Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/I6yJnMqNggItWE9iX_iprXD0U9A.roa
File: I6yJnMqNggItWE9iX_iprXD0U9A.roa (raw, json)
Hash identifier: SW8dKvsYSLey5rYbmqksnlDLcgY+H2/Xf/ukpiTfEfQ=
Subject key identifier: 23:AC:89:9C:CA:8D:82:02:2D:58:4F:62:5F:F8:A9:AD:70:F4:53:D0
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 018A0843A42745ED2E4DCF4B239074084285
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/I6yJnMqNggItWE9iX_iprXD0U9A.roa
Signing time: Fri 18 Aug 2023 10:49:25 +0000
ROA not before: Fri 18 Aug 2023 10:49:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 5.249.188.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:43:a4:27:45:ed:2e:4d:cf:4b:23:90:74:08:42:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Aug 18 10:49:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23ac899cca8d82022d584f625ff8a9ad70f453d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:d4:f2:11:86:9d:2d:21:22:28:29:ba:0b:
2f:22:55:73:75:7b:84:58:e1:b6:e6:6a:cc:69:3d:
8c:79:4c:6e:11:c8:3e:f4:55:db:99:db:79:ea:57:
6c:7b:35:6d:17:e2:aa:fb:56:01:e6:e8:95:b1:3f:
cc:a0:0c:a9:c8:18:a9:a7:cd:7b:08:b2:3d:90:79:
fe:0e:84:ea:13:81:12:89:30:59:03:8f:34:03:f7:
95:cf:de:5a:b0:6c:0b:1d:59:07:04:ca:35:12:db:
db:18:35:f1:c4:b2:17:ec:2b:8e:5e:64:0a:13:26:
2f:9f:3d:89:9f:42:ec:ed:20:da:5f:9d:74:b9:a5:
af:84:ae:a1:69:f4:53:18:76:30:ad:e6:58:94:dd:
dd:32:80:0b:9d:60:fe:54:2d:f6:22:63:0c:29:9d:
f2:39:95:3a:80:91:b4:b3:39:9f:50:9f:e8:14:c2:
7e:c6:0b:23:51:9a:49:99:d3:b1:44:b0:a4:14:13:
5e:1a:42:0c:a4:78:2c:16:5a:d5:82:bf:d1:e2:51:
a7:e0:24:cc:8d:79:aa:33:8b:d4:8d:ed:9b:28:5e:
85:18:ed:37:2e:ce:68:fd:b1:ad:70:ca:51:89:5f:
3c:28:12:fc:bf:ad:95:ce:31:8f:8a:92:36:3d:42:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AC:89:9C:CA:8D:82:02:2D:58:4F:62:5F:F8:A9:AD:70:F4:53:D0
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/I6yJnMqNggItWE9iX_iprXD0U9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.188.0/22
Signature Algorithm: sha256WithRSAEncryption
92:79:63:c0:91:c4:18:8b:c6:ab:85:e6:52:c2:f7:c3:8b:54:
a2:ef:93:04:6d:d8:20:8f:61:e3:dc:1c:d6:61:a1:e9:72:26:
9c:5d:73:fb:ab:bd:0a:97:eb:1b:c9:00:dd:2f:fd:3c:0a:ac:
ea:d8:eb:f8:83:d1:80:3a:9c:af:a2:45:14:f0:2f:43:53:ba:
2f:8a:55:f5:db:35:0f:53:d3:97:c6:63:98:ae:cd:49:a0:48:
92:2d:f0:d1:09:3e:d4:45:3d:9d:44:eb:db:3b:3d:5d:c3:1e:
d5:28:90:08:ee:d3:52:58:6c:ab:0c:f7:c6:c2:79:5c:1a:41:
1c:b5:f1:9f:4e:7c:f0:a3:ca:5f:3d:24:10:73:af:9f:41:31:
13:3d:82:71:e1:93:5c:d0:74:5d:cf:c8:ab:ff:a8:36:97:9f:
36:16:01:a1:af:7e:05:8e:04:49:4c:f8:67:a9:80:2f:19:a4:
75:f9:a3:9d:94:94:69:da:39:48:cb:d9:61:03:a1:10:72:d0:
15:c0:f4:d9:a6:ca:82:4f:6e:ab:6a:28:de:08:2b:14:50:76:
52:6b:c4:dd:a4:12:b0:fe:a2:81:b3:4d:6d:e0:47:7b:35:f9:
f3:7f:82:77:5f:2b:59:5a:ff:da:b6:27:70:22:64:35:33:58:
ee:a7:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:13 2024 by rpki-client on console-fra.rpki-client.org