Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/ydhDCbo8OlurxlDHjW6NjgVB5ZI.roa
File: ydhDCbo8OlurxlDHjW6NjgVB5ZI.roa (raw, json)
Hash identifier: v/qrUls+7BqN/BCeoqnC+6xpXl0ixMgpPEln2a7H+EI=
Subject key identifier: C9:D8:43:09:BA:3C:3A:5B:AB:C6:50:C7:8D:6E:8D:8E:05:41:E5:92
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 0185A57239417CC055D5F490D5C3F1D09420
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/ydhDCbo8OlurxlDHjW6NjgVB5ZI.roa
Signing time: Thu 12 Jan 2023 10:06:44 +0000
ROA not before: Thu 12 Jan 2023 10:06:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61967
IP address blocks: 91.220.244.0/24 maxlen: 24
45.137.92.0/22 maxlen: 22
2a04:1600::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:72:39:41:7c:c0:55:d5:f4:90:d5:c3:f1:d0:94:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Jan 12 10:06:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9d84309ba3c3a5babc650c78d6e8d8e0541e592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:db:c4:1e:ab:21:dc:33:36:64:96:6b:08:
bb:35:32:69:5c:d0:49:f7:b5:0a:28:d9:1f:e7:15:
be:54:d4:4e:7d:8a:8b:5f:0b:83:15:d4:bc:f0:aa:
9c:f8:43:cb:79:a2:72:ad:b9:52:b9:fa:fb:07:c7:
f6:f5:5c:58:cd:08:a0:64:8e:95:fd:b3:5e:b7:b1:
d5:0c:46:c7:3f:b3:d2:39:6a:31:c6:d8:2f:be:ae:
c0:17:47:43:26:78:3a:4f:c4:9c:17:63:c5:1e:78:
7d:75:d4:f0:7a:09:5d:1e:52:ae:d8:8e:18:ad:a2:
8f:a4:bc:ba:f1:74:ec:f9:96:f9:2a:2f:96:1b:af:
d1:0e:aa:e5:1e:02:fc:77:c7:8b:01:77:4d:1d:fa:
b4:b3:78:c7:36:c6:8f:20:f8:17:e9:6f:9c:96:fa:
84:d0:ae:c3:ce:53:b7:3c:34:34:df:d4:15:8e:7f:
f0:04:2e:59:e5:1c:93:d7:73:02:b8:99:e6:ce:c6:
c0:8e:b6:21:da:90:38:a8:29:33:4c:db:c9:35:b7:
99:41:de:1a:de:15:16:96:ac:43:f2:af:79:73:d0:
e6:3f:c9:ef:6f:c5:f4:29:63:fc:57:46:26:c2:67:
58:f5:62:f0:22:d0:36:98:57:4b:88:72:85:c6:53:
ac:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D8:43:09:BA:3C:3A:5B:AB:C6:50:C7:8D:6E:8D:8E:05:41:E5:92
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/ydhDCbo8OlurxlDHjW6NjgVB5ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.92.0/22
91.220.244.0/24
IPv6:
2a04:1600::/29
Signature Algorithm: sha256WithRSAEncryption
46:39:9d:c8:ee:c5:54:f4:7a:f0:78:25:82:8e:c0:6f:d2:41:
39:c1:91:37:41:6b:82:61:6e:cc:2f:5e:23:4a:5b:84:38:a3:
19:4b:e6:d8:e6:4a:66:c2:b9:e6:86:76:c5:99:fa:05:1f:42:
a7:7c:9a:71:ca:e3:68:51:bd:1b:7a:f8:22:42:d4:9b:1f:20:
ee:36:33:89:1c:2b:c7:63:fb:60:c1:34:bd:d2:16:98:01:56:
0c:3c:61:1a:e4:3a:95:5e:f2:7e:dc:fa:db:27:cf:5e:0c:83:
a6:43:d5:f4:50:17:66:6a:66:bf:98:a2:42:78:99:78:cd:bd:
2f:86:38:b2:12:19:4e:23:b3:18:f7:6d:c4:8d:40:cc:95:20:
31:5a:8e:f3:d6:64:cc:8d:d1:68:1b:23:f5:f1:94:ff:77:25:
45:6a:cb:29:cd:f7:ce:e4:29:d3:89:32:81:a6:f6:a3:45:43:
dd:b6:34:35:68:54:da:8d:1a:6c:4c:a4:b8:be:8b:30:57:f5:
b4:42:06:06:12:6e:9e:c7:c9:a8:bb:27:b7:06:8f:c4:62:1c:
6c:03:ca:73:37:e4:dd:2c:a2:ff:71:5d:90:37:e1:bf:59:1f:
f0:ce:20:8d:ce:00:aa:72:ec:fe:af:82:94:a9:26:2f:43:ae:
87:97:6a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:48 2023 by rpki-client on console-ams.rpki-client.org