4a:61:23:42:83:56:
a5:39:1f:e2:2f:6a:9c:d6:f6:e6:85:82:53:af:12:d9:72:57:
fc:12:1f:1c:e0:44:17:26:ca:c6:24:19:30:de:71:67:94:a1:
d0:3c:71:59:8b:c7:84:1f:37:9f:3e:33:ac:60:5e:50:1f:12:
c6:77:08:d9:a1:9f:87:89:58:81:ec:0d:5d:46:2b:54:b6:e5:
bb:6b:10:83:19:0f:2b:21:8d:60:df:06:c0:2a:02:9c:e8:ca:
2b:10:46:4e:ab:e5:09:e7:c5:35:0d:d4:7b:6c:50:55:58:26:
99:e3:a2:14:16:f9:3f:fa:31:b5:6f:df:f7:6e:43:3f:7c:19:
6b:09:ac:99:a6:14:b7:f1:56:d1:f6:06:d8:8f:fd:ec:7f:c2:
bf:72:cf:34:e9:07:a1:17:0f:9e:c7:17:df:ed:3c:08:b4:ee:
68:72:44:9d:26:61:19:13:95:5c:f2:a6:e9:bd:d9:d2:98:f6:
dc:8a:34:eb:1f:f7:90:70:98:8b:9c:df:b2:2d:23:30:30:97:
e3:86:64:3a:f0:1e:7c:92:e0:4f:65:75:a7:dc:77:e6:cb:0e:
f0:6c:7b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:43 2024 by rpki-client on console-ams.rpki-client.org