Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/smp-A3v34YnC3wvNwsZV6E8IebI.roa
File: smp-A3v34YnC3wvNwsZV6E8IebI.roa (raw, json)
Hash identifier: GuaHETFSFqa5fGRIgUgTlLiwO2Sj98M4W7R4bpIRoOw=
Subject key identifier: B2:6A:7E:03:7B:F7:E1:89:C2:DF:0B:CD:C2:C6:55:E8:4F:08:79:B2
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 01856F42F52C4D56EE28E2A2894CB80362E4
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/smp-A3v34YnC3wvNwsZV6E8IebI.roa
Signing time: Sun 01 Jan 2023 21:35:36 +0000
ROA not before: Sun 01 Jan 2023 21:35:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 194.146.118.0/24 maxlen: 24
194.59.190.0/24 maxlen: 24
193.42.155.0/24 maxlen: 24
62.69.146.0/23 maxlen: 23
194.9.117.0/24 maxlen: 24
2001:7f8:8:10::/64 maxlen: 64
2001:7f8:8:5::/64 maxlen: 64
2001:7f8:8::/64 maxlen: 64
2001:7f8:2c:1000::/64 maxlen: 64
2001:7f8:8:20::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:f5:2c:4d:56:ee:28:e2:a2:89:4c:b8:03:62:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Jan 1 21:35:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b26a7e037bf7e189c2df0bcdc2c655e84f0879b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2a:0b:4d:b1:9b:bf:57:95:3d:61:3c:00:93:
3a:17:14:9c:b2:53:37:af:bd:77:7d:93:e4:6d:99:
3c:11:9e:26:cd:d1:2a:d2:e0:02:21:f4:04:bd:cc:
1f:3f:e5:0d:c0:4a:8d:c0:7c:4c:d9:0c:38:5b:e9:
17:3c:d9:00:bf:b4:e1:ff:f1:3f:b1:72:c2:af:9e:
d6:16:dd:2b:cf:c8:c4:92:de:f2:33:78:7f:0d:c5:
db:06:1d:82:c1:88:6c:fd:4c:c2:cf:e1:6d:be:8e:
77:ab:b8:b7:f2:07:39:87:4b:ff:63:56:cb:b1:23:
21:5f:00:e2:2c:27:48:c4:b5:2f:96:6e:ea:14:1a:
b4:61:5f:ca:9b:67:1a:73:74:b5:ac:63:2c:e9:fd:
53:50:fc:84:05:e8:76:9d:c9:7e:9c:47:5f:7e:5e:
01:6d:2c:00:fa:ae:8b:e8:43:bd:30:18:1a:0c:a2:
bc:86:7e:ff:a8:06:34:4a:42:73:ad:60:5d:26:52:
04:b8:d7:71:a3:db:d8:e2:d4:17:99:28:15:70:f1:
9f:27:20:1f:33:1e:b6:10:d4:82:13:20:ed:01:0a:
de:33:8f:00:6e:d6:5d:96:f7:ad:23:d9:d9:b7:92:
34:9d:b9:c4:07:b1:e2:38:5d:06:44:56:5b:93:c0:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6A:7E:03:7B:F7:E1:89:C2:DF:0B:CD:C2:C6:55:E8:4F:08:79:B2
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/smp-A3v34YnC3wvNwsZV6E8IebI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.146.0/23
193.42.155.0/24
194.9.117.0/24
194.59.190.0/24
194.146.118.0/24
IPv6:
2001:7f8:8::/64
2001:7f8:8:5::/64
2001:7f8:8:10::/64
2001:7f8:8:20::/64
2001:7f8:2c:1000::/64
Signature Algorithm: sha256WithRSAEncryption
29:db:6d:9c:b9:f1:51:5e:f0:f5:26:7f:d3:a5:91:90:50:00:
70:fb:35:36:89:7e:c0:61:78:10:b7:70:b4:35:c6:47:d0:82:
f2:f6:69:ab:c8:c0:56:83:aa:76:c5:5b:90:5b:87:c6:d8:ca:
84:78:23:ac:3e:4d:7c:fb:58:dd:1f:57:b4:55:cd:58:3a:25:
7f:49:fd:79:19:82:c8:d2:d8:c5:ee:d3:7c:d6:2c:f1:e6:a0:
6f:19:44:87:73:2e:82:0c:89:bb:6e:fd:91:e3:c2:63:13:61:
97:b5:94:1e:db:b8:b0:42:15:74:ea:7a:ac:67:09:c0:37:c9:
7a:ed:a7:ab:98:61:33:9f:ab:95:a0:55:92:d1:7c:72:90:8b:
7a:ed:9d:24:0e:24:7d:07:46:d8:bd:99:c7:44:b0:1a:6b:69:
a7:7d:51:89:0b:ad:d0:32:4c:6d:12:54:57:3e:94:a4:ef:4c:
6b:93:2c:d9:a0:23:a4:4b:48:64:06:bc:ca:e3:f9:ea:f1:9d:
74:0a:b5:a2:f7:30:2f:54:91:b5:15:48:50:84:5b:96:17:14:
68:20:8d:61:46:74:a8:c4:7d:67:88:19:f6:43:41:f1:87:82:
31:9d:70:32:c3:0f:3f:f1:1f:58:ef:db:75:79:1e:0b:16:95:
38:f3:33:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:32 2024 by rpki-client on console-ams.rpki-client.org