Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/SmMdygSxOUJ5sXplpGCYLiKOu4g.roa
File: SmMdygSxOUJ5sXplpGCYLiKOu4g.roa (raw, json)
Hash identifier: YUF5uy3VQ4O1hDyl7HJUyr5Db/xv+5CftKdtUEvnOd0=
Subject key identifier: 4A:63:1D:CA:04:B1:39:42:79:B1:7A:65:A4:60:98:2E:22:8E:BB:88
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 0190FF787CBFC11CE483578F6C40E14825EB
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/SmMdygSxOUJ5sXplpGCYLiKOu4g.roa
Signing time: Mon 29 Jul 2024 17:10:04 +0000
ROA not before: Mon 29 Jul 2024 17:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53856
IP address blocks: 46.173.64.0/22 maxlen: 22
46.173.68.0/22 maxlen: 22
46.173.72.0/22 maxlen: 22
46.173.76.0/22 maxlen: 22
46.173.84.0/22 maxlen: 22
46.173.88.0/22 maxlen: 22
46.173.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 02 Aug 2024 22:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ff:78:7c:bf:c1:1c:e4:83:57:8f:6c:40:e1:48:25:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Jul 29 17:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a631dca04b1394279b17a65a460982e228ebb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:17:78:0c:ce:3e:3f:51:f9:ba:c2:e5:0d:d3:
ab:5e:97:3c:0f:f9:40:5c:18:0e:e3:7f:30:4d:ab:
1f:f8:3f:77:ef:de:2f:7d:1f:ea:14:8a:fd:a0:c7:
31:11:cf:c4:53:1d:f3:4c:fc:b7:43:42:32:47:d8:
10:df:c6:d7:73:48:53:45:a0:6b:48:5c:93:22:0a:
17:7d:2f:5f:12:0e:40:04:04:f7:8e:4d:8f:0d:e8:
50:e8:9c:c7:6b:1e:d7:df:c2:2d:5e:d9:33:bd:93:
50:14:77:0d:e1:58:6e:94:9f:4e:ca:ca:f2:ec:be:
15:3f:f1:4c:56:4c:cd:e0:94:7b:a8:cf:fa:a6:4a:
36:dc:eb:45:43:fa:b0:14:8a:e9:44:e4:c1:b7:c3:
df:21:7c:07:56:24:9a:2a:dc:9b:75:d1:65:d1:41:
d0:40:f0:1a:d4:1a:27:1d:e2:f3:79:cf:69:41:02:
87:db:ca:2e:62:fa:67:cb:43:aa:6f:d8:cf:63:ab:
a1:42:81:fa:42:f8:9e:93:ba:e5:06:df:ac:03:fb:
00:17:44:51:63:45:e1:de:7b:40:c7:d1:c1:87:51:
e5:fa:9d:fb:b1:d8:d7:15:4c:8e:3f:80:55:ea:27:
c4:3f:a4:fa:20:c1:3b:5c:e2:96:de:49:53:5f:59:
4c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:63:1D:CA:04:B1:39:42:79:B1:7A:65:A4:60:98:2E:22:8E:BB:88
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/SmMdygSxOUJ5sXplpGCYLiKOu4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.64.0/20
46.173.84.0-46.173.95.255
Signature Algorithm: sha256WithRSAEncryption
8c:08:43:c9:d6:6e:51:d8:1b:0d:62:9b:d4:16:d5:67:6d:e6:
2f:bc:3d:be:4f:e0:cc:4d:21:dc:82:96:ab:3a:90:2f:0d:bb:
fc:dd:54:e6:af:ef:36:07:c3:5c:b3:4a:19:11:19:99:cb:aa:
d2:e8:14:e6:72:f2:e5:3a:b9:9c:ce:72:41:11:27:18:11:a0:
d4:5e:51:f8:ba:57:3d:85:18:bd:16:39:10:15:6f:0c:00:ad:
cf:df:f1:1f:86:9e:16:eb:d7:e5:f9:bd:f5:a7:e1:cb:5e:b2:
6d:33:ed:25:77:7a:03:15:a5:f8:b6:7e:a8:a9:3c:2b:3e:7a:
df:b3:e8:7e:63:1c:69:4e:e1:c0:e0:54:51:54:51:f8:cb:1a:
d0:9c:de:94:75:b9:33:00:54:25:7f:a3:28:c7:95:c8:18:d8:
1e:d8:47:18:99:f0:ad:93:9f:ea:91:1d:0f:01:d3:34:e6:88:
dd:ce:2c:25:31:de:51:f8:1a:b2:27:2a:c5:73:6e:16:e5:ae:
3f:40:c8:8f:b1:f6:26:bb:a4:d2:a1:56:67:37:b5:85:05:01:
46:97:95:fd:a5:06:94:07:11:30:15:d3:94:9a:64:9e:f8:9a:
74:3f:60:f1:cd:dc:d0:d7:1f:16:2a:f1:43:02:14:48:4b:86:
b1:db:41:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 3 00:36:06 2024 by rpki-client on console-ams.rpki-client.org