Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/EVeKyvpvma2Y5v3Lku90ipudSpY.roa
File: EVeKyvpvma2Y5v3Lku90ipudSpY.roa (raw, json)
Hash identifier: urrnK1mYs5EyEjQDTeMM5Z0eNuOBgKYovlN95jgPD8Q=
Subject key identifier: 11:57:8A:CA:FA:6F:99:AD:98:E6:FD:CB:92:EF:74:8A:9B:9D:4A:96
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 018EF533F2094ACA0C22B549F467C1BFF305
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/EVeKyvpvma2Y5v3Lku90ipudSpY.roa
Signing time: Fri 19 Apr 2024 07:13:25 +0000
ROA not before: Fri 19 Apr 2024 07:13:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.249.184.0/22 maxlen: 24
195.95.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Apr 2024 18:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:33:f2:09:4a:ca:0c:22:b5:49:f4:67:c1:bf:f3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Apr 19 07:13:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11578acafa6f99ad98e6fdcb92ef748a9b9d4a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:b1:a8:91:b8:f6:15:bd:d6:b5:9d:c7:f9:
6a:69:11:f4:f1:d5:f1:5a:20:7e:09:43:6f:fb:af:
99:00:81:4a:87:8f:e4:d0:84:b3:76:ce:d7:ae:43:
15:08:94:de:5a:64:2f:a5:b0:ff:95:58:60:ba:ee:
9a:a4:3a:90:d3:39:7d:31:6a:4b:f3:cc:8b:94:c2:
7e:df:93:f2:0e:e6:c5:3d:3a:17:92:66:1c:fc:55:
67:56:f5:89:d9:69:39:49:7c:cb:07:8f:89:1b:f6:
68:8b:5a:46:95:4d:8d:7a:82:c3:33:b3:e3:e3:ea:
ef:1e:0d:ef:82:7a:fd:20:b0:29:15:1f:71:de:66:
8a:8c:fa:f9:19:65:d4:96:b3:0a:98:be:0e:fe:05:
6a:78:5b:49:43:0a:1c:17:32:7f:a6:ab:47:ec:a2:
5a:c3:97:e0:4a:8e:8c:44:35:e7:ae:6c:c6:c6:78:
f9:2b:77:49:6c:ce:b0:9a:2a:cc:47:00:0b:2c:a2:
80:71:46:38:8e:ca:8e:d1:1c:4a:86:3b:2c:d1:f2:
d8:8d:a5:30:b1:58:b6:94:1f:34:6b:c6:4c:80:7b:
63:34:02:f7:f2:11:2c:e7:ba:01:8e:4e:c9:f8:d8:
9b:6e:3f:d7:88:6f:89:2c:4f:8d:5c:0c:4c:e1:5a:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:57:8A:CA:FA:6F:99:AD:98:E6:FD:CB:92:EF:74:8A:9B:9D:4A:96
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/EVeKyvpvma2Y5v3Lku90ipudSpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.184.0/22
195.95.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e1:6d:ee:d5:ea:be:b3:d2:13:a1:b3:7d:ab:3a:5c:96:49:
c6:70:ab:0b:49:6d:ea:c6:4c:8f:4c:4c:79:c3:c2:f6:d0:83:
d2:78:2d:fa:cf:7e:82:77:ed:4c:e8:15:8b:f6:4f:5a:bd:98:
50:31:21:95:6c:be:53:bf:16:f2:2d:de:e4:51:a2:ca:cd:8f:
82:94:ab:95:14:aa:a7:68:fd:12:7d:99:99:52:06:8d:68:6f:
84:de:a7:fb:cc:a8:e1:d6:e2:18:4b:34:ab:22:cd:fd:d6:af:
e6:38:8d:55:52:1d:89:fb:60:a5:da:ec:bf:2f:57:56:60:bd:
19:be:9d:06:db:eb:84:57:53:67:b8:b3:1c:ba:6b:ac:64:04:
72:cf:8c:c8:48:fd:7d:a0:21:7b:db:2e:f4:b3:d8:f7:50:87:
55:c1:f7:97:0f:a8:44:c2:62:c4:be:1a:48:bd:34:11:ac:2f:
fc:5c:b6:8d:8e:13:b5:f3:b3:bf:f7:77:ed:76:25:fc:99:4e:
25:e3:b1:47:f9:46:7b:8d:94:c7:50:41:f1:c8:d7:fe:6c:b2:
49:af:82:31:29:c0:08:36:64:2d:4a:81:e7:73:4e:fa:de:ae:
de:4b:96:58:0a:fc:9f:3c:28:0b:f9:ab:99:32:3b:64:ea:0c:
73:52:5d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 22:12:09 2024 by rpki-client on console-ams.rpki-client.org