Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/smDI8SQ6OxEU5a-ryTaFQ75cmhQ.roa
File: smDI8SQ6OxEU5a-ryTaFQ75cmhQ.roa (raw, json)
Hash identifier: DWjvt6Gia4Zw4SEcvR7s7x3EoToqSUo1PAXaveWPkxc=
Subject key identifier: B2:60:C8:F1:24:3A:3B:11:14:E5:AF:AB:C9:36:85:43:BE:5C:9A:14
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01856F94B334ECBF8B41ABEC96AFCF6815E0
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/smDI8SQ6OxEU5a-ryTaFQ75cmhQ.roa
Signing time: Sun 01 Jan 2023 23:04:54 +0000
ROA not before: Sun 01 Jan 2023 23:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400509
IP address blocks: 46.8.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:b3:34:ec:bf:8b:41:ab:ec:96:af:cf:68:15:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 23:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b260c8f1243a3b1114e5afabc9368543be5c9a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:ba:7b:d5:de:72:a3:c3:f3:51:b4:7f:bd:
49:69:cf:25:58:f7:b8:7d:6b:29:3c:36:b2:56:3a:
a1:d0:4c:1f:81:6f:7f:28:83:72:1f:96:42:6a:f1:
ba:67:7a:de:36:01:ec:c5:4e:01:6f:8b:09:23:58:
b1:57:d1:1d:80:8b:ff:69:b9:16:44:87:6f:eb:f9:
71:ff:9e:70:b5:1e:82:51:24:59:93:9e:6b:9d:ab:
89:31:69:dd:4f:b0:bc:cf:36:98:86:95:80:0e:ec:
da:01:90:e5:0b:dd:a8:93:75:93:6c:8f:97:4f:39:
3d:73:16:b2:dd:83:5f:31:63:23:8e:6e:79:81:bf:
67:13:97:ad:cd:a5:be:9d:ef:3a:3b:67:b7:b5:8c:
91:cf:9c:fa:ce:c6:2c:e1:b7:19:0b:10:17:b5:95:
a6:67:0c:85:26:86:2b:d5:4e:a0:c8:06:67:a9:ae:
44:6b:06:de:a3:0b:ce:e2:d7:06:28:44:b5:f0:7a:
1c:5e:04:73:49:19:8a:82:93:49:c8:d2:50:cc:cc:
b8:4e:a5:6c:2a:b2:56:00:e3:fe:6a:98:9a:7c:1b:
70:6a:37:33:7b:3d:01:13:ac:90:66:87:04:6d:b3:
78:5d:cc:f0:55:17:5d:c2:de:39:5b:7e:58:61:6b:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:60:C8:F1:24:3A:3B:11:14:E5:AF:AB:C9:36:85:43:BE:5C:9A:14
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/smDI8SQ6OxEU5a-ryTaFQ75cmhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.195.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1c:95:d5:cd:49:2a:66:fa:08:51:ae:93:d9:2f:bd:3b:cc:
58:60:38:a1:f3:38:45:ca:c2:2c:f3:aa:e2:39:77:e8:1f:16:
c2:a9:46:b0:de:02:8a:93:a1:1c:5c:db:8b:cb:cd:b4:1f:80:
48:18:48:ef:d9:70:8d:1e:c6:18:92:46:b5:d2:ef:6b:1d:e3:
7c:b0:fa:39:2a:4f:77:d5:7b:fb:ea:30:fb:47:9b:b5:23:d5:
be:e0:e0:47:28:89:8e:c2:e6:a8:b4:f4:14:e1:04:23:38:d2:
85:48:17:fb:d2:73:75:26:a1:72:83:8a:c1:f8:6f:03:a4:25:
3e:7d:81:3c:00:b7:d6:2b:1b:e5:db:9b:e9:99:e5:90:50:fc:
51:54:bf:d9:d2:ff:55:05:fa:19:86:7f:02:9d:23:9f:bb:94:
7d:03:e0:07:7e:69:83:0b:72:1c:16:63:69:6f:5f:c8:72:51:
78:ff:99:9f:08:c8:00:e2:af:d0:e6:f7:68:e2:6e:46:df:75:
95:40:08:1c:2b:28:ee:36:a2:c0:49:20:6a:d8:3c:08:af:90:
e6:90:5b:2b:36:39:ca:6d:46:41:b1:f5:40:fb:44:11:cd:d9:
55:49:c3:09:9c:46:a5:33:a3:85:49:55:32:bb:d6:b0:c3:ac:
77:5b:62:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:38 2023 by rpki-client on console-fra.rpki-client.org