Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SmlfwAIZVWjY2b3FbFedZ6VlnFA.roa
File: SmlfwAIZVWjY2b3FbFedZ6VlnFA.roa (raw, json)
Hash identifier: iTKYmQIVBKDrlLPrA5a/TG2JharxiJDMEq+wvmnrL9Q=
Subject key identifier: 4A:69:5F:C0:02:19:55:68:D8:D9:BD:C5:6C:57:9D:67:A5:65:9C:50
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189CF98B2C34E921B0BA40AD6BEE7A56EFA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SmlfwAIZVWjY2b3FbFedZ6VlnFA.roa
Signing time: Mon 07 Aug 2023 10:43:58 +0000
ROA not before: Mon 07 Aug 2023 10:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 193.124.5.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
194.85.250.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:98:b2:c3:4e:92:1b:0b:a4:0a:d6:be:e7:a5:6e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 7 10:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a695fc002195568d8d9bdc56c579d67a5659c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:06:e9:50:55:9c:0f:df:b2:c1:84:13:b2:
da:0d:54:72:c3:c7:85:4a:d4:b1:41:d3:71:2e:77:
2d:3f:81:68:ad:b4:f2:0f:a2:e0:1d:6d:a7:0d:ca:
3b:f3:54:d5:41:f9:8d:f1:95:55:b6:9b:e3:9d:70:
e8:06:48:a4:99:e0:4b:82:d7:25:a7:25:71:fe:19:
8a:ea:d6:a6:5e:0b:74:e8:6c:83:84:48:a4:fe:09:
46:a2:8e:a1:f3:af:60:e6:48:12:75:06:1e:af:25:
7e:c9:89:79:89:a0:c8:04:38:11:63:9b:1b:76:24:
82:53:eb:32:ac:2d:ea:14:cc:83:3e:d7:35:33:32:
5e:74:46:65:cf:47:60:15:92:15:7c:c0:0b:7d:a5:
a0:9c:c3:ea:ea:a4:b2:e1:69:6c:ae:13:0d:dc:a2:
74:73:e4:38:64:44:b8:9d:84:04:3b:0e:72:93:66:
81:44:59:a5:fd:1e:31:22:b3:b6:12:f6:e8:1e:b5:
52:5c:92:ed:39:4e:7d:a3:ea:4d:c3:88:c3:58:8e:
c9:90:ba:be:16:0d:6e:ad:11:35:6e:06:d7:34:fe:
24:7e:9a:ff:c8:39:3f:03:0c:b8:7d:17:e5:2b:4a:
26:51:75:f3:8c:a2:f3:b7:06:40:d1:df:16:be:f5:
16:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:69:5F:C0:02:19:55:68:D8:D9:BD:C5:6C:57:9D:67:A5:65:9C:50
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SmlfwAIZVWjY2b3FbFedZ6VlnFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.5.0/24
194.85.250.0/24
194.87.52.0/24
195.133.39.0/24
212.192.245.0-212.192.246.255
Signature Algorithm: sha256WithRSAEncryption
2e:44:ba:61:6b:bd:d2:cc:de:ce:55:92:b4:c9:70:fd:71:76:
c4:ed:6c:c9:c3:bc:c6:c2:87:f1:c9:1d:6b:86:c3:a5:d4:9b:
ef:84:af:45:49:04:1f:3e:98:33:bb:53:f5:b5:74:30:60:13:
44:df:9f:3d:28:82:3e:fe:bc:04:d1:a9:4b:b0:69:78:b5:7e:
5a:04:13:27:6a:4b:a6:63:0b:a9:e9:da:54:81:19:fa:40:8d:
5f:a0:9a:29:cb:fe:93:f3:59:1e:45:92:80:16:3a:21:37:58:
9a:c9:d1:7b:84:ad:a8:e9:f8:8f:a9:b6:a0:28:38:21:24:20:
4b:2f:59:1e:38:24:08:3a:88:75:4b:8c:39:9b:8b:3c:55:8f:
18:1a:d6:13:94:43:55:ac:f1:3b:24:53:2e:61:ac:81:be:5e:
8b:3a:3c:9c:76:c6:05:87:f8:17:4b:84:af:48:31:ea:00:22:
ba:b1:92:c0:40:31:c5:75:a1:c0:58:0c:bf:2f:35:cf:10:6e:
05:1f:93:05:8a:0e:1b:2e:78:6a:9a:ba:94:53:52:c3:a5:a7:
b4:ff:62:f7:48:fe:cd:7f:33:33:6b:d1:cb:c9:84:f2:25:9c:
e2:6a:e8:57:4f:a3:37:d8:a2:c0:3e:58:ef:f4:26:af:92:84:
c9:58:41:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 15:38:47 2023 by rpki-client on console-ams.rpki-client.org