Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jskm_lq6dBzFKX8MhJ3D3K4cdMY.roa
File: jskm_lq6dBzFKX8MhJ3D3K4cdMY.roa (raw, json)
Hash identifier: 8pabp6ivE7G4vJJ1agYMYSewDsoy5hhIwlpa19yq8dM=
Subject key identifier: 8E:C9:26:FE:5A:BA:74:1C:C5:29:7F:0C:84:9D:C3:DC:AE:1C:74:C6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018991F26086836D21A1CEDD7FCAEAE00710
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jskm_lq6dBzFKX8MhJ3D3K4cdMY.roa
Signing time: Wed 26 Jul 2023 11:25:27 +0000
ROA not before: Wed 26 Jul 2023 11:25:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203248
IP address blocks: 212.192.250.0/24 maxlen: 24
212.192.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:f2:60:86:83:6d:21:a1:ce:dd:7f:ca:ea:e0:07:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 26 11:25:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ec926fe5aba741cc5297f0c849dc3dcae1c74c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:6c:20:4f:b1:41:7f:9d:40:86:1f:9f:fd:
ff:ba:4b:90:73:9c:10:e6:c7:82:b7:48:93:38:05:
4f:49:b9:92:62:e4:ad:01:9f:ad:fe:be:ee:52:28:
b5:52:76:68:cf:c0:3a:51:b6:32:2c:92:ea:cd:f5:
a8:1c:b8:b6:fa:0a:75:74:42:bd:a7:b0:b8:cd:28:
6f:7f:81:8a:39:0e:17:b8:a3:96:af:4f:1b:e3:e0:
fa:9e:18:37:98:2c:61:dd:3b:a8:bd:2f:00:02:d8:
06:3c:e9:96:60:95:33:14:e9:5b:80:2b:53:d7:d7:
b5:30:e8:a2:66:cd:2b:38:a3:7f:55:33:60:c5:c4:
59:6b:32:32:68:e8:45:ae:62:60:b7:f2:9a:66:d9:
df:db:1b:7a:5e:00:42:8c:c4:d6:b6:31:08:4a:43:
89:25:ee:9f:e3:27:df:64:49:f4:a0:4c:25:ea:81:
a4:f5:73:58:8b:1a:00:24:2a:b2:df:ff:29:c8:1a:
9d:22:5c:4f:33:1c:f9:03:f7:f7:af:fe:3f:aa:d4:
f1:f7:bd:e7:32:8e:c0:c9:9b:6b:1d:44:8d:10:c9:
7c:a7:b1:d6:29:10:75:41:4f:d2:bf:d7:27:bf:5b:
d0:a8:56:9c:31:a8:2d:f8:0a:53:6b:ba:78:52:29:
93:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C9:26:FE:5A:BA:74:1C:C5:29:7F:0C:84:9D:C3:DC:AE:1C:74:C6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jskm_lq6dBzFKX8MhJ3D3K4cdMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.250.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:3b:c8:81:45:9b:1c:70:ab:8a:34:4d:20:80:63:55:cd:1c:
36:c9:36:0e:1b:7e:51:16:aa:2c:4b:dd:e0:4a:21:7b:ad:76:
37:f1:8a:9b:e9:7f:b1:97:58:18:55:1b:ae:32:34:76:aa:d7:
2b:be:df:d3:bf:96:e6:b4:20:0f:e3:fd:a5:0d:f5:3a:c6:81:
c3:7a:25:8d:32:0f:e8:c4:9a:c5:5a:8f:d8:58:51:6a:29:50:
3b:cd:8c:64:1c:19:aa:0c:37:8c:30:7c:48:58:db:63:e9:b4:
76:61:53:03:20:00:6b:1b:e5:62:22:96:42:e4:be:d1:e9:6f:
cb:c8:f6:d0:ce:ca:97:e9:95:6e:d1:04:b4:38:7a:f1:d7:82:
6b:83:9b:df:27:d0:76:ad:50:3b:e9:52:7d:b7:b8:d4:5f:a1:
64:cc:9c:0e:a9:54:2c:57:ba:ef:da:7c:70:1f:c9:66:9d:e3:
e6:02:59:70:6e:04:2a:50:16:2d:3a:27:12:71:bb:16:a8:14:
3d:b6:46:88:5e:6b:6d:37:92:79:16:de:4b:a5:40:98:80:fc:
82:36:1e:1a:6e:29:23:3b:81:70:c3:4a:74:76:21:0d:6e:3a:
4c:57:fc:65:68:df:8c:9a:dd:2b:48:a7:39:28:78:08:07:a7:
ff:3a:5c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 10:13:38 2023 by rpki-client on console-fra.rpki-client.org