Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/1smNo0TNpxXu3XcWKVoMrgbkSys.roa
File: 1smNo0TNpxXu3XcWKVoMrgbkSys.roa (raw, json)
Hash identifier: g2Q+obJwzMDixS0njfuJLdunbI13NwyR/IrnuUHsScc=
Subject key identifier: D6:C9:8D:A3:44:CD:A7:15:EE:DD:77:16:29:5A:0C:AE:06:E4:4B:2B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 01857227EE37E346D52621CEBBB42C0D7F85
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/1smNo0TNpxXu3XcWKVoMrgbkSys.roa
Signing time: Mon 02 Jan 2023 11:04:57 +0000
ROA not before: Mon 02 Jan 2023 11:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30879
IP address blocks: 83.97.15.0/24 maxlen: 24
83.97.14.0/24 maxlen: 24
83.97.13.0/24 maxlen: 24
83.97.12.0/24 maxlen: 24
195.34.200.0/22 maxlen: 24
83.97.8.0/24 maxlen: 24
83.97.11.0/24 maxlen: 24
83.97.10.0/24 maxlen: 24
83.97.8.0/21 maxlen: 21
83.97.9.0/24 maxlen: 24
2a11:d940::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 27 Jan 2023 13:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:ee:37:e3:46:d5:26:21:ce:bb:b4:2c:0d:7f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Jan 2 11:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6c98da344cda715eedd7716295a0cae06e44b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:3a:8b:e0:cf:f1:83:7e:4d:0f:2e:1b:e5:
1e:0e:93:26:6a:e5:a5:db:43:8c:65:e7:29:eb:11:
b4:e4:3e:b0:5f:10:8d:83:3d:ce:0f:54:c0:dc:cf:
c2:85:83:da:33:99:df:8d:74:c1:64:36:17:d2:f4:
dc:dc:8c:f2:b4:b3:1d:3d:08:80:0b:a7:79:fd:d6:
a7:13:0f:7c:36:0e:5f:94:c6:26:c3:1d:3a:4c:47:
72:2f:52:b8:95:80:b0:68:42:7c:09:26:b9:6a:a6:
8d:a4:49:42:6f:55:75:2a:77:d4:06:9b:34:97:ad:
63:20:22:2f:42:b0:61:9e:a5:ac:09:83:ca:78:58:
6a:f3:44:97:4b:9c:3b:cc:0e:96:5e:03:c3:8d:d1:
ac:cb:3d:78:30:a0:b3:43:f8:1c:d3:b5:55:e0:ef:
5c:cb:e8:44:2d:c4:ad:bb:d7:63:21:69:ca:0d:b0:
a1:42:9d:21:5b:41:ae:d8:8f:3e:00:35:49:40:62:
51:20:6a:a1:ab:6d:00:d2:5e:4b:87:3c:70:c5:8f:
4e:40:01:95:73:3a:fc:6f:1e:37:06:6f:90:03:63:
eb:7d:8e:72:ba:b3:dc:f4:bc:dd:b2:9c:f8:ae:aa:
e3:57:2d:ad:d2:17:30:3f:44:dc:dd:1f:98:98:64:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C9:8D:A3:44:CD:A7:15:EE:DD:77:16:29:5A:0C:AE:06:E4:4B:2B
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/1smNo0TNpxXu3XcWKVoMrgbkSys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.8.0/21
195.34.200.0/22
IPv6:
2a11:d940::/29
Signature Algorithm: sha256WithRSAEncryption
61:64:f1:cb:de:5d:e9:47:87:3a:6e:3c:d4:cd:9a:cf:f7:1b:
7c:0a:7d:2e:26:b3:6f:15:ea:4f:de:64:94:78:19:fe:78:9f:
d8:aa:9c:c5:68:f9:9d:8f:a6:e3:11:24:53:d7:da:11:0d:3f:
30:f1:ae:1d:c5:4c:23:c1:29:45:7b:f9:38:80:bf:b1:15:22:
74:48:c7:f1:e9:61:b8:5f:3a:24:16:63:69:5b:56:5e:af:c2:
f5:10:da:6b:f5:32:61:1a:95:15:1b:ca:4c:c6:31:ba:e7:3a:
39:bb:21:af:26:78:59:f3:d8:11:07:74:56:98:a2:25:c2:43:
be:97:cb:b8:9e:fd:02:76:c3:5c:77:83:1c:19:3c:82:e1:76:
79:f6:0f:32:5a:b4:cf:53:d3:5e:37:e1:86:cc:db:59:09:40:
c4:d3:7c:9c:7f:fc:87:d0:18:ea:cb:93:f2:52:54:ce:47:a8:
ba:53:7c:a8:41:42:d4:45:89:b3:5f:e7:f7:30:bc:ff:70:9a:
ce:fe:b5:3a:08:3a:82:d7:be:e0:45:16:4d:9e:23:eb:30:b0:
c2:1e:5e:e0:f5:3b:1f:eb:39:ee:8c:c9:88:e3:73:51:cd:59:
91:f3:84:f1:5e:29:7c:c2:94:1c:37:08:61:2d:c5:40:8c:5b:
d9:20:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:39 2024 by rpki-client on console-fra.rpki-client.org