Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/skh-q7-wfMqxIjP9lWFgYnfTqxo.roa
File: skh-q7-wfMqxIjP9lWFgYnfTqxo.roa (raw, json)
Hash identifier: 8AvF8WwuxcmkhPDX7rhwbkGQ75cRBUhESn8G5QaWQug=
Subject key identifier: B2:48:7E:AB:BF:B0:7C:CA:B1:22:33:FD:95:61:60:62:77:D3:AB:1A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A4C2B38B32B9BD35E54D7F5644108981D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/skh-q7-wfMqxIjP9lWFgYnfTqxo.roa
Signing time: Thu 31 Aug 2023 15:16:55 +0000
ROA not before: Thu 31 Aug 2023 15:16:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211318
IP address blocks: 194.135.18.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Aug 2023 16:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4c:2b:38:b3:2b:9b:d3:5e:54:d7:f5:64:41:08:98:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 31 15:16:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2487eabbfb07ccab12233fd9561606277d3ab1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:52:8c:ce:c4:d9:ba:2e:e3:32:08:bd:2c:
a7:60:e3:4c:54:4d:44:f2:c5:5f:25:1d:ad:49:d2:
4f:b0:51:0b:05:d0:02:d4:82:bf:0f:54:cb:bd:8a:
06:14:50:91:62:5b:62:d6:a1:70:b3:e6:74:d2:1f:
57:a7:9e:29:3f:20:e2:f8:07:79:87:b5:40:54:2a:
0a:7b:b6:25:ec:41:06:9c:5f:24:09:b3:64:65:3b:
17:cd:ca:b2:89:c7:3b:66:5f:77:59:59:f4:aa:1f:
ed:da:e6:49:31:3b:57:38:f3:4a:78:46:7c:79:3f:
32:dc:d3:36:b1:c8:91:5f:06:da:9f:e1:ee:be:f7:
23:a8:a4:f8:14:5d:df:c9:3a:c5:e0:6e:b9:f7:6f:
da:ac:2f:94:f1:37:8c:2f:24:78:b9:d1:38:f1:1b:
02:be:16:89:98:53:22:b8:c0:9e:b0:b7:65:e8:2a:
3e:a1:e3:c2:0b:71:6e:d2:76:f5:10:68:6b:cf:51:
00:46:f2:95:ac:20:58:5d:57:6d:71:4d:36:17:be:
99:ab:eb:16:6a:50:bf:4f:89:7b:23:6c:8f:e3:74:
56:19:2c:c7:13:27:3b:22:7b:ee:18:2b:53:80:97:
e9:eb:48:2c:5a:af:a9:8b:7b:1e:b7:31:84:73:c1:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:48:7E:AB:BF:B0:7C:CA:B1:22:33:FD:95:61:60:62:77:D3:AB:1A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/skh-q7-wfMqxIjP9lWFgYnfTqxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.33.0/24
194.135.18.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:70:c1:7c:98:10:5c:34:50:95:58:5d:6a:2f:fc:b4:4b:f7:
7a:34:eb:c8:51:91:e1:fb:8a:6f:d9:1c:be:e0:1d:e0:23:20:
b8:96:0b:6d:79:03:f5:15:27:bc:c2:46:0b:e7:c0:ec:c6:b4:
4d:ef:22:f7:b2:8f:31:5b:f4:3c:64:c7:d6:35:73:f1:f6:67:
87:ab:5a:4a:c6:8c:1f:0d:6b:9c:17:65:79:18:c5:0f:b0:f4:
37:c7:65:26:ec:1f:77:9f:76:09:1d:b9:ed:00:c1:07:46:48:
32:fc:5a:f7:b2:7f:11:a6:12:69:12:b4:30:4f:12:ed:90:25:
d9:34:b1:99:16:22:72:d3:b4:c0:16:2e:6c:4e:b5:be:bd:c4:
1d:6a:bb:c7:72:3d:40:3f:25:aa:38:30:08:05:b9:40:e2:e4:
7f:ae:12:fc:a5:95:48:18:f3:de:39:8c:e0:5c:b2:82:19:b4:
3f:97:0e:71:da:15:19:b1:f5:d7:f4:fe:51:06:d2:71:d1:91:
ba:37:f6:88:01:a6:1d:05:30:6f:46:48:80:90:33:e4:90:d7:
f5:1c:68:93:88:44:64:f3:3b:05:4a:aa:0c:0b:69:be:2e:6e:
7d:c7:c2:d5:49:8b:ff:22:ce:a4:1f:8d:2f:ad:d4:96:55:73:
fe:d1:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:48 2024 by rpki-client on console-ams.rpki-client.org