Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/SmslVSzp8x71KlYPRolQ5HTfuVI.roa
File: SmslVSzp8x71KlYPRolQ5HTfuVI.roa (raw, json)
Hash identifier: P/3CAXFGfVXHVsf6yVovAGrRm9fMqhULYjXF42egZcM=
Subject key identifier: 4A:6B:25:55:2C:E9:F3:1E:F5:2A:56:0F:46:89:50:E4:74:DF:B9:52
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 018571833AA3501C97E480F72D5EF31D40AC
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/SmslVSzp8x71KlYPRolQ5HTfuVI.roa
Signing time: Mon 02 Jan 2023 08:05:03 +0000
ROA not before: Mon 02 Jan 2023 08:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 193.193.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:3a:a3:50:1c:97:e4:80:f7:2d:5e:f3:1d:40:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Jan 2 08:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a6b25552ce9f31ef52a560f468950e474dfb952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:d3:1d:a8:97:69:e6:fa:fe:48:8c:e2:f0:
98:d8:33:4a:3b:b8:d4:83:5a:47:4b:32:a3:d0:ca:
3b:c1:d9:1b:e1:b8:00:ff:55:5b:ad:78:ea:64:ba:
43:d8:7f:71:42:06:bb:6d:0c:c6:f0:e5:10:0a:be:
56:51:18:a5:1f:25:40:25:1f:b7:0c:88:83:07:7c:
c3:f9:ee:f1:e5:3b:ca:7a:52:8c:aa:56:5e:e6:cc:
f9:39:50:83:57:d8:cd:43:c1:71:e3:a0:42:a4:18:
04:cc:c0:b0:e2:4b:11:66:75:49:8b:14:38:cf:d6:
8c:87:a4:51:fd:17:cd:ec:3b:35:5e:d5:19:bb:03:
88:67:95:99:34:1b:ea:be:13:61:46:f3:f4:91:18:
c9:1f:eb:d7:fb:0b:db:6f:03:d7:cd:27:c8:13:51:
84:eb:e4:1b:31:6d:ff:31:5d:4a:31:9d:2d:77:0b:
e0:0b:97:3f:d9:05:1f:88:41:09:ca:41:cf:75:a8:
af:d2:e8:db:4b:49:f9:9c:da:c5:87:1a:90:19:c3:
38:47:d7:08:73:4a:28:89:b4:49:4c:7f:d9:7e:3b:
49:75:75:c4:96:d8:f3:a2:b9:38:4d:d9:65:59:44:
97:83:e1:83:16:37:3d:be:b2:8e:d2:d7:d7:81:70:
71:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6B:25:55:2C:E9:F3:1E:F5:2A:56:0F:46:89:50:E4:74:DF:B9:52
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/SmslVSzp8x71KlYPRolQ5HTfuVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b7:25:21:25:dc:f0:31:52:ec:5a:42:66:b7:c1:4b:3e:4b:
3c:16:74:ae:55:4a:50:7d:0c:00:24:76:94:f3:b4:12:6f:c0:
90:69:a0:c6:20:05:99:88:c6:6c:a6:cd:bf:27:61:aa:8e:92:
8d:1f:88:cc:b1:e1:5d:3f:61:ff:47:9a:f3:f7:60:8b:9f:f6:
37:06:dd:34:e2:9b:6c:e4:7e:62:ab:0c:fd:f3:5b:5a:fc:ec:
45:6c:f0:d1:34:f7:90:cb:9f:3d:30:95:38:ed:d8:87:25:24:
60:cd:a5:64:84:79:72:a6:0d:9f:4a:fc:9c:57:b0:2f:d0:83:
ed:76:b3:97:28:d9:9f:0f:68:ad:74:c3:11:1e:28:68:c0:3a:
5c:3e:9c:39:fd:7a:b4:bd:4b:8a:e1:ea:39:3d:a0:eb:9b:9a:
fe:e2:c2:f2:3e:5e:17:eb:f3:87:6f:c5:e9:0d:90:7a:cd:d7:
b8:69:81:a0:8c:63:87:f4:5e:2e:45:a2:58:7a:c6:fe:22:78:
b6:6e:02:a2:5e:b2:5c:30:c9:38:e7:4e:4f:66:e3:20:b0:b8:
4d:9d:30:92:4d:71:71:16:82:26:d6:d3:a5:f5:b9:0d:57:8d:
c0:6d:de:cd:06:db:bc:b7:03:23:e1:0e:02:59:2b:a4:cc:ea:
77:db:a9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:55 2024 by rpki-client on console-fra.rpki-client.org