Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/SM9_OLIdB3hJwrBwCMM14Uy6jpA.roa
File: SM9_OLIdB3hJwrBwCMM14Uy6jpA.roa (raw, json)
Hash identifier: 6r0kqaeNonvI4lKRPRG/Fdt0XMWardsBfWcj4iiw6Yg=
Subject key identifier: 48:CF:7F:38:B2:1D:07:78:49:C2:B0:70:08:C3:35:E1:4C:BA:8E:90
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 018B5AD9F7ACC7E796AE65345DAD5D546D38
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/SM9_OLIdB3hJwrBwCMM14Uy6jpA.roa
Signing time: Mon 23 Oct 2023 04:45:16 +0000
ROA not before: Mon 23 Oct 2023 04:45:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.248.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5a:d9:f7:ac:c7:e7:96:ae:65:34:5d:ad:5d:54:6d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Oct 23 04:45:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48cf7f38b21d077849c2b07008c335e14cba8e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f4:d9:21:a8:4a:b8:59:07:6f:40:5a:1b:f1:
f2:47:17:1d:42:0c:39:93:40:ea:58:ed:79:0f:6a:
39:54:39:64:54:42:9d:43:2a:e4:07:d7:af:75:78:
60:08:ce:e0:96:71:f5:27:2d:ca:58:92:af:2c:1b:
b7:d8:7f:02:35:0f:9b:d7:d9:39:33:f6:d7:91:8e:
be:47:99:9d:5b:28:a4:db:74:42:c1:39:aa:cb:f6:
cf:1c:76:a2:02:4d:2f:9f:d6:df:84:ec:7e:80:5b:
3a:83:4d:52:c2:18:2a:ff:58:39:cc:b9:f1:aa:10:
cc:2e:f0:71:16:8d:ed:5b:05:dc:06:a5:1d:5d:40:
2a:f2:23:de:31:fa:01:92:72:00:66:49:7f:dc:28:
22:c6:19:68:74:29:27:0b:6b:e9:66:72:b0:5a:db:
6f:e5:6f:0b:51:dd:9f:2b:e6:4e:04:35:47:16:6b:
1c:6a:15:b8:bd:a4:01:e9:3e:9e:3b:64:d2:61:8c:
25:45:79:41:00:6d:7b:a5:0b:4d:4d:1b:94:f0:26:
92:10:b1:20:1f:d5:41:02:3d:1c:0d:d2:c5:d2:a9:
21:82:da:1d:f9:50:11:c8:87:77:b6:20:a1:b5:33:
7c:05:d2:5e:e7:9d:0f:0d:75:1e:32:74:4a:48:1b:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CF:7F:38:B2:1D:07:78:49:C2:B0:70:08:C3:35:E1:4C:BA:8E:90
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/SM9_OLIdB3hJwrBwCMM14Uy6jpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.51.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:08:ec:ab:e2:8c:d6:93:fe:a4:8b:6a:81:45:57:35:bb:1d:
0a:74:f1:ae:80:ab:5e:4e:ed:57:98:cc:f9:c3:2b:08:03:52:
7f:46:e3:6a:fe:5d:c5:22:0f:6a:79:68:9a:b6:61:2a:27:94:
ab:55:68:38:92:4e:5d:7f:7f:41:e0:cf:30:51:94:53:8e:9f:
72:b8:fa:de:67:c6:d8:e4:db:8c:d3:6d:a4:c2:0b:48:6e:23:
8c:0f:c6:b7:c3:0c:00:f9:62:50:2c:34:4e:a5:76:77:f3:0b:
4e:90:bb:70:d7:16:3e:3d:df:c7:23:33:87:7b:29:44:07:09:
6a:43:f7:cd:ac:9a:26:a0:7c:eb:a7:76:d2:af:7e:ab:af:6f:
c2:56:47:ed:27:d6:94:e9:5b:93:77:aa:44:b4:dc:dc:10:0a:
7a:a5:cc:83:26:53:dd:80:79:2b:1e:3f:12:85:81:a4:8c:a3:
87:12:6f:a7:05:bd:c7:dd:9d:a5:8a:72:bf:0e:b2:fd:7f:fd:
35:33:a7:76:52:1a:ed:48:36:89:86:aa:f3:95:d1:67:8e:a1:
4e:63:b8:31:b1:f2:36:52:a3:db:e1:b7:e8:9b:ad:d4:0b:c9:
52:28:b8:d5:e8:5a:27:42:21:0a:f3:38:cd:e8:95:66:1d:ed:
f0:d1:86:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:14 2024 by rpki-client on console-ams.rpki-client.org