Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/SL4n_mklTPUhB4h0PKFetDcuD_4.roa
File: SL4n_mklTPUhB4h0PKFetDcuD_4.roa (raw, json)
Hash identifier: kFnGdHr6zyhKSZaGnQ2A4dIRb3mhRMl5eCphNEduj/Y=
Subject key identifier: 48:BE:27:FE:69:25:4C:F5:21:07:88:74:3C:A1:5E:B4:37:2E:0F:FE
Certificate issuer: /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial: 018A0400534EE3120A775D2D171F82082C4F
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/SL4n_mklTPUhB4h0PKFetDcuD_4.roa
Signing time: Thu 17 Aug 2023 14:57:24 +0000
ROA not before: Thu 17 Aug 2023 14:57:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.26.14.0/24 maxlen: 24
193.26.22.0/24 maxlen: 24
193.26.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Dec 2023 23:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:04:00:53:4e:e3:12:0a:77:5d:2d:17:1f:82:08:2c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Validity
Not Before: Aug 17 14:57:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48be27fe69254cf5210788743ca15eb4372e0ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dd:17:94:7d:c1:c4:ff:05:21:7f:a0:2f:5b:
c7:86:31:00:72:68:7a:92:41:94:d6:f6:14:eb:d2:
bb:71:90:1d:28:d4:b2:67:bc:9f:62:d9:dc:60:c3:
13:3d:e7:7d:b0:72:98:d3:e4:a3:06:1e:dd:44:49:
13:93:dc:db:78:f4:31:20:ed:d3:2b:e4:98:40:9f:
86:ad:75:7a:c9:05:b9:6e:3d:49:3c:d7:ae:94:12:
13:31:c7:42:b4:b6:08:36:30:4e:d9:50:a0:64:7b:
18:d0:5e:6b:49:ea:c8:41:08:7a:4d:38:ae:f9:e1:
ea:e2:24:7f:83:a0:65:5d:ea:ae:7f:da:76:49:85:
ec:49:66:88:53:00:3c:3c:47:bb:6a:4d:08:52:7f:
89:e2:5b:19:1f:35:5a:0d:dc:96:95:3b:db:2e:0e:
c2:bc:6d:d2:e9:77:f6:00:55:e0:90:88:d4:9b:29:
f7:b3:38:e7:76:a8:64:59:0f:b5:62:06:8d:3a:16:
70:24:60:81:81:bd:84:fa:be:c4:ea:4f:96:4a:22:
48:9d:66:83:ca:ff:16:74:49:e3:ad:ea:3e:3a:79:
bb:ec:8c:87:36:2e:66:60:1d:09:37:eb:1f:3f:7a:
47:0d:24:52:1f:fb:7b:5f:8b:c0:0a:7d:00:8f:ca:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BE:27:FE:69:25:4C:F5:21:07:88:74:3C:A1:5E:B4:37:2E:0F:FE
X509v3 Authority Key Identifier:
keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/SL4n_mklTPUhB4h0PKFetDcuD_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.14.0/24
193.26.21.0-193.26.22.255
Signature Algorithm: sha256WithRSAEncryption
a1:0d:4e:3d:29:39:de:00:15:f4:30:1f:d0:bb:35:b9:73:d0:
53:1f:58:7b:cc:44:ef:a9:e3:b3:d2:0f:cb:9c:56:3f:81:0a:
44:65:1c:50:07:2b:81:d5:d5:a9:5a:42:dd:aa:19:98:5a:7a:
09:86:5e:ac:c3:29:d9:b3:2d:c0:4f:ea:69:71:42:d1:3c:44:
b0:49:b8:05:41:14:ab:0f:1c:aa:cf:9f:12:74:65:81:1d:41:
d5:eb:38:8d:e3:a0:19:ff:97:54:e9:d6:38:a9:c6:31:33:c9:
6c:cc:0c:f6:dd:24:eb:ef:c9:93:a0:2a:73:f6:89:d8:6e:99:
78:2e:7c:68:d9:bb:51:59:2d:f5:ad:15:01:f8:92:49:2d:ab:
08:cf:54:7e:00:f0:eb:1f:1e:22:d4:66:89:d0:9b:37:c5:ab:
b4:8d:ac:66:cb:f0:e9:67:7b:a1:03:c5:c1:85:77:18:45:56:
f5:cf:c8:13:c5:13:c2:46:58:3c:e6:41:c9:e7:18:d6:58:2a:
d4:b2:47:00:8a:a7:26:ad:0f:e3:e0:40:6e:51:84:39:6f:a1:
cb:7d:f4:46:5f:91:d9:0e:15:6f:fd:fc:7d:f1:fe:79:3b:20:
4e:bd:73:fc:b9:7c:bb:ad:8d:39:75:fc:60:bc:2b:bf:7b:fa:
dd:cf:7d:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:12 2024 by rpki-client on console-ams.rpki-client.org