Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/ABcnhJgScTXiFr11OckFv_IPl1k.roa
File: ABcnhJgScTXiFr11OckFv_IPl1k.roa (raw, json)
Hash identifier: 9wNEa8iEiSc42bKRgIuKa5Cej6o+1z7YV47/ztEzlBk=
Subject key identifier: 00:17:27:84:98:12:71:35:E2:16:BD:75:39:C9:05:BF:F2:0F:97:59
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 01856BC116ED5A8BAEE7A44302E38183EBEF
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/ABcnhJgScTXiFr11OckFv_IPl1k.roa
Signing time: Sun 01 Jan 2023 05:14:54 +0000
ROA not before: Sun 01 Jan 2023 05:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 37.19.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 09 Apr 2023 08:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:16:ed:5a:8b:ae:e7:a4:43:02:e3:81:83:eb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jan 1 05:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0017278498127135e216bd7539c905bff20f9759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c3:3c:6c:b6:59:76:8c:a0:04:96:2d:6b:3a:
c7:cd:68:a3:63:4f:99:fd:ca:84:46:cf:5f:20:84:
b3:a9:20:9b:7e:59:e6:2b:b6:6b:60:d5:77:c8:19:
ed:31:fb:64:5f:2c:d9:57:8f:bf:87:1a:5f:f9:05:
1e:3c:30:68:b0:fd:9f:b7:69:8c:8f:d6:ce:79:db:
b2:e7:f2:3b:39:29:e0:e0:41:55:82:d7:4b:5d:41:
db:5d:05:d1:eb:20:86:3d:61:e1:01:f6:72:0d:63:
45:80:7b:e2:1e:65:be:18:6f:00:6d:08:fb:6d:cf:
ed:16:69:01:c9:0b:93:7c:aa:a0:06:f8:f0:fb:1a:
0b:e7:62:ab:8c:b9:3b:64:0a:bc:0f:38:c0:d4:d7:
01:43:29:38:02:9d:13:b1:c7:41:e8:ef:48:b0:43:
e5:78:92:21:1a:43:fe:1e:9a:0c:a7:84:a9:1b:9f:
1c:f9:ca:73:d1:8c:21:37:9c:e9:e8:2f:0d:8f:8e:
bf:6b:ca:4f:c1:ec:64:2a:f3:ff:6b:ae:5e:6d:c5:
c8:85:2d:1c:30:22:08:49:8d:70:ba:a4:0c:c1:f6:
32:c5:8b:d0:ed:d4:28:a6:e9:c7:62:16:67:1d:48:
be:18:bd:a6:6f:2d:71:35:e8:0e:5d:26:80:60:85:
fd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:17:27:84:98:12:71:35:E2:16:BD:75:39:C9:05:BF:F2:0F:97:59
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/ABcnhJgScTXiFr11OckFv_IPl1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:43:1a:e8:e2:dc:55:df:c4:23:aa:93:86:6c:db:f6:21:9e:
e0:fd:ea:7a:a7:e9:83:cf:83:d1:ba:6a:78:76:36:d9:52:37:
2b:b7:eb:75:a2:d9:d8:62:24:96:3d:df:ab:ca:af:ec:29:9f:
b3:fc:12:22:9d:12:7d:dd:41:11:b8:39:c1:ed:bf:e6:32:46:
c4:45:1e:bd:28:af:af:40:78:ac:93:5e:b0:19:45:f6:e3:c0:
49:03:a4:63:1e:8d:90:7c:15:50:38:80:b6:f2:9f:96:65:d3:
46:df:f7:2e:3e:68:a7:fc:e6:50:36:51:c3:1f:e0:8d:3f:55:
5c:46:99:d9:04:36:16:89:8e:59:46:d4:b9:91:8f:3b:ac:d4:
1f:18:98:fe:5d:63:09:48:5d:53:be:c7:bc:0f:16:a6:9b:f9:
d1:4c:9f:6c:3e:9d:5c:cb:ac:56:5a:ae:4a:29:2e:41:1f:8d:
6a:c1:8e:38:f3:d6:91:0f:34:3d:74:1e:b8:73:08:f6:f5:77:
8b:51:79:18:cc:1b:8a:0e:3c:2d:68:e4:2b:fe:68:72:d8:d1:
7b:3f:5c:b6:b7:68:06:e2:07:39:17:99:9e:b1:76:74:a6:35:
d4:7d:88:6f:8b:3e:14:88:e4:43:22:66:c4:48:2a:a9:dc:f8:
1f:e6:b6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:09 2024 by rpki-client on console-ams.rpki-client.org