Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/smc5ACJNuf6SH2uvDJhyWd_HP3Q.roa
File: smc5ACJNuf6SH2uvDJhyWd_HP3Q.roa (raw, json)
Hash identifier: 31QMfW63cD0lUnGQBAJ0PwurlQcOzndHSoLa5TwKbWc=
Subject key identifier: B2:67:39:00:22:4D:B9:FE:92:1F:6B:AF:0C:98:72:59:DF:C7:3F:74
Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial: 018CC94CB18040C13EDDBB22A47448E04EF3
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/smc5ACJNuf6SH2uvDJhyWd_HP3Q.roa
Signing time: Tue 02 Jan 2024 08:31:35 +0000
ROA not before: Tue 02 Jan 2024 08:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209462
IP address blocks: 185.196.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:b1:80:40:c1:3e:dd:bb:22:a4:74:48:e0:4e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
Validity
Not Before: Jan 2 08:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2673900224db9fe921f6baf0c987259dfc73f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:5f:2a:5d:93:aa:f8:96:48:d7:3c:58:97:
d6:00:54:d1:ab:27:23:29:e5:77:50:12:91:eb:f3:
c6:08:ad:d5:a3:63:45:5c:17:8f:83:c0:3b:5e:7d:
b4:0b:a9:e5:94:45:37:26:ab:86:78:e5:f8:4a:2b:
d2:a5:21:37:63:87:56:0f:64:c5:8e:ae:c3:cf:25:
97:c0:c6:43:98:04:27:3f:80:bd:42:be:6d:3a:f7:
5c:c2:8d:58:d7:80:a5:f2:24:0b:e6:7c:14:40:50:
a8:39:3e:d2:26:76:f1:75:fe:be:54:13:3b:73:07:
4a:22:af:bd:a4:be:18:e6:c6:8d:66:4f:ab:b8:e0:
a5:7c:51:da:ee:dd:50:ce:7d:5f:08:07:0f:ce:9c:
62:2b:c2:39:fb:7d:c3:0c:ab:55:92:36:d4:0e:7d:
7b:5a:cd:f1:67:26:d1:89:81:61:4d:4d:9b:25:be:
e7:fa:a9:5c:40:1f:95:87:4b:f1:5c:5a:b2:fa:7b:
7c:0c:49:4b:d8:6b:16:6b:5f:82:98:70:63:d2:d2:
bb:c3:4f:73:d4:ed:26:db:d1:39:5a:8a:4d:a5:ca:
12:62:d1:0d:b0:cb:80:f5:59:1a:89:ed:00:9a:43:
36:8e:c2:e6:0f:84:95:62:84:96:77:a0:9b:19:52:
f1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:67:39:00:22:4D:B9:FE:92:1F:6B:AF:0C:98:72:59:DF:C7:3F:74
X509v3 Authority Key Identifier:
keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/smc5ACJNuf6SH2uvDJhyWd_HP3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.151.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f2:68:c5:af:98:58:ef:c3:fa:66:61:60:df:55:da:6d:ad:
0f:78:f8:fb:bc:a7:ad:1a:e6:df:b2:fd:52:ed:4c:c4:4c:07:
e4:fe:37:81:8c:01:16:ba:86:a5:b9:fd:de:4a:f7:1c:f7:b1:
12:6f:85:e5:ec:71:16:df:7c:0f:a4:cd:bc:35:7b:96:99:48:
17:e4:67:c5:d7:7b:96:1d:29:57:9a:ba:d6:fa:22:57:ce:b6:
46:23:3a:66:44:df:8e:05:5e:bc:0a:f4:6b:ef:e6:c0:df:4b:
a0:36:7c:50:b5:d8:17:83:0d:ba:33:6a:ae:ee:dd:62:a3:3e:
18:da:08:d4:c4:cf:22:27:3a:e8:77:3c:c4:80:35:59:ae:bc:
4b:dc:30:22:74:21:3d:d2:27:fc:36:ae:5a:ca:e0:3d:91:23:
c0:c0:6d:82:5e:7c:0a:65:8e:2e:d8:de:de:90:89:61:25:87:
6d:8a:39:1e:a0:d3:54:71:0e:4b:90:da:2a:42:00:f5:09:5a:
c0:d7:50:d4:b4:a8:ab:0a:c0:ba:ed:cf:d1:0d:87:5c:b7:73:
91:f4:18:db:8a:6e:80:8c:4e:2b:87:62:cf:c0:d8:a2:1a:79:
d0:0f:0b:8c:d4:52:c5:b3:92:f9:a9:1f:eb:2c:34:e5:09:c8:
a0:7b:52:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:27 2025 by rpki-client