Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/SMD8OxfsCBBd4O0IAX_2bMeLgSc.roa
File: SMD8OxfsCBBd4O0IAX_2bMeLgSc.roa (raw, json)
Hash identifier: LK2Dn/hZdNCN0dc/mfMs1ahcrBExVtqZuj0xg+S1Vy8=
Subject key identifier: 48:C0:FC:3B:17:EC:08:10:5D:E0:ED:08:01:7F:F6:6C:C7:8B:81:27
Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial: 01856D01B5AF0786A3A9F160DD366CC4F85F
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/SMD8OxfsCBBd4O0IAX_2bMeLgSc.roa
Signing time: Sun 01 Jan 2023 11:05:06 +0000
ROA not before: Sun 01 Jan 2023 11:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50290
IP address blocks: 31.15.124.0/22 maxlen: 22
109.69.32.0/21 maxlen: 22
185.74.174.0/24 maxlen: 24
185.74.174.0/23 maxlen: 23
46.30.132.0/22 maxlen: 22
46.30.130.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:b5:af:07:86:a3:a9:f1:60:dd:36:6c:c4:f8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Validity
Not Before: Jan 1 11:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48c0fc3b17ec08105de0ed08017ff66cc78b8127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:a3:4f:2a:29:9d:1d:e6:68:2b:72:59:4a:
a4:61:a6:73:75:cf:83:94:40:e8:1b:99:7e:ea:6a:
be:49:57:db:c2:fd:16:49:38:53:36:2f:fb:c3:4e:
bc:4f:d8:7a:49:26:ac:11:d7:08:bc:55:5e:a9:26:
93:1d:86:76:9d:52:9f:3e:f1:5b:dc:74:03:b3:93:
2d:f3:07:b6:31:4e:b4:4e:69:12:df:42:19:ed:e3:
a4:a6:09:8f:0d:b8:c2:1e:8d:9f:ba:1f:0b:82:58:
50:81:df:c4:e6:95:15:5b:a3:45:53:df:f0:e7:3b:
24:41:74:03:98:f0:0b:34:52:db:1e:0b:4d:53:c8:
c7:1e:a4:b5:88:2a:ba:a3:b0:c4:d7:66:a0:f8:0a:
3f:b4:48:e6:12:84:13:d7:22:76:62:64:72:6b:20:
2a:fb:e2:15:81:dc:9e:74:ff:a7:04:75:6c:28:7e:
9d:6d:aa:8c:f6:34:61:e4:ef:fc:99:d5:3a:e4:2f:
a6:c2:5b:10:be:10:99:b8:cd:f9:11:46:2e:6a:60:
6c:2a:a9:71:09:8a:fd:53:05:58:e9:c7:74:36:ea:
50:cd:2b:10:a0:20:52:c4:0e:f6:6b:e9:73:b9:9a:
4d:76:cb:53:a9:2e:61:5b:29:af:ef:b7:99:a0:cc:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C0:FC:3B:17:EC:08:10:5D:E0:ED:08:01:7F:F6:6C:C7:8B:81:27
X509v3 Authority Key Identifier:
keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/SMD8OxfsCBBd4O0IAX_2bMeLgSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.124.0/22
46.30.130.0-46.30.135.255
109.69.32.0/21
185.74.174.0/23
Signature Algorithm: sha256WithRSAEncryption
98:56:c8:22:19:c0:8e:7f:46:75:37:a7:94:5f:88:cd:53:e7:
f9:73:2e:3f:ec:0d:8a:42:56:e6:25:d7:62:2c:38:dd:d1:61:
b2:91:0a:35:5b:5d:99:60:40:ef:5a:a6:93:a4:01:f4:fb:98:
68:fe:5e:1e:3c:c0:48:5c:97:d8:bb:a3:70:6a:ea:db:bc:3d:
3b:c4:af:b8:69:84:47:99:1d:27:b4:54:89:7f:05:58:50:be:
85:38:10:a2:b4:c4:f0:8d:af:87:cd:a1:46:ec:3c:07:8b:c2:
d6:72:44:85:85:81:83:26:de:b6:f1:10:b8:66:d5:15:0e:bf:
28:72:fe:b9:79:c4:72:06:d6:4b:e9:04:26:7d:55:24:fd:80:
30:50:22:f5:cf:40:36:d6:58:99:21:6e:03:50:74:0c:0f:2f:
54:7d:7d:2a:5e:51:35:fe:af:da:6e:6a:9e:d6:0e:db:86:49:
42:34:c9:b2:a7:58:dc:f1:3d:42:4d:f6:33:91:35:cb:0b:b3:
37:b6:a2:54:68:60:b4:a5:0b:13:7a:1e:d2:00:17:94:d3:47:
f6:bd:4f:a6:e4:3b:26:83:5a:87:71:c7:ff:d4:97:a4:5d:ba:
39:4e:30:54:43:22:31:f6:d4:75:fc:b8:3c:3f:3b:ca:35:99:
6e:ae:da:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:02 2023 by rpki-client on console-ams.rpki-client.org