Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/SCM-iBaKYCQDSREbZ7rB_lE9xLQ.roa
File: SCM-iBaKYCQDSREbZ7rB_lE9xLQ.roa (raw, json)
Hash identifier: 3bUDQmxAXcmAG5pDH8jkpwzOM03mFkOkfIZZ2bsOGSs=
Subject key identifier: 48:23:3E:88:16:8A:60:24:03:49:11:1B:67:BA:C1:FE:51:3D:C4:B4
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 01856DB88421E55855D9D8FC16458D303F98
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/SCM-iBaKYCQDSREbZ7rB_lE9xLQ.roa
Signing time: Sun 01 Jan 2023 14:24:47 +0000
ROA not before: Sun 01 Jan 2023 14:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201307
IP address blocks: 155.133.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:84:21:e5:58:55:d9:d8:fc:16:45:8d:30:3f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Jan 1 14:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48233e88168a60240349111b67bac1fe513dc4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3d:d9:57:72:4b:dc:09:22:c3:12:81:b9:ea:
db:58:0c:e2:d1:86:b0:a4:3e:5d:85:64:11:ac:ce:
a3:94:22:6a:9c:7c:25:65:a6:4b:83:4b:01:38:9e:
e0:74:c3:e8:82:fa:b5:be:5a:79:ff:cb:1c:3a:33:
05:d7:68:b7:4c:47:7e:77:0c:59:8e:fb:01:38:ab:
59:f5:16:91:c4:c7:83:e0:95:51:6f:44:de:4a:36:
1b:27:a5:c5:7d:1e:b5:41:b1:8e:35:2e:36:37:74:
c6:15:14:03:4a:93:55:ca:76:b1:34:0d:a3:a4:84:
f5:fb:88:f5:90:f5:5e:e9:21:49:35:fe:20:07:61:
eb:8b:63:30:ee:1a:0e:db:9b:7c:dd:c7:31:ad:86:
bd:07:f9:bb:48:60:c8:0c:86:cc:2c:24:e3:47:d4:
33:b7:11:9d:74:70:62:d7:4c:cb:7b:f3:70:ee:01:
52:88:dd:5f:5c:3a:f6:c9:2a:f7:aa:ec:01:50:77:
a2:1f:fb:69:41:c2:4f:c1:3d:d6:9a:74:d6:5f:bd:
f0:45:c8:f0:b6:36:8b:52:fc:39:e1:c2:f8:dc:37:
c1:2d:90:ce:07:41:66:4b:bb:26:fa:22:26:f1:3e:
4c:38:bf:30:cc:12:75:33:9c:97:1b:1b:3c:f1:17:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:23:3E:88:16:8A:60:24:03:49:11:1B:67:BA:C1:FE:51:3D:C4:B4
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/SCM-iBaKYCQDSREbZ7rB_lE9xLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:e7:36:12:be:0e:32:3c:31:f8:8c:54:e6:d4:2c:0b:ad:4c:
47:25:7b:53:c7:5b:6d:07:04:ff:60:9c:d0:87:81:a7:5a:04:
79:9a:d8:60:9f:59:a2:7c:45:8a:32:e2:7f:61:a6:3d:48:e8:
2e:3b:2f:d9:b5:bd:8a:65:89:63:dc:ba:2c:20:81:76:4b:c5:
c7:c1:28:14:f6:35:46:a9:1e:7f:6b:e4:7c:bd:e4:b5:c6:fb:
c5:31:38:cc:41:49:6e:1c:e5:22:3f:7d:70:a1:2d:71:4a:ec:
c4:96:a6:e3:e4:05:6f:1f:02:6d:64:ef:c8:26:56:ec:b7:e8:
74:d2:b6:42:98:8f:f0:a5:f1:90:e6:0a:1a:4e:b7:65:70:0b:
b9:4e:ea:92:11:62:26:82:7f:d5:92:cb:8d:3e:96:6e:51:e1:
64:6b:99:6f:17:60:a0:b5:c2:2f:71:a7:fb:c4:3b:c8:c3:4e:
da:25:da:bd:53:e8:50:4a:53:59:9b:8a:ed:80:31:ba:71:cf:
5a:af:5d:61:21:d8:bc:51:bd:3b:5c:9d:44:9a:bc:67:ba:b3:
b2:52:24:60:f7:92:c2:ee:0b:6e:64:d5:cb:a6:29:30:64:0c:
0d:cb:49:a2:4a:19:c9:c8:c9:ec:93:fc:ea:21:ee:20:93:ae:
bf:31:26:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:12 2023 by rpki-client on console-ams.rpki-client.org