Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/SMEC8mgJ2Y7Vfo2dVfDaLbB57kg.roa
File: SMEC8mgJ2Y7Vfo2dVfDaLbB57kg.roa (raw, json)
Hash identifier: 4PX/bh9pR4U8mRZDXlRjzon/NKjv0JGFCX0/FhPvYiw=
Subject key identifier: 48:C1:02:F2:68:09:D9:8E:D5:7E:8D:9D:55:F0:DA:2D:B0:79:EE:48
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0193252F3242BF0B03E7F8B0D355B9186E49
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/SMEC8mgJ2Y7Vfo2dVfDaLbB57kg.roa
Signing time: Wed 13 Nov 2024 11:01:10 +0000
ROA not before: Wed 13 Nov 2024 11:01:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214526
IP address blocks: 109.122.240.0/20 maxlen: 24
109.122.249.0/24 maxlen: 24
109.122.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Nov 2024 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:2f:32:42:bf:0b:03:e7:f8:b0:d3:55:b9:18:6e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Nov 13 11:01:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48c102f26809d98ed57e8d9d55f0da2db079ee48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:37:3e:e2:1d:f2:5f:f9:8d:a1:62:82:7f:a5:
b9:6e:63:c6:4c:ef:7f:df:29:47:a0:31:96:84:9a:
d8:53:2e:5f:88:d7:a3:07:81:ca:46:ee:08:61:1c:
28:3b:bb:49:5a:3f:7d:e8:14:47:ea:d3:6d:84:f4:
bf:f3:e9:09:82:cd:e0:3e:da:36:6c:05:ba:a7:5b:
4c:c6:36:9e:40:9b:a2:c6:4e:f5:6e:db:9a:62:1f:
8b:dc:e1:bb:2a:15:86:38:33:e5:96:00:f7:4b:4e:
44:05:e8:9f:35:c6:df:68:35:9b:4c:f5:d0:01:cb:
d9:22:13:bc:4c:7a:9d:4a:d5:b0:e8:fe:97:c6:53:
6b:1a:86:ed:fe:93:7f:22:0b:2c:74:c2:54:b7:33:
92:90:dd:f9:a7:53:92:ac:0f:e0:cf:80:3c:75:0e:
24:03:5e:6b:9c:4a:6c:fb:a6:89:d4:27:62:2e:f8:
90:fe:f6:8f:56:a7:b6:ac:ad:d1:8d:50:e0:dc:fa:
a4:0d:46:d8:0d:25:c9:ef:ad:61:28:73:d9:ba:04:
64:85:63:25:2b:8a:35:9d:19:fd:05:e2:55:84:43:
c2:64:0a:b0:f7:df:5e:48:6a:1a:ef:85:7b:1c:77:
b7:0b:2b:8c:e7:06:e4:5a:e8:7f:b6:e4:4c:42:13:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C1:02:F2:68:09:D9:8E:D5:7E:8D:9D:55:F0:DA:2D:B0:79:EE:48
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/SMEC8mgJ2Y7Vfo2dVfDaLbB57kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.240.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:29:cc:77:61:e3:96:cd:d5:15:ec:17:93:6e:38:1b:fd:d2:
62:cb:02:0d:0e:6a:22:64:fd:ab:92:46:6d:5d:9b:0a:fd:b3:
75:8b:4f:db:85:16:e0:b6:b2:5c:55:99:96:c2:fe:90:f8:c4:
71:73:c8:1b:10:97:e6:10:94:0c:1d:91:b3:99:fc:02:60:ef:
df:80:10:ea:33:af:78:e4:15:ad:d3:50:0c:cb:11:26:95:8f:
a5:e4:02:e8:bc:de:e6:f5:f0:62:23:0c:56:0d:b6:e8:48:10:
a3:75:e8:d0:cc:4b:f7:a6:33:e9:57:ae:69:fe:ca:37:ab:c1:
40:0a:87:72:49:c1:c5:d8:05:d4:5a:ae:15:57:13:c9:2c:7f:
06:f9:30:9b:29:76:6a:ea:5a:10:91:e1:95:97:c1:db:b8:f3:
13:45:e0:f7:3d:ce:3b:fb:fd:ba:b2:a0:9a:cb:b4:0f:1f:29:
bd:44:ac:73:2e:73:37:d7:7a:89:72:35:4c:47:0c:45:96:02:
e9:c5:7c:1d:55:c1:9c:2e:32:75:1d:ec:1d:ba:58:43:72:79:
4c:1d:65:c6:2a:49:59:ea:41:1e:64:bf:69:82:6e:37:7d:2b:
74:50:99:2d:b1:50:b6:7a:46:30:0a:8b:94:df:b2:89:7d:2a:
93:6b:dc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 16:48:10 2024 by rpki-client on console-ams.rpki-client.org