Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/smfRbdsPuq-y1XPGB2HH6thyr8M.roa
File: smfRbdsPuq-y1XPGB2HH6thyr8M.roa (raw, json)
Hash identifier: wguTIax24ci1IyXux0RQoqyJEOveznJAbGKHyP9oBlA=
Subject key identifier: B2:67:D1:6D:DB:0F:BA:AF:B2:D5:73:C6:07:61:C7:EA:D8:72:AF:C3
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01882DA5B43D215632138C0BD3AB0EB90C2B
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/smfRbdsPuq-y1XPGB2HH6thyr8M.roa
Signing time: Thu 18 May 2023 06:56:54 +0000
ROA not before: Thu 18 May 2023 06:56:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34358
IP address blocks: 89.34.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 19:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2d:a5:b4:3d:21:56:32:13:8c:0b:d3:ab:0e:b9:0c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: May 18 06:56:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b267d16ddb0fbaafb2d573c60761c7ead872afc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:69:9f:bd:11:f7:ec:c1:7c:af:21:ae:32:
7e:71:f1:10:08:d9:e6:5a:12:fe:68:a3:79:c3:73:
ae:a9:a9:ce:4c:05:4c:ef:9d:e1:b0:f7:d2:dc:9c:
00:9c:21:9a:ad:98:5b:7b:2a:31:2d:f5:4f:78:81:
11:f8:25:a8:39:99:40:8a:72:12:75:85:81:68:c5:
ac:d4:c8:42:41:d7:26:97:fc:2a:ad:3e:1f:62:27:
f2:b9:22:4d:37:e7:6e:4d:6b:ae:fa:8d:32:20:ee:
8e:54:c7:e6:fa:da:55:13:fb:8d:81:eb:e9:61:81:
44:aa:0b:64:08:a5:de:ab:18:42:f4:73:f8:f8:6a:
9c:fe:78:5b:f2:06:f8:c6:d9:5b:93:78:c1:0b:9f:
e1:ca:76:3c:b1:30:b2:ff:21:78:e0:f8:ac:6b:09:
cb:db:9f:4b:6e:29:39:7b:2e:b3:94:c5:ff:fa:43:
38:54:97:f9:04:c7:a2:c8:2b:8b:91:54:2d:5a:56:
44:bf:16:a8:c6:d6:03:41:df:06:a4:46:6e:b7:30:
a0:b6:d7:f5:d0:ee:06:05:e6:0c:ef:26:b6:3c:48:
a5:f2:e5:1d:3b:fa:3e:e7:58:09:f9:77:1c:8e:07:
92:c4:04:20:94:d4:99:94:3b:a5:88:e1:c6:7c:b5:
b6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:67:D1:6D:DB:0F:BA:AF:B2:D5:73:C6:07:61:C7:EA:D8:72:AF:C3
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/smfRbdsPuq-y1XPGB2HH6thyr8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:73:4e:a2:d4:d6:a9:cd:99:55:af:12:db:a4:bb:82:a2:f4:
41:f6:15:92:b2:27:d5:38:b9:d6:96:d0:92:f9:a9:5f:4f:32:
ca:67:e6:e6:f2:84:6d:56:7d:e1:6c:d4:b3:5d:bc:30:8a:c4:
0f:14:8f:47:95:4c:48:06:ef:0c:ae:51:16:7b:25:1a:43:d4:
c5:d6:49:3b:ba:e2:f7:bd:d9:93:c7:7e:c1:21:9f:6f:2b:77:
fd:2e:89:9f:73:eb:d2:b8:b8:12:12:11:c9:01:e8:ff:e1:a3:
ea:30:94:ec:f4:51:70:7d:ba:82:c2:8c:fc:89:f8:bc:7d:e7:
0c:41:95:90:de:f5:b6:15:b6:56:0c:9e:28:fd:0d:ee:7e:3e:
23:6b:30:35:2b:56:2e:e8:d4:bd:01:80:72:c0:b7:2b:a3:5c:
07:c6:b5:fd:bf:c6:e1:c7:73:4e:2e:7b:87:3d:bb:9f:7e:85:
da:7d:60:2a:95:02:e9:40:60:3d:ca:59:0c:21:7d:63:88:80:
ff:ba:43:a5:b8:6b:d7:8e:cf:31:c0:e2:c3:c1:bc:33:ac:bb:
f3:45:ce:23:12:66:53:61:c2:fb:02:0d:3e:b8:a8:3a:48:9e:
e4:9f:df:55:5b:4f:d7:69:b7:97:f9:33:c3:30:01:e9:1d:ac:
fb:f4:23:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:53 2024 by rpki-client on console-ams.rpki-client.org