Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/skw51g9ycJDlUyItCKz6d_gg1jU.roa
File: skw51g9ycJDlUyItCKz6d_gg1jU.roa (raw, json)
Hash identifier: pPwYtv2t+VzLLGu7hI4pFbVSygrOTNOixaiKqpJXDdQ=
Subject key identifier: B2:4C:39:D6:0F:72:70:90:E5:53:22:2D:08:AC:FA:77:F8:20:D6:35
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 0190C00A3B73ABC4257380EF7F043D773FF3
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/skw51g9ycJDlUyItCKz6d_gg1jU.roa
Signing time: Wed 17 Jul 2024 09:33:34 +0000
ROA not before: Wed 17 Jul 2024 09:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210312
IP address blocks: 147.189.216.0/21 maxlen: 21
193.5.16.0/22 maxlen: 22
193.5.19.0/24 maxlen: 24
2a0d:3dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 06 Sep 2024 12:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:0a:3b:73:ab:c4:25:73:80:ef:7f:04:3d:77:3f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Jul 17 09:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b24c39d60f727090e553222d08acfa77f820d635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:1e:0d:25:89:3f:d2:22:ff:10:14:56:c4:
9a:16:c4:de:14:5a:27:a8:d8:da:65:2b:19:1b:8a:
0f:26:0c:d0:37:f1:78:76:bf:c5:f3:30:5b:ed:6a:
3e:da:93:91:b7:fc:30:7c:3b:b3:99:8f:8c:87:c9:
79:3c:b2:ab:9e:48:8c:b1:07:fa:58:25:b5:af:d5:
0a:14:e6:7a:3f:f9:4d:9d:91:b6:9c:32:2c:45:19:
66:e7:8f:0e:b2:ac:95:2f:52:fe:3e:86:eb:07:79:
8f:6a:82:78:8c:0f:46:6d:d9:e6:8a:5e:6b:ce:bd:
de:67:18:dd:dc:58:67:20:06:fc:81:fc:55:f7:58:
a1:53:6f:ae:91:77:8d:0a:2e:a5:81:74:45:83:84:
c7:32:25:d9:28:51:c3:28:d6:78:29:35:66:50:d9:
81:f8:87:74:5e:30:a8:1b:66:20:f5:99:b7:de:ee:
c8:65:47:a3:24:0a:94:0c:dd:6a:1c:0c:11:28:fb:
70:91:03:e0:71:33:e4:88:09:6f:1c:29:e3:d3:23:
be:a5:84:06:88:c1:b3:7d:98:36:ca:2e:ed:f0:2b:
7b:4a:c8:ef:99:58:11:6d:1f:b7:33:a4:1b:55:c6:
54:48:7d:74:6d:54:2d:da:97:9d:24:a5:9e:21:6c:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4C:39:D6:0F:72:70:90:E5:53:22:2D:08:AC:FA:77:F8:20:D6:35
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/skw51g9ycJDlUyItCKz6d_gg1jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.216.0/21
193.5.16.0/22
IPv6:
2a0d:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:d3:52:17:04:81:96:b3:72:bc:ea:45:58:90:f3:ea:c0:2e:
f1:46:14:69:cb:ce:00:a1:e5:ca:56:a9:04:27:3a:a1:d8:8b:
c5:73:1c:63:83:c9:86:42:75:a5:1c:00:71:ba:21:2c:7e:ae:
03:b0:fe:ce:e9:b1:47:52:a1:18:fb:3f:c7:de:c5:ec:5c:8e:
63:60:d6:8d:d3:ad:b6:0d:7b:c1:ae:63:c0:71:70:08:da:a7:
d8:4f:e8:a8:44:5d:fb:b5:94:06:e3:da:90:31:57:9f:b2:6d:
fb:93:d2:32:30:f3:9f:e1:d7:5d:c4:82:e2:eb:92:85:df:2a:
74:31:cb:e1:70:17:f8:73:bf:50:6c:20:ec:11:05:62:7f:db:
37:c1:69:3a:b3:2d:ce:fd:91:d6:13:91:24:92:f4:96:ab:01:
15:62:61:a6:f5:eb:30:59:e4:b1:fe:03:bf:78:59:a3:75:71:
d7:0b:da:64:9c:40:41:e2:ea:57:57:de:ad:6d:d2:c0:36:09:
ed:fb:d7:b9:03:56:40:bf:60:78:37:58:1e:c3:9b:d7:1b:32:
32:85:7a:c3:d2:3e:2d:d2:41:a0:20:f6:66:5b:eb:04:df:37:
65:6e:2e:e4:7d:fd:f2:65:60:06:82:57:3b:fe:e7:05:9b:1f:
cc:8a:01:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 15:05:26 2024 by rpki-client on console-ams.rpki-client.org