Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ScmPYAEViScDfUTQbSvpnJuggh4.roa
File: ScmPYAEViScDfUTQbSvpnJuggh4.roa (raw, json)
Hash identifier: u3yhWPqSU/RqZOiK6iNeBymrql23dZKyYlgSTU3EtX0=
Subject key identifier: 49:C9:8F:60:01:15:89:27:03:7D:44:D0:6D:2B:E9:9C:9B:A0:82:1E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0190BF91626BA2F80A6842E8C52A1DF12AF4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ScmPYAEViScDfUTQbSvpnJuggh4.roa
Signing time: Wed 17 Jul 2024 07:21:34 +0000
ROA not before: Wed 17 Jul 2024 07:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215224
IP address blocks: 192.124.209.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 16:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:91:62:6b:a2:f8:0a:68:42:e8:c5:2a:1d:f1:2a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 17 07:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49c98f6001158927037d44d06d2be99c9ba0821e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:44:91:52:4c:83:be:22:ce:4d:09:a4:91:
2e:08:4f:8a:58:68:71:e5:12:f3:de:e9:7b:e9:27:
2c:4a:78:0a:df:67:9d:f1:4f:05:4a:4f:57:50:b2:
c7:bf:cc:b1:f4:2a:7f:99:96:db:9a:9d:bd:6f:93:
c2:5b:98:75:75:4d:7e:b9:4c:af:3d:fc:c4:98:98:
c7:f5:5d:88:55:88:49:b9:48:2f:ac:2d:78:3a:b9:
22:97:f5:3d:95:79:87:40:0e:4f:20:77:f6:50:bd:
43:a3:12:0a:b5:9c:e2:d2:95:a8:84:28:10:6d:aa:
69:f4:be:0f:d1:a8:f9:4f:40:4e:40:34:a0:c1:4a:
78:cd:50:83:c2:04:d5:a5:fa:41:71:2a:f4:ab:b2:
87:2a:fa:40:e0:fe:f5:75:fd:3b:1f:1f:9d:07:e5:
66:f9:52:2c:d3:7f:d5:ad:99:24:c4:16:c5:57:4c:
28:29:d4:14:d3:53:95:d5:a6:2e:b5:cf:ac:71:6d:
0d:1d:4e:a7:9a:d2:7f:d1:79:53:d8:0b:02:0c:04:
65:a8:e3:b3:89:f7:7d:23:af:c9:3a:c1:3a:17:16:
b5:ea:b2:b1:8c:05:d8:86:1f:2f:39:bc:e5:79:6b:
4f:2a:f8:85:25:cb:15:9a:ca:ca:e1:eb:89:2b:b7:
c5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C9:8F:60:01:15:89:27:03:7D:44:D0:6D:2B:E9:9C:9B:A0:82:1E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ScmPYAEViScDfUTQbSvpnJuggh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.209.0/24
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b5:26:e8:ea:63:6f:2c:de:97:cc:07:7c:89:2a:73:c0:43:
5f:b6:29:32:1b:b8:05:a6:39:9f:80:48:7b:5e:81:d8:6a:f2:
14:64:b3:d6:81:a7:c2:33:a4:32:9c:7a:15:e2:79:d7:e0:02:
99:16:c1:89:9a:89:5e:0a:3e:95:6c:79:cc:40:66:ef:81:f9:
4f:38:18:53:9e:f3:bf:5d:ab:f9:4a:49:b0:8b:78:c0:b2:d5:
8a:3e:63:60:99:c0:fa:21:6e:20:f8:3f:81:f0:48:ef:57:9f:
57:1d:b3:49:c6:06:52:9f:91:42:54:d1:8e:bd:29:15:5d:0e:
ca:04:c8:72:db:5f:39:d1:74:52:28:df:e5:af:58:ef:f4:ca:
45:59:5a:79:82:91:07:c9:f6:eb:57:f8:52:94:20:3f:ab:f1:
95:df:8a:ba:7c:69:89:8b:cc:61:46:34:ad:e3:cf:2b:ed:fc:
8d:01:b9:9a:07:ab:a3:64:56:97:1e:fa:08:2b:49:85:fc:68:
4a:c4:99:b7:94:52:0b:cc:34:df:7e:62:bb:0b:d8:c7:14:df:
6b:ef:84:c2:29:43:c2:a9:59:0d:a8:15:cc:8c:76:20:91:e5:
b7:83:da:78:69:c3:8f:9a:b2:d2:f5:98:53:54:67:4c:6d:4e:
83:a0:da:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 18:24:54 2024 by rpki-client on console-fra.rpki-client.org