Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/SmKHSRysLqAQ_m85mZnw93-fdF4.roa
File: SmKHSRysLqAQ_m85mZnw93-fdF4.roa (raw, json)
Hash identifier: QGxDfQeW/wdcOU6BQdZayncbA7dhkbquMtSui5MPjCI=
Subject key identifier: 4A:62:87:49:1C:AC:2E:A0:10:FE:6F:39:99:99:F0:F7:7F:9F:74:5E
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0187FB84FCF9EF65F5759705D53EFDBA98A6
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/SmKHSRysLqAQ_m85mZnw93-fdF4.roa
Signing time: Mon 08 May 2023 13:20:09 +0000
ROA not before: Mon 08 May 2023 13:20:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198652
IP address blocks: 46.37.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:84:fc:f9:ef:65:f5:75:97:05:d5:3e:fd:ba:98:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 8 13:20:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a6287491cac2ea010fe6f399999f0f77f9f745e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:bf:be:4e:7a:e5:e5:14:af:07:ad:37:19:
ae:f3:da:1e:a4:20:6b:d3:19:9d:42:f3:ea:a6:88:
90:df:b2:d8:9f:0f:41:e7:10:6a:76:2e:31:12:36:
83:37:d5:8d:a3:06:91:3d:a8:14:af:ad:f6:6c:a4:
80:23:65:03:fd:89:f2:fa:51:18:b8:f7:07:d1:d7:
e3:05:05:2b:11:8e:93:b5:31:9d:5c:67:61:e5:72:
7d:23:16:af:b7:5b:a2:cf:70:5c:7f:e1:a4:53:f5:
95:14:5f:51:96:24:d1:c6:e9:1b:bc:d5:75:2f:0f:
41:65:76:cc:2f:b4:27:4a:0f:f1:fd:1f:77:3f:c8:
02:ce:2b:c2:dd:90:9e:fc:35:0f:00:37:64:7c:44:
e6:e7:6a:7f:37:cf:56:71:3f:7c:80:b2:aa:c7:df:
43:9b:1a:4a:64:58:dc:da:f1:30:00:17:bf:45:e6:
07:3a:ff:e0:ad:6c:d4:dc:bf:f1:dd:2f:0b:75:41:
8d:b2:39:9f:c1:53:9d:9e:e9:34:e6:2a:79:0a:f2:
c7:b3:f8:d0:66:9d:ab:f5:9a:8d:3b:a8:21:f1:08:
62:8b:c2:49:80:ec:1f:d5:22:5b:6c:9b:43:f8:2a:
5f:dc:c4:dc:8f:1f:d3:6b:77:fd:c7:04:3f:94:6b:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:62:87:49:1C:AC:2E:A0:10:FE:6F:39:99:99:F0:F7:7F:9F:74:5E
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/SmKHSRysLqAQ_m85mZnw93-fdF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.104.0/24
Signature Algorithm: sha256WithRSAEncryption
90:82:95:cb:d1:84:16:fe:d4:20:d0:8f:74:c2:85:12:ab:56:
18:19:a6:18:17:a7:2d:e5:3e:24:fb:ff:1a:67:05:fb:6c:b0:
6e:66:c3:67:e4:7b:a8:8e:8a:7b:4a:86:00:cb:2f:7c:6f:47:
8a:25:01:0c:75:81:0c:31:3e:c8:38:aa:78:07:04:bf:fe:1e:
18:d2:ad:02:26:57:e9:59:9f:e8:9f:cd:ff:aa:d2:48:91:80:
3a:ce:35:c3:05:60:50:e9:55:d2:d6:0b:57:24:97:c5:8a:56:
2b:c3:c1:d6:9b:f8:31:ff:56:7f:fd:c0:bb:c2:39:85:2b:32:
04:56:9f:b5:8d:04:5d:25:68:e1:4c:0e:21:8f:da:02:c5:7d:
b0:eb:5a:9b:cd:2a:ba:8e:2f:ad:30:db:87:61:70:41:e4:62:
0f:2a:6c:8f:4e:39:a2:6f:df:cf:1f:2b:05:28:c2:8a:bf:23:
db:a1:a6:ef:1d:c0:1f:39:7f:73:5a:17:16:c1:e4:b6:04:8e:
55:a6:21:1c:fd:d4:cf:c3:46:77:4e:a9:98:15:75:79:5b:70:
df:44:b2:47:e2:12:db:72:a6:a6:09:ed:f5:e7:07:85:de:48:
eb:6a:7c:1c:e9:d6:e2:2b:f8:bb:4e:ab:01:3d:54:ba:11:f5:
01:02:31:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org