Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/SMqBIgCyQK6DbTKQII-WsHzogpk.roa
File: SMqBIgCyQK6DbTKQII-WsHzogpk.roa (raw, json)
Hash identifier: 4HSDQV26/GYSXkEoQOG0YlkDHfsyZGXnDl+QZS/xsnA=
Subject key identifier: 48:CA:81:22:00:B2:40:AE:83:6D:32:90:20:8F:96:B0:7C:E8:82:99
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F150A6A9062DF02793556A4A66D5C6C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/SMqBIgCyQK6DbTKQII-WsHzogpk.roa
Signing time: Sun 01 Jan 2023 20:45:27 +0000
ROA not before: Sun 01 Jan 2023 20:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201190
IP address blocks: 194.102.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:0a:6a:90:62:df:02:79:35:56:a4:a6:6d:5c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48ca812200b240ae836d3290208f96b07ce88299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b8:0a:99:f7:cc:fd:c1:44:7f:30:b2:61:e9:
75:fd:ae:1c:74:67:46:99:8e:3c:c7:52:6f:f1:b0:
18:38:bd:d4:b6:77:bb:a9:a1:c3:31:34:58:85:61:
ad:a8:09:47:e4:bb:ec:7f:99:ca:73:86:8c:3f:c2:
5f:89:78:f1:95:26:2e:76:b8:4f:a6:37:36:21:87:
c4:fb:75:bf:e5:ad:b2:f5:f4:62:21:48:b2:e3:ab:
43:07:9a:b3:f5:bb:2c:3a:6f:75:e7:c3:b7:31:29:
87:19:65:42:91:6e:74:88:77:cd:7a:8e:0d:d0:4e:
33:42:1a:f8:75:36:8e:3a:62:dc:af:f9:bf:ee:49:
d7:97:d9:00:d7:d5:59:55:88:1c:5f:fb:0e:08:a8:
06:53:67:56:34:71:c1:40:9f:69:41:00:4a:38:1d:
22:57:4c:3a:30:d8:d1:dc:f7:7b:0e:f7:8f:be:b4:
be:f2:3b:fc:96:a8:3c:f3:36:66:d9:67:1b:2a:d7:
eb:80:c7:ed:78:ef:a7:0e:a8:06:0d:c4:d7:c2:12:
01:a0:bf:b9:df:13:b2:94:6e:d9:3d:cc:ec:db:56:
46:2f:d9:8a:18:b3:ac:1e:41:a7:dd:d6:f0:cb:90:
93:20:78:85:ca:5b:9d:ca:5c:dc:e8:cf:ba:f4:2b:
ba:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CA:81:22:00:B2:40:AE:83:6D:32:90:20:8F:96:B0:7C:E8:82:99
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/SMqBIgCyQK6DbTKQII-WsHzogpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.34.0/24
Signature Algorithm: sha256WithRSAEncryption
66:27:44:8b:e9:4d:69:5d:3b:70:f0:5b:51:e5:9d:a3:81:91:
52:42:8a:8b:d6:e9:3e:3e:ce:c4:0a:b9:a2:b9:fe:18:12:7b:
05:12:ff:6d:5d:c6:48:5b:9c:87:45:a5:19:b7:5f:be:be:57:
33:d7:92:4d:0a:8a:9c:80:cf:bf:f3:76:41:57:b6:0a:4c:86:
99:32:92:dc:34:23:bb:6d:d3:cf:7c:b7:e0:c9:8e:93:8b:9e:
f3:0a:33:6b:d1:87:38:a2:4c:36:45:12:a4:12:24:83:c0:2c:
aa:40:5e:87:17:2c:38:71:25:40:02:1f:64:d1:24:78:dd:3f:
6e:fa:8f:66:ce:3c:01:c9:92:74:35:fa:6b:79:49:7a:bf:63:
aa:83:a8:28:b0:6f:8c:7c:79:5f:20:c4:8d:8a:89:34:7d:7d:
40:fa:ec:74:a4:94:3b:34:35:83:41:c2:7d:37:66:a0:06:7f:
b8:2a:18:af:8c:a9:2b:82:05:58:b6:70:39:fb:78:6e:75:36:
17:7f:72:50:75:22:fb:2b:91:04:6b:70:d0:9e:8f:d3:b5:1c:
90:fe:04:e0:20:85:0e:68:82:9a:49:1c:29:f0:1c:b4:bf:8f:
5c:35:0a:04:de:b0:a4:20:4f:af:4f:7c:01:a6:6c:e2:52:83:
9a:50:f6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:06 2024 by rpki-client on console-fra.rpki-client.org