Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/skblTdIJjXZAoHz8-QCe3vwYlcM.roa
File: skblTdIJjXZAoHz8-QCe3vwYlcM.roa (raw, json)
Hash identifier: 5ylq2dXK2D7HK08pczLTlIFpRfwTWkbCgPm5S3xnfhI=
Subject key identifier: B2:46:E5:4D:D2:09:8D:76:40:A0:7C:FC:F9:00:9E:DE:FC:18:95:C3
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 018CC348FA2C9D6CEA9779A04DA9BF259628
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/skblTdIJjXZAoHz8-QCe3vwYlcM.roa
Signing time: Mon 01 Jan 2024 04:29:48 +0000
ROA not before: Mon 01 Jan 2024 04:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199159
IP address blocks: 217.146.6.0/24 maxlen: 24
217.146.7.0/24 maxlen: 24
185.2.176.0/24 maxlen: 24
2a05:8900:36::/48 maxlen: 48
2a05:8900:28::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 Feb 2024 21:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:fa:2c:9d:6c:ea:97:79:a0:4d:a9:bf:25:96:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 04:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b246e54dd2098d7640a07cfcf9009edefc1895c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:75:f7:ff:bb:b2:74:ba:4c:aa:64:f8:2a:17:
b0:7e:1a:82:e7:37:27:a1:63:ba:ed:c6:13:86:25:
0f:8a:e5:d2:c0:c5:62:39:de:c2:39:17:26:11:6d:
03:52:73:f9:82:30:0b:6f:ec:2a:06:9e:81:d6:12:
f7:72:c0:bc:88:22:3d:90:1d:52:6a:3a:9a:30:b9:
e2:56:72:ef:ab:1d:e0:41:42:1a:56:ed:1c:29:77:
53:9a:fc:e9:a5:65:8c:7a:96:0c:bb:b4:c7:fb:8a:
1c:37:bb:fb:2d:08:74:70:e4:14:b0:7b:3a:24:90:
02:0f:7b:1e:51:76:38:d9:81:70:83:aa:4b:d3:4d:
99:89:26:b3:b2:24:bc:63:8e:95:3d:3c:14:88:2a:
4e:2c:bd:92:3c:b0:6e:12:db:0d:4e:b3:ba:de:df:
ca:fe:4f:ff:c2:00:ff:fd:a7:01:8c:a7:0b:3b:de:
ab:02:74:91:32:8a:af:40:7b:a7:51:a6:47:f9:b0:
17:b6:36:8f:a8:e6:0f:39:3d:7a:81:6d:00:ad:7f:
a2:63:b4:b9:4d:fb:91:b7:32:8e:2f:b6:1a:28:09:
68:59:54:16:d4:4a:5c:59:d7:d5:75:85:7b:7a:09:
0d:26:b9:4c:86:41:f3:74:f7:d3:62:47:37:98:3e:
a7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:46:E5:4D:D2:09:8D:76:40:A0:7C:FC:F9:00:9E:DE:FC:18:95:C3
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/skblTdIJjXZAoHz8-QCe3vwYlcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.176.0/24
217.146.6.0/23
IPv6:
2a05:8900:28::/48
2a05:8900:36::/48
Signature Algorithm: sha256WithRSAEncryption
37:b1:3d:87:f6:8d:b2:90:e4:c2:0f:94:4d:5d:78:60:8c:35:
05:7a:85:bc:4a:b1:cb:84:cf:95:73:06:44:71:fb:87:64:cb:
25:ab:48:80:a6:13:5f:f4:2c:4f:0b:b1:bd:4b:47:bb:97:bd:
7d:b9:e2:d7:d1:4a:c2:d3:af:c5:db:91:3f:be:6d:e3:d6:37:
1a:fa:03:31:a2:e7:8b:b5:dd:a8:d1:a4:d3:3a:d5:93:32:17:
07:a5:47:0b:24:74:14:e1:d6:0f:f4:1c:9b:f4:9c:f8:4e:56:
ef:65:5c:0b:b7:4e:fd:4a:69:88:6e:bc:60:7a:15:be:53:4e:
fb:a5:18:ca:4f:5e:4a:dc:3d:2a:3d:54:a0:77:9d:ee:11:0e:
14:5f:fe:cb:8e:3a:c2:ea:59:f1:83:9f:81:5f:53:c6:fc:7b:
ea:b2:07:db:ed:75:3d:eb:d3:c1:42:b2:32:8c:ed:88:6a:9d:
3a:8c:c3:96:61:be:42:db:95:ca:36:90:f6:8d:fa:82:96:2c:
58:24:69:0f:45:0f:6f:e3:f9:75:e0:51:9e:12:b7:1f:2b:ef:
69:b9:55:58:31:cb:c7:6e:b5:ff:12:ec:19:9a:31:9f:5d:a2:
44:b8:c1:c2:25:21:49:5a:7f:c9:79:8b:6f:b9:9f:a2:4f:ea:
37:d9:67:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org