Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/SM2v1SE7R8e-Vlw3UP6Cv27t7Xw.roa
File: SM2v1SE7R8e-Vlw3UP6Cv27t7Xw.roa (raw, json)
Hash identifier: DRcvlklFhmjXCviwsP3GnPAQuhskN5pxlrDyb5z3whI=
Subject key identifier: 48:CD:AF:D5:21:3B:47:C7:BE:56:5C:37:50:FE:82:BF:6E:ED:ED:7C
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01888AAAD698FAD29737999584FDAF2F7D74
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/SM2v1SE7R8e-Vlw3UP6Cv27t7Xw.roa
Signing time: Mon 05 Jun 2023 08:27:11 +0000
ROA not before: Mon 05 Jun 2023 08:27:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44092
IP address blocks: 185.22.56.0/24 maxlen: 24
185.22.58.0/24 maxlen: 24
185.22.57.0/24 maxlen: 24
185.22.59.0/24 maxlen: 24
147.185.163.0/24 maxlen: 24
147.185.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:aa:d6:98:fa:d2:97:37:99:95:84:fd:af:2f:7d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jun 5 08:27:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48cdafd5213b47c7be565c3750fe82bf6eeded7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:5f:2a:00:d8:ca:5f:7f:d0:af:32:30:66:
b5:7d:0a:3f:b3:17:56:43:b5:93:33:a0:dd:ff:aa:
69:33:36:53:84:83:dd:3c:f1:77:4d:e2:fa:15:ce:
cc:a0:fb:3d:dd:02:85:91:39:e6:82:4b:d7:dc:7e:
37:40:7a:d1:2f:99:71:30:e8:a6:9f:9b:38:8f:59:
a8:17:69:3c:db:62:89:9d:17:39:6d:b7:07:ce:61:
56:0f:23:ed:d3:7c:94:69:4c:44:e0:a0:f2:6d:01:
ad:cb:4c:a7:46:d0:70:80:b2:61:30:a7:5a:a9:0f:
8f:54:cd:88:a4:20:79:84:85:95:60:a2:01:d1:40:
8e:f2:2d:d7:64:e2:fd:93:c6:a9:91:9b:3a:13:a0:
77:e9:14:5d:15:89:4c:a9:b1:b0:f7:83:de:28:df:
75:a1:1f:4c:a6:0c:3c:ff:1e:4d:64:6b:a2:a4:bd:
c0:f4:67:77:f7:34:29:10:38:17:9d:ec:67:0a:a8:
08:11:39:cf:08:20:d3:3b:6d:18:d1:7e:2e:4c:7e:
ac:8d:19:59:03:2e:1b:54:5e:5c:1e:0d:b9:57:96:
bf:1d:ea:7f:14:57:05:0f:fb:35:15:fa:48:50:49:
19:7d:1d:a8:fc:15:bc:f5:b2:64:8f:39:cc:3a:a9:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CD:AF:D5:21:3B:47:C7:BE:56:5C:37:50:FE:82:BF:6E:ED:ED:7C
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/SM2v1SE7R8e-Vlw3UP6Cv27t7Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.162.0/23
185.22.56.0/22
Signature Algorithm: sha256WithRSAEncryption
59:f1:99:c4:15:dd:1e:7f:79:61:b4:77:89:f8:9d:dc:df:0d:
46:2a:70:0b:c0:8e:1b:6d:d6:9e:60:92:8c:23:7f:62:20:11:
2b:e8:ef:47:86:af:20:b1:79:fd:18:66:d7:28:36:6a:65:71:
5d:c4:f4:4b:ef:b1:f9:48:74:7d:d6:49:65:71:9e:bf:ee:d0:
37:7f:9e:98:26:fa:5e:b8:d9:51:63:32:b6:b4:33:93:91:33:
47:a4:9b:b6:54:db:4e:55:10:46:69:72:f5:e0:71:11:e6:9f:
77:8f:0f:c0:24:86:28:9a:dd:08:7e:9e:7b:2d:5d:8c:ac:dc:
54:8d:a3:68:af:23:90:d1:8e:4a:cf:d6:38:ab:9c:08:42:04:
ce:52:27:2b:e4:7a:a4:4a:5c:d0:5c:d8:b1:51:72:48:a2:21:
f9:7c:d8:c3:64:5a:e3:ea:69:aa:cd:b0:6f:5c:14:82:9e:3f:
d2:d6:9d:7e:31:7f:5a:f6:50:86:1c:c8:99:35:6a:e4:34:92:
c5:62:05:5e:91:b7:b6:13:bd:f2:82:21:cf:6e:a0:74:43:62:
a1:24:93:b2:bf:8f:81:2a:ba:27:b8:9c:95:30:4c:df:a1:25:
f1:cf:9d:06:66:f0:9d:66:9c:bc:ac:4c:ca:7f:4f:35:26:2c:
ff:0d:5e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org