Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/JLU6B4OhBTkVoSYKOGA5lBnrY4Y.roa
File: JLU6B4OhBTkVoSYKOGA5lBnrY4Y.roa (raw, json)
Hash identifier: eE1JaIUYB5VWgAfMvWtJ7vDigi9H8HTUtyD4bgYR/ks=
Subject key identifier: 24:B5:3A:07:83:A1:05:39:15:A1:26:0A:38:60:39:94:19:EB:63:86
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 018A71EA977FB0A5C47E705DDD22566C163A
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/JLU6B4OhBTkVoSYKOGA5lBnrY4Y.roa
Signing time: Thu 07 Sep 2023 23:11:54 +0000
ROA not before: Thu 07 Sep 2023 23:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 37.19.64.0/22 maxlen: 24
37.19.68.0/22 maxlen: 24
185.145.52.0/24 maxlen: 24
5.249.176.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:71:ea:97:7f:b0:a5:c4:7e:70:5d:dd:22:56:6c:16:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Sep 7 23:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24b53a0783a1053915a1260a3860399419eb6386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:0d:a4:2a:d1:20:6b:26:fb:13:db:b5:53:
95:fe:07:ac:87:3f:35:8b:61:3b:f3:22:0e:45:7c:
f8:08:09:74:03:0b:8b:2d:80:9f:4b:d4:38:b4:af:
b3:f7:8c:7a:83:7a:7b:d4:03:73:72:25:89:31:0c:
fc:51:c6:c0:bc:ac:66:c3:b5:29:a9:53:64:13:41:
1e:b1:6b:22:5d:7d:7d:4e:b9:cc:42:c5:67:12:bb:
7a:8e:3b:6e:24:65:fc:f8:83:be:cf:df:4b:0a:1c:
21:5a:ee:d4:80:7f:fc:ce:92:41:63:60:4d:94:2b:
6c:a8:7c:86:1b:f9:c7:44:db:0e:b0:9c:b5:84:55:
57:ff:82:24:04:5a:fc:b7:93:62:30:d6:ef:93:8b:
03:d7:9f:13:48:c8:de:6e:b5:1f:6e:25:ab:66:49:
a4:79:fc:6d:20:15:33:4c:8a:73:09:3c:4e:be:8e:
ac:d0:6f:7b:25:6c:73:80:2d:f7:7e:98:a9:5b:c2:
f4:04:8a:6f:bf:71:c9:83:e2:96:14:f8:dc:24:d6:
12:d7:d8:67:70:ea:83:90:37:5b:1b:89:d3:da:ed:
b0:7f:3f:65:bc:b6:a9:96:3b:6d:41:18:d5:a8:50:
ba:3d:dd:3e:93:ab:cf:38:cc:25:0a:df:8c:b2:6f:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B5:3A:07:83:A1:05:39:15:A1:26:0A:38:60:39:94:19:EB:63:86
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/JLU6B4OhBTkVoSYKOGA5lBnrY4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.176.0/22
37.19.64.0/21
185.145.52.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:c2:1d:e2:29:ea:9d:46:87:f8:30:1e:e0:fe:84:51:89:66:
69:63:c1:6f:8e:b0:07:bc:4c:7d:4d:46:08:74:02:94:dc:7d:
9d:2c:a4:81:3a:d9:ac:1a:41:e2:65:76:5f:0a:f1:f4:54:42:
32:a3:c0:46:26:58:07:72:f5:a6:9e:74:44:c1:92:85:63:14:
c3:c2:10:c1:bd:14:fb:30:d3:02:23:ad:bf:e7:b2:1d:dc:c6:
ee:7c:89:f6:9f:10:c9:68:b3:69:56:11:93:07:87:46:3a:17:
9a:11:e4:69:e5:e6:32:d6:4a:f7:21:3d:ac:bd:7b:fb:0a:c4:
2b:67:27:1f:52:12:38:7f:cc:c6:23:45:b2:37:da:6a:c8:a8:
5d:87:b4:66:e6:ba:72:b1:1f:63:f1:92:2d:3f:59:80:ce:42:
d0:35:c2:52:2b:cf:0b:98:d0:eb:3a:36:f8:c7:32:37:84:4e:
79:04:30:ed:89:79:12:1e:da:84:93:20:dc:fe:44:b8:3e:5c:
27:c3:9b:92:94:10:31:8e:ce:e6:27:8c:00:6a:3c:9f:02:79:
99:d0:8e:b8:de:e1:ca:9c:17:ff:37:83:3b:fe:d0:79:f5:e5:
f4:ac:36:40:ed:e6:5d:39:9e:35:06:6f:22:92:6a:48:0a:b5:
e1:1c:fe:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 13:15:59 2023 by rpki-client on console-ams.rpki-client.org