Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/SMBCIOSp3uH1GfYr8vCFcNBjDUE.roa
File: SMBCIOSp3uH1GfYr8vCFcNBjDUE.roa (raw, json)
Hash identifier: 4RE0XOjvKnb/mq5NvqmYhpzoG45tzJEzvcTI0rf06Oo=
Subject key identifier: 48:C0:42:20:E4:A9:DE:E1:F5:19:F6:2B:F2:F0:85:70:D0:63:0D:41
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 0185708C9C75E2BB13E9EEF08FADB019A9E7
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/SMBCIOSp3uH1GfYr8vCFcNBjDUE.roa
Signing time: Mon 02 Jan 2023 03:35:41 +0000
ROA not before: Mon 02 Jan 2023 03:35:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62275
IP address blocks: 185.221.72.0/22 maxlen: 24
5.62.72.0/21 maxlen: 24
185.40.212.0/22 maxlen: 24
193.254.12.0/22 maxlen: 24
2a0c:e2c0::/29 maxlen: 29
2a0c:8000::/29 maxlen: 29
2a04:8640::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:9c:75:e2:bb:13:e9:ee:f0:8f:ad:b0:19:a9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Jan 2 03:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48c04220e4a9dee1f519f62bf2f08570d0630d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:92:4f:d0:a4:0f:7e:a4:66:1a:9f:e8:7e:b2:
2a:fc:4b:d2:d1:0f:e5:2d:ed:60:5a:e2:91:44:78:
55:b3:7f:63:b5:b9:32:bb:ac:e3:84:dc:27:0e:c9:
15:05:2f:1b:46:76:95:94:94:6f:3a:2c:dc:73:93:
45:e9:f0:23:f8:49:dc:a4:86:ea:3b:af:dc:87:76:
9a:d3:3b:cb:81:a4:c6:b8:2b:8c:2b:3e:0f:a8:b1:
12:3c:0a:a7:b5:51:f6:bf:26:29:d7:81:18:c7:a4:
b1:40:41:0e:d5:40:34:ed:24:3e:bd:38:f0:0b:fc:
fc:e7:63:d1:f2:b1:60:7a:16:fd:52:df:60:fe:26:
2e:5a:b8:57:1a:fb:d4:00:8d:e0:4a:a6:46:8b:36:
81:a0:86:83:44:b1:f4:7e:63:78:77:2e:2a:a1:d1:
c3:7b:99:e3:14:fd:0f:46:dd:d4:8a:9c:24:c0:07:
07:de:11:7c:f2:75:4c:b0:df:7d:aa:6c:9c:a1:00:
6f:8f:b1:45:f5:bc:94:5f:cd:be:bb:bc:0d:81:47:
8b:57:95:9f:45:e2:65:12:a1:58:74:ab:d3:eb:d3:
82:37:03:dd:69:27:20:76:60:f3:6b:7f:de:b7:e8:
9e:53:be:f6:bc:96:86:50:99:35:9e:11:6e:3a:20:
4c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C0:42:20:E4:A9:DE:E1:F5:19:F6:2B:F2:F0:85:70:D0:63:0D:41
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/SMBCIOSp3uH1GfYr8vCFcNBjDUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.72.0/21
185.40.212.0/22
185.221.72.0/22
193.254.12.0/22
IPv6:
2a04:8640::/29
2a0c:8000::/29
2a0c:e2c0::/29
Signature Algorithm: sha256WithRSAEncryption
91:36:aa:da:34:3a:3f:c7:6f:50:08:aa:ae:19:f8:34:ab:42:
e9:4f:a6:df:b1:5f:70:81:22:2c:67:55:09:de:20:60:03:9c:
5b:ca:23:5a:ad:d3:06:d7:1f:03:45:6e:08:a5:26:c5:81:ad:
30:45:47:fd:81:a5:90:7c:ef:c8:8c:71:06:87:d2:08:c3:03:
b0:44:c9:eb:fa:77:b1:6d:c8:04:b6:7b:35:f5:ef:3f:9e:7c:
42:1c:77:be:dc:f5:fd:e6:f2:b0:32:15:f2:42:23:1d:d1:19:
de:49:7f:62:c9:0e:8b:de:09:2f:8e:d4:de:cf:63:b5:79:07:
2f:f0:99:ea:d4:5c:a2:a4:21:86:e6:cd:e7:75:e4:3b:66:cd:
64:98:a3:52:64:58:58:86:aa:88:c4:1c:6e:20:9f:e4:c9:c6:
43:d3:72:5f:d1:9a:75:13:3c:f5:32:ec:35:49:7d:09:cb:26:
f3:ba:cb:97:6c:a6:af:d4:0e:49:ae:1f:ea:30:18:a5:cf:ab:
7c:d5:aa:03:77:bb:8b:05:9d:c4:ce:57:b5:8b:fa:a4:f2:7b:
30:f3:52:8b:f2:bf:86:b6:de:bf:74:bc:5d:f8:14:9d:c9:f6:
e2:a7:a9:b9:4d:1d:10:37:dc:f5:bf:fd:70:92:cd:33:7f:0d:
18:d2:90:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:39 2023 by rpki-client on console-ams.rpki-client.org