Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/smy_cmgff2Y-w7XSQrY7fBDnSBA.roa
File: smy_cmgff2Y-w7XSQrY7fBDnSBA.roa (raw, json)
Hash identifier: 2uFS1WgMcFuEr1QO8T1CSzJGsKgCzYvSm9wyBjK001g=
Subject key identifier: B2:6C:BF:72:68:1F:7F:66:3E:C3:B5:D2:42:B6:3B:7C:10:E7:48:10
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01856F022C3AA7034155358EEDD35389B977
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/smy_cmgff2Y-w7XSQrY7fBDnSBA.roa
Signing time: Sun 01 Jan 2023 20:24:51 +0000
ROA not before: Sun 01 Jan 2023 20:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 89.42.29.0/24 maxlen: 24
91.250.244.0/24 maxlen: 24
89.37.128.0/24 maxlen: 24
176.223.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:2c:3a:a7:03:41:55:35:8e:ed:d3:53:89:b9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 20:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b26cbf72681f7f663ec3b5d242b63b7c10e74810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:33:99:89:62:bd:1c:fe:c8:26:b1:40:49:d6:
46:26:47:c6:80:d7:d9:4b:f7:c2:c6:53:88:69:5f:
a9:0c:38:4e:f6:cb:b6:d5:14:ef:cc:0a:dc:d5:a7:
86:ce:c0:39:75:04:34:c8:b4:42:2a:35:92:74:5a:
43:c0:b3:b2:b7:e1:1a:26:5a:fb:0d:f8:0d:24:df:
29:d3:af:19:4e:09:81:3a:b1:a1:3e:2e:bc:15:34:
74:a2:02:b3:1a:dd:c3:ad:55:1c:ba:31:bf:cc:80:
34:cd:cf:84:1a:30:15:4b:36:83:bc:63:eb:4e:f2:
97:ce:ad:b6:14:f9:f5:57:93:e1:2e:38:c0:d4:c5:
06:4b:64:23:77:1d:2e:3e:75:8b:8c:8f:35:c2:10:
35:7a:bb:04:aa:3d:6a:49:46:7a:51:60:c8:3f:dc:
c2:b5:69:2c:4f:76:d3:8e:aa:ae:3d:42:1a:8c:e2:
69:75:03:03:32:b3:4b:3e:f8:7d:e5:55:96:95:c9:
04:42:da:e8:39:64:ff:e9:0e:31:ee:90:8d:29:48:
14:18:2f:1c:96:49:d2:ec:85:b5:6a:44:4c:a2:8b:
19:49:24:f4:23:bf:ca:04:29:d7:1b:d8:e5:27:ea:
5f:c5:95:fe:4b:46:4f:2c:b8:ff:cd:b0:c9:09:df:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6C:BF:72:68:1F:7F:66:3E:C3:B5:D2:42:B6:3B:7C:10:E7:48:10
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/smy_cmgff2Y-w7XSQrY7fBDnSBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.128.0/24
89.42.29.0/24
91.250.244.0/24
176.223.190.0/24
Signature Algorithm: sha256WithRSAEncryption
09:db:2f:40:d1:6c:39:3b:51:e4:47:58:66:d8:b8:9d:f4:9b:
17:ea:34:c8:ef:09:07:81:5e:ff:c2:3c:5c:65:61:cd:fa:39:
33:71:37:ca:96:19:bb:99:fa:f3:32:ad:65:50:d8:22:f7:48:
c7:60:1e:00:2a:31:f4:92:aa:e0:14:15:57:7c:7f:02:ff:19:
85:26:76:4c:28:68:10:7f:c6:20:5c:47:95:4d:9c:31:5a:cd:
a5:d0:1d:5a:a9:74:dc:d8:70:6a:1c:f1:b2:32:e2:b0:4a:fb:
7c:0c:db:5c:ad:7b:f2:ff:05:f5:5f:30:95:8a:b1:08:61:28:
ab:18:fa:81:67:79:c8:f2:32:a2:8d:be:c8:a1:dc:e7:43:60:
3a:c3:65:9e:39:d0:68:dd:c0:75:89:e1:90:87:af:59:18:ca:
14:5a:10:6c:82:5a:0b:6f:c4:f8:24:8f:be:6f:c0:20:1b:09:
9d:f3:cc:60:f8:62:20:dc:83:4d:a5:e5:6b:c6:0e:32:36:a5:
81:6d:1d:17:aa:1d:fe:2f:56:47:ef:45:21:2f:d8:34:6c:1a:
93:90:da:8c:91:05:13:9a:31:a5:d6:5f:3a:2a:b4:cf:9b:34:
10:9d:29:36:64:07:79:e9:45:bc:fe:1d:b2:50:3d:8d:40:ab:
01:03:d4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org