Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/smyGqpGa19qEGHX1jdPt6Cq2HVU.roa
File: smyGqpGa19qEGHX1jdPt6Cq2HVU.roa (raw, json)
Hash identifier: VxnLLIdoMWa2m6ockQGzs9J8S5oJptmzSkEHQEdV5Eo=
Subject key identifier: B2:6C:86:AA:91:9A:D7:DA:84:18:75:F5:8D:D3:ED:E8:2A:B6:1D:55
Certificate issuer: /CN=86afaae2e3e054073a38aab635dc96460eef487e
Certificate serial: 01856F4290D50DE9FF0E9AB110773BDE59A3
Authority key identifier: 86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/smyGqpGa19qEGHX1jdPt6Cq2HVU.roa
Signing time: Sun 01 Jan 2023 21:35:11 +0000
ROA not before: Sun 01 Jan 2023 21:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212216
IP address blocks: 195.28.10.0/24 maxlen: 24
185.73.226.0/24 maxlen: 32
80.249.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Oct 2023 11:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:90:d5:0d:e9:ff:0e:9a:b1:10:77:3b:de:59:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86afaae2e3e054073a38aab635dc96460eef487e
Validity
Not Before: Jan 1 21:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b26c86aa919ad7da841875f58dd3ede82ab61d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:80:17:e8:93:91:e8:ba:7a:94:b8:37:4c:1b:
70:0a:c5:dc:75:3d:78:05:d1:8b:05:85:47:29:36:
14:9a:f1:ca:f0:ec:a6:4e:cd:bb:82:06:33:0b:cc:
a5:5e:1b:63:c7:00:04:70:cd:64:7d:7f:1a:3c:14:
55:6a:f3:3c:ea:2a:e6:ea:54:27:2a:4f:08:af:aa:
2a:92:11:70:27:8b:86:8c:97:39:b9:3e:6a:56:1c:
8b:99:68:9c:1d:bb:7e:c6:ac:07:b0:0a:c0:63:7e:
89:39:bc:5c:17:9f:f6:20:2c:db:50:85:6a:32:cf:
a1:0b:d9:ea:82:3e:6c:28:31:f8:85:aa:48:ff:93:
f7:f5:a7:4c:84:b7:18:45:48:77:d4:6e:ff:db:c6:
7b:46:e8:4c:f4:a7:f9:d1:90:f8:3d:b2:0a:03:ac:
22:3e:d6:1f:c6:6c:9c:8a:ed:b3:f0:40:f7:0b:4a:
88:b1:5f:34:01:10:6b:5a:b2:94:1c:21:0e:82:8f:
0d:0b:38:18:9c:96:0f:4f:bf:00:65:8c:15:0e:7f:
38:a2:6f:af:fc:a8:c3:7b:3f:08:62:5c:85:28:50:
1e:46:10:8c:0a:85:77:1d:58:3c:06:d5:02:75:a0:
0e:06:39:ba:16:af:74:1a:6a:d9:cc:7f:01:58:98:
be:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6C:86:AA:91:9A:D7:DA:84:18:75:F5:8D:D3:ED:E8:2A:B6:1D:55
X509v3 Authority Key Identifier:
keyid:86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/smyGqpGa19qEGHX1jdPt6Cq2HVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.115.0/24
185.73.226.0/24
195.28.10.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3e:25:5e:3b:e0:aa:2c:74:95:bf:d7:8c:df:92:81:7d:f3:
36:b7:5c:7b:e7:39:2a:60:68:6d:12:f4:71:57:ef:c3:d1:a7:
f6:2e:0f:41:e6:f8:2e:1f:4f:4b:a5:25:ad:05:92:da:a3:2e:
c8:73:2e:31:1b:c9:d4:ed:97:ea:6f:9a:50:d2:b8:13:d7:9e:
5c:cd:bf:79:c9:b2:7a:24:88:9e:e6:13:34:3e:1c:e5:ca:d8:
e9:b5:0f:5c:16:22:c7:80:6d:dc:e0:3d:02:38:dd:28:f1:ab:
71:ce:11:67:30:32:7d:63:b3:16:3d:cd:43:ed:86:48:4f:8d:
85:6d:a9:1d:61:ff:51:ff:18:24:75:fd:1a:93:b0:5f:1c:d4:
34:a7:63:e8:e4:17:79:bb:8f:81:a5:04:8d:c7:d7:a6:75:42:
67:1f:a0:e5:c5:3c:d2:54:02:13:76:97:a5:21:7d:8c:e4:10:
06:7e:00:f3:f5:c2:d4:52:de:04:6e:3f:79:37:ab:da:fd:cd:
4f:80:ea:75:c3:85:d9:1d:0f:ed:b2:47:68:83:2a:85:19:46:
3e:bc:04:a8:a9:e2:44:c3:6f:43:fe:e8:67:f3:42:af:5d:d6:
69:dc:f5:a7:e7:6a:e5:e8:48:3b:ae:0e:52:c0:61:fa:9f:52:
f8:02:ff:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:39 2024 by rpki-client on console-ams.rpki-client.org