Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SMiSC13sQn9_pHdgqQ152GzCJKc.roa
File: SMiSC13sQn9_pHdgqQ152GzCJKc.roa (raw, json)
Hash identifier: I3K17FK3wvbS4mcLMQU07RBYFEOktf0QaBTy/bOdIWg=
Subject key identifier: 48:C8:92:0B:5D:EC:42:7F:7F:A4:77:60:A9:0D:79:D8:6C:C2:24:A7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7D21A939B9CCD7CDB0DB380F25454
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SMiSC13sQn9_pHdgqQ152GzCJKc.roa
Signing time: Mon 02 Jan 2023 05:15:18 +0000
ROA not before: Mon 02 Jan 2023 05:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207941
IP address blocks: 2a10:cc44:160::/44 maxlen: 48
2a10:cc40:170::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 10 Jun 2023 22:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:d2:1a:93:9b:9c:cd:7c:db:0d:b3:80:f2:54:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48c8920b5dec427f7fa47760a90d79d86cc224a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:81:93:d9:69:05:9c:f3:a6:22:e4:31:5c:
3c:85:f0:a0:b2:2a:eb:b3:3d:ea:0a:f0:2c:59:f7:
c3:d3:3f:30:7c:35:3d:59:54:1b:10:b2:28:e1:91:
83:24:ea:ca:51:58:78:3a:0f:a0:2e:01:15:28:6f:
02:a7:32:db:f4:41:32:56:98:33:5e:3d:2d:09:b5:
5d:e0:4a:df:98:a9:ad:1c:59:7a:24:3c:59:42:f3:
47:7a:86:57:de:e4:a0:e7:c4:6f:98:84:c9:58:bc:
1b:f3:e3:24:45:ce:19:a4:68:80:58:c9:32:b2:e2:
95:43:06:6e:0f:2d:3e:0c:1a:96:fd:ac:7e:c9:24:
5e:ff:6e:8e:7f:80:3b:ca:3e:49:32:69:a8:09:46:
6c:76:ac:c7:de:db:9d:e8:e9:ec:c1:a7:de:01:0f:
86:53:01:cd:22:62:a2:bc:cb:2b:17:f8:41:5f:0c:
99:f3:db:18:23:21:d7:ef:da:a7:f6:d5:fa:b7:27:
4d:cb:24:3d:03:04:16:ff:72:25:f4:24:59:2c:2f:
75:9c:d4:16:13:e5:d6:b4:38:c9:9f:e9:74:c0:6e:
c7:c0:c6:57:c8:34:c2:bf:1d:9b:d7:c1:02:a8:41:
43:83:05:60:78:f1:d6:4c:a9:b2:96:6a:c1:f5:c1:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C8:92:0B:5D:EC:42:7F:7F:A4:77:60:A9:0D:79:D8:6C:C2:24:A7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SMiSC13sQn9_pHdgqQ152GzCJKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:170::/44
2a10:cc44:160::/44
Signature Algorithm: sha256WithRSAEncryption
a0:ea:76:cb:62:49:ac:86:75:2e:10:06:40:9d:d4:f8:bc:3d:
bc:1b:fe:f9:78:3d:e4:2a:79:f1:07:15:98:89:b5:75:41:e1:
4e:19:43:a9:43:13:07:ec:8b:18:18:49:2b:6f:a6:db:a5:57:
1d:44:29:8d:72:49:8c:46:9c:e4:f8:28:dd:f0:7b:9e:ab:d1:
95:5d:53:44:8f:4a:fd:85:f3:13:e8:03:ad:4b:90:e5:b9:ae:
5f:78:07:1b:7d:32:5d:1a:1a:51:29:02:16:1e:c3:8b:0f:83:
ea:85:d0:a6:af:2a:2a:0e:28:17:e8:b7:7d:73:4f:4a:11:e6:
a8:65:82:f8:cc:23:0d:6d:18:5a:06:2d:b5:93:27:20:42:d2:
88:22:cd:e2:4e:62:c2:bf:da:d5:49:d4:bf:13:d7:14:51:96:
1a:35:7a:8c:13:c1:38:4c:16:c4:61:74:16:8e:5d:49:9a:e4:
7d:7d:0c:eb:76:c5:af:12:ed:d5:24:6e:bc:14:4f:c8:11:95:
45:1f:eb:9c:8d:d4:b7:33:97:70:d4:81:b3:79:b0:91:1f:eb:
c8:0b:4b:58:47:ef:22:86:da:20:65:e2:94:20:f9:34:4f:8b:
18:df:93:f1:eb:75:01:65:6d:0f:78:80:02:bd:9b:4c:05:d5:
88:4b:8e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:31 2024 by rpki-client on console-fra.rpki-client.org