Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/CmnGsWm21s43K3PcCypyJ05ZlYY.roa
File: CmnGsWm21s43K3PcCypyJ05ZlYY.roa (raw, json)
Hash identifier: UgLujrhjVEeLoFtFD51ddbmDNif6s7kJAr68bN8jIXI=
Subject key identifier: 0A:69:C6:B1:69:B6:D6:CE:37:2B:73:DC:0B:2A:72:27:4E:59:95:86
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 018C05BCB24C3565FF4AF8B7962C4388D78B
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/CmnGsWm21s43K3PcCypyJ05ZlYY.roa
Signing time: Sat 25 Nov 2023 09:08:21 +0000
ROA not before: Sat 25 Nov 2023 09:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 5.249.184.0/22 maxlen: 24
5.249.180.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:05:bc:b2:4c:35:65:ff:4a:f8:b7:96:2c:43:88:d7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Nov 25 09:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a69c6b169b6d6ce372b73dc0b2a72274e599586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:94:d1:91:8a:23:13:fb:c5:84:6f:21:76:
60:b0:91:66:b0:50:7c:69:46:04:16:00:79:71:4c:
d3:72:aa:fe:45:92:ad:30:36:c5:4c:9b:15:af:35:
5c:3f:0f:4c:65:8b:99:be:66:70:e7:08:30:36:c5:
03:23:7d:ae:98:bb:8a:c4:25:7e:9e:cd:89:34:c9:
3b:0f:32:be:fc:22:89:93:26:a2:d8:7f:f1:b4:c4:
5b:21:33:03:cf:b4:bc:c9:d5:e3:49:7b:43:74:09:
2a:63:c0:9c:44:c4:e6:da:a6:90:f4:ca:17:9f:33:
20:82:db:f1:c8:85:56:3f:40:cf:9b:a5:1a:db:7b:
58:77:e7:4e:b0:9d:be:b6:4e:04:22:75:2f:92:5a:
09:e5:96:4d:77:7e:9f:d8:75:fa:1f:6c:5d:a4:a8:
9a:81:ab:be:90:d6:bc:ea:a9:ae:c4:32:e8:02:6e:
96:f1:da:61:15:a4:ae:24:9c:b7:ec:64:6c:35:d5:
b7:06:5f:b7:31:63:13:42:92:35:52:38:29:a1:66:
f1:07:8c:cd:95:c5:09:32:ba:40:de:d7:2b:81:d0:
ec:8f:c6:58:54:74:3f:77:f3:fd:13:c7:81:6a:5e:
90:c0:00:32:05:a0:90:3c:7f:ad:dd:0b:fd:2b:ea:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:69:C6:B1:69:B6:D6:CE:37:2B:73:DC:0B:2A:72:27:4E:59:95:86
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/CmnGsWm21s43K3PcCypyJ05ZlYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.180.0-5.249.187.255
Signature Algorithm: sha256WithRSAEncryption
55:f7:29:6b:1c:b0:0b:28:fc:3a:b1:41:b9:a2:39:28:f2:10:
34:c5:dd:6f:22:00:c3:a4:aa:29:3f:ce:fa:dc:e0:d5:2c:0b:
25:fb:9a:a6:bb:a7:e0:69:e8:05:de:d6:a5:09:47:1d:bd:f8:
42:14:a0:0e:3d:84:f6:b8:99:63:62:38:eb:3d:d5:08:50:62:
c9:38:32:7b:9f:71:bc:49:68:da:d3:45:bb:9d:46:9d:12:c7:
2f:30:a3:b0:39:1f:05:8b:39:6e:37:73:90:b8:92:e9:f6:66:
de:3b:5c:88:7f:d6:48:bf:14:a2:ca:5f:69:e8:3d:ac:a1:45:
cf:c2:d0:e4:47:13:9c:71:23:f7:19:64:ab:d7:b4:54:08:d2:
09:bf:d8:ee:8f:75:e3:ba:8d:e6:2f:fa:05:29:cb:32:8d:7d:
72:b0:6a:19:48:7e:db:83:ec:1b:33:ae:79:d8:be:28:5b:e2:
60:f1:a1:b6:e4:45:36:e4:65:92:24:b7:26:1b:5d:77:88:24:
12:8f:db:a2:cf:26:2d:d6:e3:f0:19:10:a5:4e:e4:c0:13:df:
6b:3b:f3:de:39:ec:7c:ac:ef:cb:7e:c9:18:77:56:57:27:6b:
7a:99:83:98:cb:8f:8e:69:0c:24:3e:a3:72:7c:9c:cd:78:a6:
8c:0e:b1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:34 2024 by rpki-client on console-ams.rpki-client.org