Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/LEMHKBxzmFtEXMfQ1uKlOq1pqpY.roa
File: LEMHKBxzmFtEXMfQ1uKlOq1pqpY.roa (raw, json)
Hash identifier: p87jN57FB0n6Wvo105C3V4awNx63KwR9vLCqRbQc7/A=
Subject key identifier: 2C:43:07:28:1C:73:98:5B:44:5C:C7:D0:D6:E2:A5:3A:AD:69:AA:96
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 01856C5CBFF70865AD658A5E27295BB7C8B8
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/LEMHKBxzmFtEXMfQ1uKlOq1pqpY.roa
Signing time: Sun 01 Jan 2023 08:04:55 +0000
ROA not before: Sun 01 Jan 2023 08:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397242
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:bf:f7:08:65:ad:65:8a:5e:27:29:5b:b7:c8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 08:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c4307281c73985b445cc7d0d6e2a53aad69aa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:fb:51:ee:e4:98:66:b7:ce:2e:04:05:0b:
cd:b1:e0:d7:94:c3:ac:43:ec:cf:69:d3:f8:d1:47:
c9:39:46:be:8a:5f:76:07:51:2f:b4:9e:00:3e:96:
8e:ad:23:91:9c:ed:a1:a0:05:a6:7b:1a:e9:3c:c5:
75:f1:08:32:77:e5:23:35:38:c0:1f:6f:9d:d7:e4:
f2:3e:2a:8b:0d:06:17:c5:3c:f5:09:82:05:93:7f:
13:1e:5c:a5:c0:1b:40:02:aa:f7:a4:34:58:2d:ca:
bf:09:2f:23:5e:46:65:24:dd:ea:6f:23:7f:3e:1a:
65:fc:cb:bd:80:8b:43:7a:5d:b4:6a:5c:ec:fb:1d:
13:82:42:c3:78:06:bf:3d:0b:f2:03:8d:a7:a8:16:
35:48:75:68:cc:c9:eb:26:e9:67:a4:57:61:9e:82:
0b:d5:7b:72:7e:a5:b9:21:17:a3:2b:69:df:af:77:
d5:fb:95:9b:9d:b8:42:7c:d7:99:a9:96:c4:e7:75:
b6:0f:7d:5d:6e:d6:0e:70:17:9c:17:12:52:5a:48:
af:2a:1b:cb:25:23:ba:2b:26:5a:e0:16:c7:d2:9e:
4b:8c:dc:71:c4:19:9f:1e:b0:8c:e9:e3:c8:ea:29:
41:f2:05:5d:51:c0:2c:1e:c6:ff:96:e5:85:bf:4c:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:43:07:28:1C:73:98:5B:44:5C:C7:D0:D6:E2:A5:3A:AD:69:AA:96
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/LEMHKBxzmFtEXMfQ1uKlOq1pqpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
49:cd:56:64:8c:d3:73:bc:03:f5:79:fa:a8:c8:e8:1c:b9:a5:
a9:68:cc:6c:bf:ec:f8:96:59:94:72:ae:c4:ab:69:a6:13:0a:
eb:f6:ba:17:3c:f9:ff:ea:b9:1b:55:38:2c:0a:0e:ff:96:dd:
0a:cc:21:ca:ec:58:6d:1b:bb:28:b8:7d:f3:b6:76:1c:7a:41:
1d:3f:ae:76:30:86:51:32:6f:a5:6c:a5:7e:5c:fc:6e:7a:00:
5a:3c:36:51:44:44:31:19:4d:a4:c3:0a:62:22:95:48:3f:2d:
6d:b6:fe:d4:07:13:97:63:5f:7a:12:03:b6:98:66:81:1a:60:
f1:b2:a3:89:d2:ad:92:a0:a3:cc:0b:6e:a8:2c:fc:67:85:cd:
99:ac:ca:3a:fc:80:3a:63:5c:69:56:20:c7:a3:b0:b3:21:5b:
88:bc:d0:bd:ba:43:c4:98:f0:e4:67:f1:c5:0c:f0:45:26:01:
60:3d:14:da:64:c8:09:6f:76:f3:f9:d0:7c:56:05:49:23:c8:
da:30:bd:56:e7:00:6f:b0:f8:74:87:51:00:5f:37:ba:45:79:
8e:30:ee:96:1d:e4:5f:8e:48:96:8c:0c:ec:ee:40:f9:2e:f4:
07:4f:38:b6:fe:65:0f:ee:20:e7:95:5d:fc:34:c8:6c:ca:56:
02:02:50:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:08 2024 by rpki-client on console-ams.rpki-client.org