Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/SMtA3_7I1GI9djj7ivlSBS9x7-g.roa
File: SMtA3_7I1GI9djj7ivlSBS9x7-g.roa (raw, json)
Hash identifier: ZWmGUXHHFA1yPohqA2nrpsBQLvP5crf7oC5UvzOzncQ=
Subject key identifier: 48:CB:40:DF:FE:C8:D4:62:3D:76:38:FB:8A:F9:52:05:2F:71:EF:E8
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 01933EEE4E09B2523FBEE54FAE1750D6256C
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/SMtA3_7I1GI9djj7ivlSBS9x7-g.roa
Signing time: Mon 18 Nov 2024 11:00:25 +0000
ROA not before: Mon 18 Nov 2024 11:00:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61060
IP address blocks: 45.158.204.0/23 maxlen: 23
185.132.236.0/22 maxlen: 22
194.120.124.0/23 maxlen: 23
194.120.190.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 20 Nov 2024 13:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:ee:4e:09:b2:52:3f:be:e5:4f:ae:17:50:d6:25:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Nov 18 11:00:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48cb40dffec8d4623d7638fb8af952052f71efe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:f6:57:7d:9a:32:15:bb:9f:09:ef:5b:a1:
14:55:c9:9b:7f:26:b3:2d:d6:8a:f8:32:a9:f7:71:
93:0d:46:d4:86:3b:0d:49:f5:3a:20:f1:ad:c2:d4:
3e:62:04:86:7d:3d:89:08:b8:37:2a:26:f8:6f:4b:
06:ca:e7:91:d2:10:35:45:2f:38:92:5d:87:f3:8b:
55:9b:db:c6:4a:97:11:d1:7f:60:91:d0:cd:68:53:
2a:64:18:e3:a2:02:b9:ee:55:97:0f:ec:2d:13:de:
6c:e4:f1:7e:d0:18:97:56:1b:60:68:b4:85:42:bb:
ae:da:cf:75:ad:b4:b5:a2:61:1b:4c:d7:e4:88:10:
eb:0c:4a:86:33:eb:b9:d2:4d:3b:82:75:bc:00:63:
bb:a9:40:d3:15:0e:f1:08:7c:d2:7a:0d:13:64:69:
70:77:ca:0f:e1:4d:28:ee:3f:f4:a6:ba:b6:9e:55:
30:4a:5a:31:65:66:bb:e0:cf:c5:40:54:e4:76:62:
bc:8b:c4:16:86:52:b1:a7:6f:c3:01:7f:64:c5:6b:
76:e2:5e:c3:88:cc:18:d3:91:eb:60:2c:6e:17:d8:
15:0b:3b:64:dd:e1:b9:04:e7:d3:fb:9c:81:56:8d:
ad:12:0c:72:d8:c2:d4:e6:c8:64:5f:ca:2a:f8:09:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CB:40:DF:FE:C8:D4:62:3D:76:38:FB:8A:F9:52:05:2F:71:EF:E8
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/SMtA3_7I1GI9djj7ivlSBS9x7-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.204.0/23
185.132.236.0/22
194.120.124.0/23
194.120.190.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:e8:6d:b1:7d:9b:0b:d3:bd:16:db:04:07:5a:52:1e:24:6e:
fd:23:56:9d:21:9c:a9:34:85:e8:50:6a:3b:27:e5:63:49:b2:
6a:da:6f:1f:2e:25:69:d9:3b:4b:1e:76:52:01:81:89:15:67:
cf:72:e3:aa:82:d8:dc:e2:df:e1:8a:5e:a0:16:d0:68:b9:c3:
17:ca:79:b1:21:ae:87:a5:4d:82:ae:df:3c:11:fe:64:98:2b:
a8:7a:44:cf:af:94:62:9c:1a:bf:9c:8b:5f:8a:f1:6e:63:8e:
e0:96:0c:a9:31:b6:10:a3:81:e7:f2:54:c3:d6:c6:56:b8:ac:
d6:a7:a9:cd:37:2c:19:a3:b9:21:a6:d4:34:78:da:8a:77:89:
b9:c3:71:03:77:ec:cf:80:44:07:a3:2b:67:80:33:d4:a6:c2:
6a:1f:d5:6e:a2:67:41:98:ca:08:ee:b3:66:e1:48:61:57:09:
26:06:48:4c:31:68:ff:55:77:f0:3b:56:eb:50:f1:49:6e:54:
1d:9a:4d:e1:8a:9c:f4:c6:a3:34:17:e8:43:73:4e:93:6b:44:
f6:ac:1e:d3:f0:0a:d8:d4:6d:8f:3c:e0:92:68:8c:b3:90:b2:
a7:59:98:8b:df:af:ae:df:21:13:5e:7d:11:28:b8:c4:9a:21:
48:02:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:28:03 2025 by rpki-client