Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/SM4ukKGdCuj0C3zP9o0hhM_8p_c.roa
File: SM4ukKGdCuj0C3zP9o0hhM_8p_c.roa (raw, json)
Hash identifier: A8VqBhbo4dwoGvjsSHRY4yWe1QoigKh6fT2Gn3GqOpc=
Subject key identifier: 48:CE:2E:90:A1:9D:0A:E8:F4:0B:7C:CF:F6:8D:21:84:CF:FC:A7:F7
Certificate issuer: /CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Certificate serial: 01856D6F68A96F746C3B6AC77C0FAA9B2898
Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/SM4ukKGdCuj0C3zP9o0hhM_8p_c.roa
Signing time: Sun 01 Jan 2023 13:04:55 +0000
ROA not before: Sun 01 Jan 2023 13:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57642
IP address blocks: 37.25.56.0/21 maxlen: 21
37.25.56.0/24 maxlen: 24
193.228.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:68:a9:6f:74:6c:3b:6a:c7:7c:0f:aa:9b:28:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Validity
Not Before: Jan 1 13:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48ce2e90a19d0ae8f40b7ccff68d2184cffca7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:71:00:3e:2e:d9:ae:6d:48:d6:c7:a4:71:
ac:dd:97:98:0d:02:3a:7b:2b:88:d2:0a:b2:f3:a3:
eb:34:43:29:37:80:6d:50:fa:47:cb:18:88:fb:23:
4f:96:48:ae:75:ac:cc:41:8c:eb:92:8d:a9:48:1b:
c2:fb:2e:64:ea:a8:41:02:e0:7e:18:1d:aa:69:59:
5a:f0:99:21:d1:c6:9a:f5:ad:0a:f1:b3:7d:e4:a4:
51:a5:c7:bb:a7:2f:25:61:35:8e:09:02:02:5a:64:
b0:af:33:77:73:b9:c1:a0:54:f7:2d:fb:46:ba:41:
f1:48:42:85:2e:e7:f5:51:ab:9b:c9:20:bd:6c:53:
68:d7:22:46:ef:30:ef:7e:fc:03:80:4b:b0:9f:41:
7b:58:24:dd:7c:c4:2d:e4:24:c6:07:8a:ec:46:8e:
2c:02:b6:64:4c:cc:a2:df:2d:3e:de:85:85:b9:67:
a5:b6:16:ea:17:b5:44:67:38:b8:52:10:a0:b9:f8:
3d:c5:8c:19:b9:0b:e9:17:38:24:d2:e9:ff:4e:c8:
52:97:f6:80:53:4b:38:76:50:e5:d3:f8:91:70:87:
67:09:78:dd:b8:92:6d:4e:00:a7:b6:b7:5e:1c:7a:
f2:e9:e4:33:b5:6b:d6:1c:79:18:df:c6:cb:a2:98:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CE:2E:90:A1:9D:0A:E8:F4:0B:7C:CF:F6:8D:21:84:CF:FC:A7:F7
X509v3 Authority Key Identifier:
keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/SM4ukKGdCuj0C3zP9o0hhM_8p_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.56.0/21
193.228.156.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:80:12:9a:82:b9:8a:47:3e:96:65:02:38:d4:19:52:4f:88:
84:96:3a:c3:08:17:02:8f:8e:d8:bc:07:96:64:b4:ce:ef:ca:
8c:e2:d8:df:8c:4a:2a:ba:ca:1b:05:42:6e:05:5d:a3:e7:9c:
16:ae:1c:d2:08:cd:32:4c:ca:28:ca:8e:31:30:83:18:b1:09:
32:e7:e6:19:24:0e:d8:e3:d9:77:6e:57:7a:b2:d5:6e:e4:a8:
71:8b:4d:be:89:b6:7d:63:45:df:2f:3e:aa:fe:48:ce:fd:39:
3c:52:2a:d2:cc:b4:36:72:0f:23:17:60:45:72:e1:4a:12:81:
b6:4a:ee:bf:cd:15:09:f5:44:ff:08:44:8d:03:d4:e4:8f:4c:
6b:04:97:ca:5d:71:81:5c:49:cc:26:3b:0a:2b:25:73:84:df:
e2:65:00:88:fb:6e:83:ce:69:c0:d3:7a:7d:09:90:46:2a:52:
2d:dc:9b:0f:9b:1a:84:e8:a5:98:59:5a:4d:90:a3:94:4e:4a:
2a:6e:88:9d:36:94:bb:da:27:4e:91:7c:a4:af:cf:d7:85:e9:
85:eb:e8:50:5f:b0:95:5f:5b:06:b8:10:db:ac:60:e7:bf:fb:
fa:a7:43:2b:97:f6:a2:f3:a9:91:0f:8d:cf:1c:54:ad:f0:91:
a3:c3:f9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:55 2024 by rpki-client on console-fra.rpki-client.org