Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/0C_IaRa71ehRAbbZleb1wYlZ3KU.roa
File: 0C_IaRa71ehRAbbZleb1wYlZ3KU.roa (raw, json)
Hash identifier: i+LFKcJ+gX1dAL7LONrhcXuPqC/CfKYZ9EI1p2y8v8g=
Subject key identifier: D0:2F:C8:69:16:BB:D5:E8:51:01:B6:D9:95:E6:F5:C1:89:59:DC:A5
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 018986C8150AF886E0F325CF6CF016617E2E
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/0C_IaRa71ehRAbbZleb1wYlZ3KU.roa
Signing time: Mon 24 Jul 2023 07:23:26 +0000
ROA not before: Mon 24 Jul 2023 07:23:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.19.68.0/22 maxlen: 22
5.249.184.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:86:c8:15:0a:f8:86:e0:f3:25:cf:6c:f0:16:61:7e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jul 24 07:23:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d02fc86916bbd5e85101b6d995e6f5c18959dca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:59:e5:98:bb:f7:75:b9:ca:d0:00:c8:ff:
9e:a0:11:36:f5:52:92:f7:a3:4b:9f:de:52:e8:4a:
a1:fb:c0:90:7a:22:fb:92:12:62:95:d3:a2:91:c6:
ce:4d:24:e4:cc:ab:68:66:17:34:37:26:00:7c:9d:
6d:e2:52:2a:88:ef:b7:0f:b0:f1:b5:7a:33:97:55:
b6:5e:11:77:ad:f4:64:6f:36:8e:9e:59:f3:37:53:
38:32:3e:54:f7:0c:77:6a:1f:90:40:6a:8a:8f:c9:
5e:1b:82:77:74:d1:52:71:4f:82:bb:07:9a:73:09:
57:51:41:c2:0a:96:d9:95:64:a0:89:d4:4f:12:3b:
e2:93:61:f6:9d:0e:9b:8b:3f:a2:af:fa:3a:ac:77:
54:11:de:71:9b:32:76:fb:26:2e:3e:30:42:14:22:
73:e1:1f:35:3c:60:14:32:02:67:95:d1:14:d8:00:
9f:f3:ab:5f:dd:87:0c:b6:f7:e8:b5:de:80:e1:b5:
84:d9:0b:b7:56:47:6d:0c:da:ae:a8:0c:2e:ae:59:
40:4c:eb:5b:34:3e:b1:18:26:28:3d:26:73:cd:67:
06:c2:f9:4f:c0:60:6d:3d:16:d9:f9:89:a6:e3:63:
e4:f0:01:a5:97:4a:ed:61:09:b8:c0:67:1a:e6:a5:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2F:C8:69:16:BB:D5:E8:51:01:B6:D9:95:E6:F5:C1:89:59:DC:A5
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/0C_IaRa71ehRAbbZleb1wYlZ3KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.184.0/22
37.19.68.0/22
Signature Algorithm: sha256WithRSAEncryption
79:41:13:5b:e1:e8:fa:65:d4:e3:02:05:90:47:67:9c:92:7c:
6c:b7:69:7f:29:dc:21:17:1b:83:94:e6:e7:80:dd:41:ac:f3:
de:b8:af:81:a1:74:92:e1:56:8c:c2:6f:24:33:61:53:2c:d1:
3b:8b:9d:2d:e8:85:a4:67:f9:11:8b:91:29:50:6f:42:d4:04:
58:8b:77:46:27:af:04:e0:e8:57:2e:b6:89:0c:2f:19:95:19:
63:7f:af:e6:63:94:bd:5d:12:42:44:08:c2:35:4a:7c:fa:e3:
03:5f:d4:75:3b:0e:51:83:9d:e8:71:b9:73:62:96:f9:09:c7:
46:09:be:88:14:88:1c:76:36:43:60:f9:d4:4d:03:a0:dd:b7:
e9:bf:f3:85:0c:f1:df:3b:d8:df:4b:d7:6d:16:7d:6a:d5:da:
49:44:b2:03:fd:b4:b6:98:db:e5:94:11:6f:b3:9f:be:d1:84:
44:13:02:67:a2:ff:6f:77:40:56:6c:49:19:b7:83:3a:ba:52:
a7:1b:10:b2:e7:81:58:cd:c3:63:ba:89:17:3f:9d:c3:7c:61:
d6:47:9f:e0:b1:1c:df:9a:e4:a3:30:08:c3:10:64:9f:85:77:
a7:16:0c:68:c3:17:6e:c7:f9:85:ff:04:39:2a:26:ee:0c:1a:
3c:93:35:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 23:39:58 2023 by rpki-client on console-ams.rpki-client.org