Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/scY0-x6cbF1xnXp_WKlLHVST05U.roa
File: scY0-x6cbF1xnXp_WKlLHVST05U.roa (raw, json)
Hash identifier: JpAqe7tLsP6dJ0wL7EWQH3LYARtMqwmQN2FyTbKzQzI=
Subject key identifier: B1:C6:34:FB:1E:9C:6C:5D:71:9D:7A:7F:58:A9:4B:1D:54:93:D3:95
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0189B16ED144498702F5CF849ABE315E0ECD
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/scY0-x6cbF1xnXp_WKlLHVST05U.roa
Signing time: Tue 01 Aug 2023 14:09:36 +0000
ROA not before: Tue 01 Aug 2023 14:09:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141968
IP address blocks: 45.66.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:6e:d1:44:49:87:02:f5:cf:84:9a:be:31:5e:0e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 1 14:09:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1c634fb1e9c6c5d719d7a7f58a94b1d5493d395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:d8:34:b4:c8:bc:f4:23:3f:7e:1b:39:26:
d8:9a:1a:0f:ea:0c:76:16:ce:9a:56:bd:91:94:9e:
52:b7:61:9e:42:ca:30:76:f8:e1:8f:3d:24:d6:1f:
ac:f4:1c:6b:a6:a2:2f:c8:5b:85:96:9b:35:3e:96:
41:14:c7:c0:68:a9:13:e0:e2:8e:4d:73:5a:49:b1:
ef:3a:48:1d:f2:b7:d5:47:07:ff:02:36:29:5c:17:
41:4f:76:5c:4e:80:ea:f7:2e:09:d0:a9:4e:fc:e7:
53:a6:d9:75:cf:92:b1:b8:93:5b:9b:71:59:e9:a3:
59:6f:a5:66:b8:1c:cc:38:28:1c:31:ae:0f:f9:61:
d1:42:b0:9d:28:d8:3c:cd:6d:c0:7f:30:76:51:b4:
0c:7c:d6:03:80:72:fe:1e:05:5b:c7:19:fb:dc:7e:
6e:af:1f:cb:96:01:b6:68:98:9f:8b:dd:73:c9:c1:
72:cd:bf:2e:78:61:ab:d1:08:c5:f6:ac:cd:8e:f4:
b1:cc:f3:ba:a4:c3:c7:f2:4c:28:f4:42:a7:e5:6c:
97:95:5c:18:a2:0e:1d:90:8b:f7:31:15:2f:a9:c0:
95:a1:93:5a:d0:ce:7a:06:ba:d1:81:25:2f:4b:0a:
6d:43:26:a8:6c:77:35:fd:7a:44:58:0d:de:3f:90:
aa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C6:34:FB:1E:9C:6C:5D:71:9D:7A:7F:58:A9:4B:1D:54:93:D3:95
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/scY0-x6cbF1xnXp_WKlLHVST05U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.153.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a3:e1:29:99:c7:c0:bd:6a:79:52:ff:6b:39:c4:e2:ef:95:
f7:10:5e:6a:de:73:63:16:cb:04:d9:c9:f1:eb:7e:e7:fd:d2:
82:dc:7e:96:62:c8:8e:61:eb:c9:f4:b3:d5:94:26:6a:09:13:
47:12:09:14:ae:91:0e:68:11:5d:83:89:48:b5:c5:4d:0f:33:
78:10:bf:4e:d5:d7:f3:4b:55:43:d7:8c:28:6f:51:cd:12:81:
f4:f7:59:29:65:45:04:d5:0c:e8:5d:8e:a1:77:e0:58:63:69:
97:eb:be:4e:34:ba:6d:5a:4e:e0:87:51:d7:7b:d3:09:42:fa:
6d:7a:8d:a8:81:94:10:83:33:6a:eb:26:65:67:b3:2c:34:24:
3b:e0:6b:72:ee:13:53:ca:9c:3b:95:95:23:b9:0d:2c:d1:42:
31:eb:df:dc:fe:e7:36:d6:80:a9:9c:e4:2f:4c:5b:35:98:0a:
cf:23:2e:b1:3a:7e:17:32:9b:cd:17:ac:28:55:aa:09:bf:73:
70:42:8e:18:45:e0:90:04:d5:f5:8d:3d:48:f8:39:d9:ad:4e:
53:2c:a5:35:33:13:8c:f5:08:4f:9c:e1:a5:ad:55:a9:fc:8e:
e0:72:c0:29:0f:28:a8:f2:bd:71:bf:d1:c7:c1:e4:b5:f4:f0:
cb:38:fd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:25 2024 by rpki-client on console-fra.rpki-client.org