Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/SmOcivNXFML3d3joTG93vtxb8lc.roa
File: SmOcivNXFML3d3joTG93vtxb8lc.roa (raw, json)
Hash identifier: J44KBIoJnr0+qMY1lTRbpGCqY4eHtslkZes2H1aAQaU=
Subject key identifier: 4A:63:9C:8A:F3:57:14:C2:F7:77:78:E8:4C:6F:77:BE:DC:5B:F2:57
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 01856C4A4282F43AC31B98BD0BC84E24623B
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/SmOcivNXFML3d3joTG93vtxb8lc.roa
Signing time: Sun 01 Jan 2023 07:44:44 +0000
ROA not before: Sun 01 Jan 2023 07:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60144
IP address blocks: 185.111.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:42:82:f4:3a:c3:1b:98:bd:0b:c8:4e:24:62:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: Jan 1 07:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a639c8af35714c2f77778e84c6f77bedc5bf257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:5a:38:90:cf:7e:0f:d6:b4:7a:5f:ad:13:
a8:e5:3e:0c:a7:b6:df:03:06:b9:8a:5c:4a:55:50:
c4:de:cc:cf:96:19:ad:8c:4d:41:bc:01:77:78:fe:
ef:80:b5:f9:88:76:eb:a9:46:e9:cf:a6:e1:6c:04:
7b:93:f6:0c:25:85:36:ab:a2:0c:26:8d:ed:e1:b7:
fb:c9:61:2d:07:b3:1d:69:21:89:83:20:12:a5:03:
87:c3:b8:7a:4f:53:0e:27:26:c2:10:be:ca:cd:c6:
9a:f3:06:69:10:69:7a:d1:49:75:11:17:de:72:3a:
ec:ce:71:6b:2f:01:39:a7:e4:fa:3e:d6:05:a1:5b:
62:a6:ba:f3:64:36:61:5c:80:6a:df:6f:bb:9e:ea:
d2:53:b3:13:78:ce:96:02:d8:52:67:64:ff:f3:10:
39:cf:ee:ec:34:f6:53:ab:7b:de:13:80:4d:1e:11:
92:d9:7a:16:92:99:d8:72:0e:bd:72:d9:e7:92:41:
0a:e0:eb:1d:19:36:05:94:49:1a:68:13:d8:a4:68:
23:dc:9a:41:06:8a:f5:d9:06:a9:17:19:17:30:22:
1c:2b:1e:d6:58:08:b4:df:3b:70:14:dd:50:ac:55:
1b:67:87:d9:22:0e:12:35:dc:92:14:0f:8f:f5:7d:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:63:9C:8A:F3:57:14:C2:F7:77:78:E8:4C:6F:77:BE:DC:5B:F2:57
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/SmOcivNXFML3d3joTG93vtxb8lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.235.0/24
Signature Algorithm: sha256WithRSAEncryption
47:9a:21:e0:01:09:33:98:21:e2:1d:b0:3f:e0:f0:3d:2f:2b:
50:91:db:88:6c:5c:ef:74:13:02:df:1f:db:03:47:7d:3c:12:
cb:75:31:82:63:db:5c:75:b4:b8:30:ad:86:cb:c6:14:f4:3d:
f8:d1:20:7d:98:b1:16:ae:7b:7e:13:5e:dd:dd:20:f9:3e:02:
14:b5:e6:e9:98:5e:2d:73:a4:64:ee:a1:1f:51:7a:8a:a4:77:
81:ca:f7:74:9d:f3:53:55:57:82:58:88:07:dd:25:b4:5d:dd:
f4:8d:d2:f6:3c:b9:c9:b8:da:f0:78:6a:d4:c5:2a:19:3a:0a:
dc:1b:2e:85:8b:79:a6:9f:7d:00:97:c7:f2:f3:98:b6:d9:57:
bd:77:2e:d6:ad:c0:88:32:24:e6:e0:cc:f6:bb:1e:da:38:63:
79:47:64:23:9c:b6:b3:28:e5:be:e0:0a:60:5e:1b:e7:f6:26:
05:09:2a:ac:17:dd:73:bd:40:57:9b:55:f5:d1:d9:fd:e6:dc:
6f:7e:f8:7e:14:23:3a:82:fa:47:2c:fe:6e:86:ad:41:fc:76:
c7:6d:97:21:e5:69:f6:89:1c:4c:bd:5d:e1:c2:bf:60:e4:3f:
9c:aa:49:56:ff:69:f4:4d:f4:57:29:48:2d:64:fd:49:ed:42:
cf:69:9c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:05 2024 by rpki-client on console-fra.rpki-client.org