Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/SmXNNjiZhPkgoX9EpTmji8KO4MY.roa
File: SmXNNjiZhPkgoX9EpTmji8KO4MY.roa (raw, json)
Hash identifier: 1nr7ppbdbUgPGVfHzvv4nuwB8/9cIwh51Dbqjq29B7U=
Subject key identifier: 4A:65:CD:36:38:99:84:F9:20:A1:7F:44:A5:39:A3:8B:C2:8E:E0:C6
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01900106E71ED3261B31874C973D42808CB9
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/SmXNNjiZhPkgoX9EpTmji8KO4MY.roa
Signing time: Mon 10 Jun 2024 07:22:27 +0000
ROA not before: Mon 10 Jun 2024 07:22:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 62.164.224.0/20 maxlen: 20
66.9.96.0/20 maxlen: 24
77.223.192.0/21 maxlen: 24
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
88.135.96.0/20 maxlen: 24
93.119.184.0/21 maxlen: 24
94.101.103.0/24 maxlen: 24
95.178.8.0/21 maxlen: 24
116.50.16.0/21 maxlen: 24
121.127.56.0/21 maxlen: 24
176.222.48.0/22 maxlen: 24
192.200.192.0/19 maxlen: 24
198.145.112.0/22 maxlen: 24
212.32.96.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 03:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:06:e7:1e:d3:26:1b:31:87:4c:97:3d:42:80:8c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jun 10 07:22:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a65cd36389984f920a17f44a539a38bc28ee0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:26:00:56:99:ba:31:3f:a9:6f:4e:7a:a8:71:
7d:e6:73:93:51:7d:73:17:3b:e7:eb:2e:31:b5:8f:
96:05:1f:cc:1d:c9:53:43:da:47:d8:e6:c9:ff:d8:
43:de:5a:1c:d9:3d:71:98:dc:62:a5:e9:e0:f3:75:
68:c7:ca:ff:87:00:9c:76:fb:73:ad:95:77:99:e0:
3b:20:bc:96:c9:36:3a:18:8c:6e:2f:c4:74:45:1d:
4d:9d:7a:21:c0:22:ad:ae:69:f0:08:10:d4:0a:4f:
f0:f0:8d:a0:3b:86:8e:e5:f2:f1:10:0b:59:80:4f:
58:49:b5:0c:e5:1c:b6:2a:b0:b1:f6:d0:e7:9b:79:
44:05:8a:75:f4:d0:91:59:79:c8:64:4f:0a:be:8d:
ec:03:c4:f8:d0:ab:24:20:99:17:fb:d1:eb:da:9f:
60:cf:fd:9e:ed:7a:f1:20:aa:73:02:23:e2:61:41:
11:f9:48:4c:cf:f8:9a:47:23:01:06:e0:3a:0a:6a:
0d:ca:46:d6:52:a2:f0:ed:e4:1b:de:6b:24:0b:df:
27:24:03:bc:17:97:ec:13:6d:c9:62:b1:30:85:4d:
c9:38:3d:6f:32:60:9b:24:38:de:6d:fa:62:71:90:
f2:30:b7:fb:8b:ad:76:2e:5f:0f:78:53:08:f3:52:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:65:CD:36:38:99:84:F9:20:A1:7F:44:A5:39:A3:8B:C2:8E:E0:C6
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/SmXNNjiZhPkgoX9EpTmji8KO4MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.224.0/20
66.9.96.0/20
77.223.192.0-77.223.201.255
79.139.64.0/23
83.142.200.0/21
88.135.96.0/20
93.119.184.0/21
94.101.103.0/24
95.178.8.0/21
116.50.16.0/21
121.127.56.0/21
176.222.48.0/22
192.200.192.0/19
198.145.112.0/22
212.32.96.0/20
Signature Algorithm: sha256WithRSAEncryption
81:ef:e2:8d:bc:52:46:b5:3d:93:3f:d4:8f:a6:0f:1a:d7:db:
19:d9:2f:a9:e4:fa:bc:e0:be:d8:e7:e8:a3:cb:c4:88:0b:88:
b0:22:19:b4:8e:d3:ec:f9:5e:57:f3:7b:ec:98:ab:3e:62:a6:
b4:36:78:72:fb:e1:d3:31:a6:65:83:2f:56:cd:63:ae:30:19:
5c:e0:52:f1:32:e7:3e:b4:b8:62:c8:8c:45:6a:70:b5:6d:25:
ba:ca:29:d1:98:05:de:e8:57:4a:a3:53:c1:6a:74:23:be:c2:
3b:80:60:ba:cf:d4:a2:7a:e3:27:2d:6b:d4:1c:71:fc:92:4d:
62:fb:b5:e0:8e:b5:4b:22:d1:91:04:61:1b:18:d6:ec:5b:72:
e8:d5:56:85:a2:dc:f1:0c:37:15:32:ca:0a:c2:e5:7a:3f:e4:
00:62:6c:3b:b8:cc:bd:33:7d:9d:37:f1:6a:8f:8a:fe:ad:42:
60:2e:a9:0f:f1:c5:b9:08:51:e4:7b:7c:87:40:bc:97:fb:73:
eb:e8:3c:a9:d5:87:19:27:10:03:e7:bd:57:80:60:bf:60:53:
c7:b4:94:2e:5f:31:f8:d3:88:e6:33:71:8a:74:fe:0e:c6:10:
8c:f5:f4:8f:ed:2f:ed:61:b4:fa:91:43:46:b4:67:67:4c:d1:
69:d9:57:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:47 2025 by rpki-client