Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/skM_wvaWZkEZ-8EoibXfrvDUQlg.roa
File: skM_wvaWZkEZ-8EoibXfrvDUQlg.roa (raw, json)
Hash identifier: Vno51O2NAj2ygEtpqMAmzDlyQxwFcc56jfES4LeHqso=
Subject key identifier: B2:43:3F:C2:F6:96:66:41:19:FB:C1:28:89:B5:DF:AE:F0:D4:42:58
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01857355D602FD30E9C13624A51B6A12432F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/skM_wvaWZkEZ-8EoibXfrvDUQlg.roa
Signing time: Mon 02 Jan 2023 16:34:43 +0000
ROA not before: Mon 02 Jan 2023 16:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3291
IP address blocks: 194.158.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:55:d6:02:fd:30:e9:c1:36:24:a5:1b:6a:12:43:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 16:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2433fc2f696664119fbc12889b5dfaef0d44258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:a4:60:a3:11:12:8b:ca:fa:3d:c6:10:0a:
b0:04:79:b5:17:83:e0:ce:6e:43:49:50:98:fe:c3:
8c:a5:7b:b2:fa:8d:f8:19:6c:10:d3:17:03:47:34:
d9:2d:b6:68:4a:ae:4e:ab:e4:01:86:2e:74:5d:6e:
f4:8a:0e:74:95:af:82:92:80:6b:74:8e:17:4b:d3:
35:f4:b6:9b:68:0a:ff:7a:4c:74:89:63:0f:36:ba:
cc:66:b0:ae:10:44:21:be:88:b1:75:25:a7:1e:de:
3a:2c:f1:4d:fd:f9:48:a0:48:69:27:ba:cb:26:f0:
6d:63:66:cc:32:f8:e7:02:e7:ab:f3:9e:c0:0a:67:
1e:ee:ce:1e:00:7d:46:09:d2:ce:40:d9:ab:04:54:
b3:a2:53:bf:42:9e:1e:6e:2c:db:0d:65:e7:18:e5:
96:85:ca:ef:78:36:5c:4a:13:31:4b:31:7f:32:2b:
e7:16:34:50:99:85:46:79:f5:c1:d9:96:e2:ca:09:
cc:48:5f:59:6b:5d:d0:87:61:0d:a5:5d:2a:77:32:
19:4f:14:f7:d8:ac:8f:fb:de:cd:ba:7f:fe:bc:a8:
c5:bc:bb:24:d3:11:ce:fb:b3:9b:c4:3a:e6:ed:f0:
ec:57:cf:92:46:ff:81:03:39:44:8c:6f:2e:6f:42:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:43:3F:C2:F6:96:66:41:19:FB:C1:28:89:B5:DF:AE:F0:D4:42:58
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/skM_wvaWZkEZ-8EoibXfrvDUQlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.158.26.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:67:46:60:32:61:4e:55:f1:1c:3d:6b:91:af:62:91:ed:d3:
da:4a:24:0e:da:f9:f5:a2:a7:8f:ad:a8:2c:91:41:8a:2b:76:
f0:89:aa:c4:b0:38:65:c9:16:84:02:4e:df:19:df:a8:7f:4a:
5c:54:c4:a6:c7:50:d7:6f:1f:2c:56:27:03:bb:83:38:6a:87:
b3:3d:92:8c:0f:5f:ac:37:ce:ac:df:37:15:9e:e7:db:78:c5:
2a:e9:4d:4a:2d:95:b8:25:e7:26:2c:be:22:59:84:4b:92:e8:
93:30:c2:53:f5:7d:cc:eb:e2:6a:99:5e:0c:25:68:08:03:93:
e6:cf:8b:db:58:d5:b3:6e:b8:60:b0:b4:df:2f:2f:02:43:ba:
6b:c9:b1:b8:63:3a:8f:bd:09:d1:3a:ef:45:c2:c3:33:1c:d2:
8a:87:68:e6:1c:1f:ae:5f:b2:10:1a:91:23:98:a7:6e:42:8f:
57:e0:1a:65:fd:ad:d2:ae:f4:a6:93:f3:e5:59:f3:d4:19:75:
6b:70:ac:25:00:31:db:f7:23:d2:c9:34:a1:cf:43:e4:92:80:
71:0a:04:37:a4:e4:b6:a5:ba:d8:4f:e8:e5:95:a2:6f:30:f5:
96:c3:f5:7f:6d:d1:87:a9:09:dd:02:5e:ba:75:7a:84:8f:4f:
66:5d:c5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:24 2024 by rpki-client on console-fra.rpki-client.org