Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SkgtVcdBj-7Il97Oswnw4P42T_k.roa
File: SkgtVcdBj-7Il97Oswnw4P42T_k.roa (raw, json)
Hash identifier: Q632y3twwJk6Ei1SJZqJgRXAksYB6v1dWOA1lxTOoHs=
Subject key identifier: 4A:48:2D:55:C7:41:8F:EE:C8:97:DE:CE:B3:09:F0:E0:FE:36:4F:F9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188B0F283A1AC56371424CA7FCBFCEC4EC6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SkgtVcdBj-7Il97Oswnw4P42T_k.roa
Signing time: Mon 12 Jun 2023 18:51:03 +0000
ROA not before: Mon 12 Jun 2023 18:51:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 188.213.0.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Jun 2023 08:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:f2:83:a1:ac:56:37:14:24:ca:7f:cb:fc:ec:4e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 12 18:51:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a482d55c7418feec897deceb309f0e0fe364ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:c6:2b:b9:b4:91:1c:00:6d:82:59:4f:74:
fb:f7:29:27:22:d9:f2:32:3c:d4:3d:23:2d:da:61:
bc:c6:56:a4:55:c6:c2:8e:2b:ef:b7:55:fe:ea:1c:
63:96:12:ed:26:cd:91:fd:83:aa:a2:47:70:6c:89:
7d:14:6e:50:c5:95:df:f9:06:5d:86:81:6c:fb:ab:
1d:46:9c:19:3a:b8:5f:42:79:a8:02:b3:cf:23:87:
55:c7:3d:c8:9a:fb:b5:74:ee:37:88:6a:9a:5d:96:
6b:93:1b:7b:95:2f:f8:bb:4e:48:0d:d1:fe:dc:4e:
02:38:e0:b4:50:31:0f:07:75:14:13:72:c7:a6:e1:
b7:0b:45:66:7f:2c:04:8e:1b:86:18:13:b7:89:f4:
56:96:3b:2a:7c:12:9e:2e:85:db:52:9f:43:7b:c5:
42:85:40:b1:5b:b4:51:70:89:da:96:c9:f7:f2:85:
b6:19:bf:37:41:fb:e8:8b:12:cb:ff:ea:a3:22:6a:
20:c5:d4:0b:a2:6e:4a:83:5f:47:50:60:8e:26:05:
49:05:66:12:e7:39:b5:73:8d:2e:11:94:5c:82:1c:
16:8b:0a:94:a2:69:14:11:85:e8:ce:a4:9c:cb:ff:
4c:88:d2:b9:3c:4b:0e:e2:5c:cb:49:fd:38:ce:2b:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:48:2D:55:C7:41:8F:EE:C8:97:DE:CE:B3:09:F0:E0:FE:36:4F:F9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SkgtVcdBj-7Il97Oswnw4P42T_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
188.213.0.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
68:20:69:7e:1f:eb:b6:da:91:08:39:07:b4:10:96:32:56:d6:
26:52:a0:e7:3b:0d:bc:a9:c2:5e:87:e8:5e:6e:e4:ea:6b:4f:
70:9e:7e:54:fd:72:69:d8:7d:68:34:8e:5c:bb:94:24:bd:8a:
cd:a0:77:62:a5:e6:74:71:d8:5a:2e:4a:90:fb:3b:9b:98:cb:
bd:ca:95:77:a1:88:10:78:be:7f:4b:e2:5e:bc:24:67:4e:9f:
1f:2f:61:b5:00:5c:ae:bc:fa:93:da:fc:57:5a:97:d1:1e:06:
3e:d0:e6:e5:9f:8e:3c:39:97:10:36:98:ca:08:a9:7e:40:c6:
b8:cb:27:02:95:35:c5:ca:63:92:61:12:86:b6:5b:35:d8:4b:
1d:01:f4:5f:c5:ed:09:95:30:70:b8:5c:70:55:e3:36:09:21:
3f:1b:63:ab:7f:65:d4:4f:25:b3:48:59:97:e2:d7:f6:d4:2a:
03:a5:e2:aa:58:6d:6f:7a:ba:ab:6f:6f:1c:ad:c0:13:5b:02:
9a:19:dc:98:9d:96:6e:5f:1c:06:31:0e:48:19:6e:56:6b:85:
f5:da:de:28:18:fd:53:d9:ed:2b:35:98:3a:55:2d:9b:52:5e:
c2:95:dc:70:05:64:bb:39:a5:25:b0:4e:61:0e:53:8e:91:54:
84:de:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org