Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/SMXDWZ7Lvq51ZMQO7zwMlWKoqBI.roa
File: SMXDWZ7Lvq51ZMQO7zwMlWKoqBI.roa (raw, json)
Hash identifier: lQtcpfVkwkETCYyI5SJwILK9hlu84ezwVH7hWvuyuTw=
Subject key identifier: 48:C5:C3:59:9E:CB:BE:AE:75:64:C4:0E:EF:3C:0C:95:62:A8:A8:12
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01926A5D8CD4C33F8277B9822B1470D69A4A
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/SMXDWZ7Lvq51ZMQO7zwMlWKoqBI.roa
Signing time: Tue 08 Oct 2024 04:22:48 +0000
ROA not before: Tue 08 Oct 2024 04:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.10.120.0/23 maxlen: 23
185.10.122.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 10 Oct 2024 06:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6a:5d:8c:d4:c3:3f:82:77:b9:82:2b:14:70:d6:9a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Oct 8 04:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48c5c3599ecbbeae7564c40eef3c0c9562a8a812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:e9:9e:18:28:99:b9:e2:2b:43:a8:0c:10:
41:ec:67:dc:4b:5a:09:ca:83:4d:cf:b9:64:fa:52:
dd:a2:08:5e:34:37:99:cc:5e:c5:e3:5e:fd:bf:1f:
b3:d5:88:a5:d5:08:0b:f5:5f:a9:e9:8a:26:25:57:
3a:99:71:46:f6:d8:16:ec:1b:f2:9a:d6:6c:70:b6:
a0:0d:18:d8:31:d0:69:52:3d:bf:5f:86:3f:58:4a:
2a:1b:c9:4d:ef:02:bc:8f:a3:2f:2b:c0:e9:c0:97:
e9:b9:53:44:b0:cb:fe:90:8f:70:dd:25:12:01:b5:
ad:ee:29:b0:e3:3f:86:84:98:16:10:06:bd:00:d1:
33:ac:c3:22:09:fa:ee:7b:2e:10:db:60:1f:82:3b:
09:b1:55:85:a6:be:43:12:b5:04:85:81:41:fa:db:
67:56:5a:7f:30:75:f8:d6:f4:4e:3e:9c:8c:a7:cd:
00:de:6c:bc:97:65:6a:58:83:1a:e4:7f:e2:f0:4a:
29:e4:b8:3b:db:7c:7c:27:62:9e:c7:3d:10:8e:3f:
cd:de:b9:ac:53:9d:d7:df:5d:66:3c:a5:c7:b0:aa:
16:fc:1c:1a:18:4d:27:f2:e5:f0:5b:9a:55:15:69:
6b:64:e1:13:da:f7:1d:e1:b9:f0:02:31:ca:13:65:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C5:C3:59:9E:CB:BE:AE:75:64:C4:0E:EF:3C:0C:95:62:A8:A8:12
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/SMXDWZ7Lvq51ZMQO7zwMlWKoqBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.120.0/22
Signature Algorithm: sha256WithRSAEncryption
40:cc:a5:4c:74:e2:5c:65:00:58:3d:51:9f:1a:48:60:8b:6b:
77:3e:3f:c7:41:f5:a8:47:3d:cd:0e:cc:5f:4b:e9:bf:23:9c:
28:22:5e:eb:f6:5f:c3:42:1e:de:15:87:35:ce:e9:dd:8c:32:
06:1c:bf:67:f3:a7:9f:85:20:7a:20:b5:81:7e:db:9f:a4:f2:
e3:e1:5d:79:4e:c6:de:43:a7:88:74:87:f9:cc:a0:88:5c:91:
30:5f:ec:17:ae:0a:df:a6:a3:cd:4d:a7:d6:04:06:2a:90:76:
15:93:5e:45:d7:f7:c3:b5:13:34:cb:e1:da:8d:6c:6c:da:ae:
91:44:de:3c:b9:52:a0:2b:54:41:db:5c:bf:ed:47:81:ff:07:
7f:35:c4:6c:5b:b7:41:9e:56:75:d7:62:e9:41:0f:6f:d1:08:
cc:95:1d:ce:23:5b:f3:76:2f:ee:c3:2c:29:c6:ee:74:14:55:
61:6b:60:39:eb:27:7b:92:2e:18:6c:a8:54:13:5b:c5:94:72:
96:c5:23:fc:cd:42:48:c8:18:45:5f:ed:e8:57:4b:26:2d:d0:
54:20:d0:f5:93:4c:35:40:ad:29:d3:8c:1f:56:20:dc:8b:3f:
27:6e:84:e1:24:8b:71:b9:f7:30:08:1a:95:2c:32:6b:fc:a1:
cf:80:2f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 07:48:30 2024 by rpki-client on console-fra.rpki-client.org