Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/3-SKF-75BebIaUFezkRVTJ4fw_w.roa
File: 3-SKF-75BebIaUFezkRVTJ4fw_w.roa (raw, json)
Hash identifier: Ee8u5iScrjr6aId6EuHrmsqNByVAoUpVo7RRRlbA5Wk=
Subject key identifier: DF:E4:8A:17:EE:F9:05:E6:C8:69:41:5E:CE:44:55:4C:9E:1F:C3:FC
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018CCDF6E36EA58F3FEBE3329DC6A89FB915
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/3-SKF-75BebIaUFezkRVTJ4fw_w.roa
Signing time: Wed 03 Jan 2024 06:15:58 +0000
ROA not before: Wed 03 Jan 2024 06:15:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 89.251.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 07:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cd:f6:e3:6e:a5:8f:3f:eb:e3:32:9d:c6:a8:9f:b9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 3 06:15:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfe48a17eef905e6c869415ece44554c9e1fc3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:52:35:14:ae:c9:66:44:35:15:b0:2f:af:
3d:e1:90:c3:94:c5:1a:9a:1b:f6:f5:76:f2:d2:63:
6c:3e:5b:cd:41:cb:61:84:e3:81:d2:17:3f:c0:30:
4b:87:f1:bb:35:f5:62:a9:7a:9c:c6:35:94:e0:60:
19:b9:61:c3:ab:bd:a3:2e:81:3d:e9:86:14:aa:be:
d7:5e:2b:b5:f0:39:f8:0e:95:a1:70:c6:68:c5:fe:
56:59:db:c8:ac:3d:70:fe:b3:23:1b:0c:13:ef:a8:
d3:3f:32:e7:68:f4:50:3a:8c:c2:c6:26:48:17:21:
8d:60:dc:39:cd:7e:25:fa:1e:7e:83:dc:c3:66:d2:
4c:28:a3:26:83:8e:e3:82:41:a4:6b:7a:04:d3:0b:
8e:c2:d8:54:f3:0e:f6:c8:4c:ea:4a:a3:f5:7d:62:
cf:0e:6d:93:43:a8:39:58:48:b9:42:77:77:b3:ec:
80:14:fb:02:c2:b2:a9:5e:22:db:a8:2e:fb:3f:48:
89:f8:d5:60:8f:c7:b0:ac:f9:a0:d8:d2:2b:e4:87:
b9:de:64:52:88:51:f7:51:1e:7d:5b:b1:1c:42:f4:
cd:ed:87:08:d0:6d:ff:6c:ae:58:bd:30:1f:81:b3:
d7:9e:f0:98:f2:e3:31:bb:2a:f7:cb:25:03:0c:c9:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E4:8A:17:EE:F9:05:E6:C8:69:41:5E:CE:44:55:4C:9E:1F:C3:FC
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/3-SKF-75BebIaUFezkRVTJ4fw_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.19.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0c:83:4b:e5:7b:96:67:ac:a8:4c:83:42:c7:83:45:ce:f2:
b3:2f:c4:3a:98:2d:e9:1c:62:3a:d2:be:0a:d6:42:e0:24:20:
6d:b6:48:f9:68:7a:99:ac:dd:fc:28:78:dd:c0:fe:e0:55:fb:
b6:d6:52:52:a0:af:fc:d9:de:5b:5c:31:01:62:40:2a:e5:5e:
3d:b6:08:a0:65:b2:dd:b6:6f:44:49:9e:cc:0b:30:72:c0:d2:
f0:98:de:a0:d0:93:86:67:6b:b3:4c:c4:22:b8:04:b5:0b:2f:
82:f9:71:f7:8e:88:05:ff:d8:79:ec:f7:1a:51:40:f9:d8:c8:
c4:bf:d1:3f:86:7a:32:54:c8:a5:fb:82:b2:5b:5b:cc:f9:54:
d4:cc:7d:ea:05:f5:f9:91:60:6f:9b:ef:0b:74:3b:96:e2:71:
0d:4a:b0:aa:b8:7c:7e:08:af:04:51:dd:7c:d9:e3:ed:56:77:
8c:a1:35:f4:18:69:e1:cf:19:69:89:84:9e:e6:c9:57:c1:5f:
03:7d:f4:39:a3:42:d8:4b:50:e1:38:99:7f:08:d2:60:bc:22:
06:a6:3b:60:69:1f:8f:9c:78:82:86:2c:24:f4:ee:9b:e8:8e:
ab:01:84:9f:6c:13:9b:e0:9c:aa:f0:a5:31:f4:03:68:f4:40:
2c:49:6e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:05 2024 by rpki-client on console-ams.rpki-client.org