Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/scYpCy4LGYxo3a42OI24rYlbFrs.roa
File: scYpCy4LGYxo3a42OI24rYlbFrs.roa (raw, json)
Hash identifier: 5H982Bp8UvU1VEh0GB95LX8mD2w3bANla47YnsDEDkc=
Subject key identifier: B1:C6:29:0B:2E:0B:19:8C:68:DD:AE:36:38:8D:B8:AD:89:5B:16:BB
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0C066CDCE0CDD69693F4604C3617C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/scYpCy4LGYxo3a42OI24rYlbFrs.roa
Signing time: Mon 02 Jan 2023 05:25:04 +0000
ROA not before: Mon 02 Jan 2023 05:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204744
IP address blocks: 195.136.65.0/24 maxlen: 24
195.136.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:c0:66:cd:ce:0c:dd:69:69:3f:46:04:c3:61:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1c6290b2e0b198c68ddae36388db8ad895b16bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:91:e5:a0:4d:c4:a7:65:0a:0b:8a:fe:ee:45:
a7:58:5e:2e:8e:0c:c1:18:ce:d3:1b:02:85:38:51:
d8:b1:92:eb:06:34:90:db:b6:36:5c:4e:eb:85:fd:
73:9f:85:e7:9e:56:3d:fc:d2:08:36:31:db:41:82:
3f:ce:64:2e:62:34:d1:c5:21:3d:83:ca:cf:d7:ba:
ff:ce:b4:6c:12:a1:d8:8a:a1:07:57:cf:09:aa:1c:
44:87:0b:d0:32:6d:19:b8:16:ad:c9:0b:cd:80:a5:
d3:24:58:4d:32:65:84:24:48:87:f1:62:d3:5e:44:
b4:5b:6c:a4:27:a0:ff:b9:f8:07:28:91:91:f4:51:
75:98:7c:8c:34:0c:b1:c6:97:79:c9:bf:7e:38:4b:
d6:20:e3:a7:e4:fb:3c:56:5b:b3:6d:45:aa:32:5d:
d8:58:77:5c:21:28:54:8e:7c:4e:ca:07:f7:2f:f1:
6b:12:c5:c9:04:e5:d0:c5:0b:7a:51:09:af:cc:f9:
8d:e8:66:d8:1f:ce:bf:39:98:d3:bd:40:0c:9c:32:
ea:a7:09:84:90:d3:fc:12:f6:3e:c9:8a:7a:8c:55:
f4:15:f8:00:43:99:53:73:06:7a:64:03:72:d8:9e:
5a:90:53:68:11:89:ff:5c:11:ee:00:5f:bc:95:98:
3d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C6:29:0B:2E:0B:19:8C:68:DD:AE:36:38:8D:B8:AD:89:5B:16:BB
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/scYpCy4LGYxo3a42OI24rYlbFrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.27.0/24
195.136.65.0/24
Signature Algorithm: sha256WithRSAEncryption
98:6c:c8:87:af:3e:7b:53:c9:92:07:ec:9b:20:30:50:ac:98:
61:43:8c:38:9f:bd:0d:1d:e7:6e:c9:dd:68:c6:3c:29:9e:68:
94:3f:6d:91:24:48:cd:af:87:cb:c6:7c:07:e9:a1:f3:78:17:
bb:67:39:c2:90:0f:fc:69:48:40:a2:54:f6:2a:a1:0b:af:40:
da:9d:c4:f9:2a:6a:12:e4:ed:31:24:bb:e8:4e:1e:61:74:fa:
0c:d3:26:e9:29:cb:36:4b:e0:0f:01:f9:dc:c3:af:4b:8b:89:
5d:73:3d:98:5d:6e:43:f1:0f:67:a7:bf:5f:b4:c4:4b:2e:59:
50:1f:4b:e4:45:7a:09:fb:09:8c:6c:64:30:a1:9c:9f:67:20:
35:e8:9a:3e:f7:77:f3:0f:12:0f:15:b5:dc:16:39:64:07:8b:
cc:22:53:44:cf:97:f9:a0:1f:07:69:17:12:83:9b:bb:3c:9b:
77:10:ec:1e:79:93:47:10:38:be:29:df:11:37:40:cc:96:3c:
68:4b:cc:55:8a:ed:60:a3:65:3e:32:73:f1:d9:49:a9:36:24:
50:fb:3f:1c:18:a7:fe:89:3e:e8:52:ad:8e:72:d6:a5:3e:e0:
58:35:3a:09:04:e1:86:58:e3:dd:d3:0a:96:c1:38:0a:96:24:
a9:42:39:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org