Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/JUZOWnQ2gXMl_eXuyDlR4LbGX7Y.roa
File: JUZOWnQ2gXMl_eXuyDlR4LbGX7Y.roa (raw, json)
Hash identifier: Mp4IPAp9+Hb0F8QmSXpID2KLjff0WGlt1kexUWKTQZw=
Subject key identifier: 25:46:4E:5A:74:36:81:73:25:FD:E5:EE:C8:39:51:E0:B6:C6:5F:B6
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 018BFDAEED0EFB8657B4153B56A80AE24EB7
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/JUZOWnQ2gXMl_eXuyDlR4LbGX7Y.roa
Signing time: Thu 23 Nov 2023 19:36:21 +0000
ROA not before: Thu 23 Nov 2023 19:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.95.201.0/24 maxlen: 24
5.249.184.0/22 maxlen: 24
5.249.180.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fd:ae:ed:0e:fb:86:57:b4:15:3b:56:a8:0a:e2:4e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Nov 23 19:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25464e5a7436817325fde5eec83951e0b6c65fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:f5:ba:61:11:ac:d8:6a:68:0e:08:b9:1c:
43:4f:74:b0:d2:85:ef:b8:f8:76:b6:68:65:56:9d:
5e:95:5c:44:12:63:7c:90:d5:b9:6d:a5:ed:94:c9:
3f:82:9a:6f:00:23:57:7a:79:49:dc:c4:ae:ad:07:
97:a3:8e:81:af:c1:42:92:cb:9c:ee:61:fc:b7:d3:
26:2c:63:f0:ce:0b:2e:2b:a6:70:c5:35:b7:da:9a:
a3:d3:61:62:4f:9f:f6:15:c4:51:16:af:70:3f:cb:
7b:9a:08:61:b9:11:2a:33:a3:d0:9d:35:49:27:92:
98:02:a7:a7:de:f0:fc:8e:c3:8a:03:1d:95:a8:86:
dc:4d:f3:81:11:cd:7b:c6:eb:1c:02:72:2c:ee:04:
86:d4:31:69:5d:ca:1e:9b:ae:cb:fc:f7:d3:2c:6c:
91:05:ba:34:a2:cb:a9:67:98:57:ce:e4:1f:c1:33:
82:e2:c4:20:46:e9:d7:2b:ef:c4:94:6e:af:95:76:
cb:c5:b7:9b:f4:e4:88:34:2f:22:18:70:0e:7d:8f:
23:43:7e:e5:a6:87:c0:ea:3f:6e:4b:4e:37:e4:8c:
3a:18:8d:8e:a5:5e:7b:c3:82:b4:7c:ea:e2:17:a2:
02:14:b6:ce:2a:db:e4:df:f1:cc:8b:68:0a:63:f5:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:46:4E:5A:74:36:81:73:25:FD:E5:EE:C8:39:51:E0:B6:C6:5F:B6
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/JUZOWnQ2gXMl_eXuyDlR4LbGX7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.180.0-5.249.187.255
195.95.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:60:c9:b0:a0:5e:f3:ef:a0:c4:01:ea:e6:f6:85:71:99:55:
9a:ea:0e:34:f4:ca:ca:bb:cc:20:fb:ff:f3:0e:9c:91:5b:39:
a0:ad:a6:cd:4d:5b:ec:05:69:76:9a:98:04:dd:51:fc:d8:84:
2f:7a:05:05:9b:44:56:82:a2:8b:0d:49:14:82:53:92:21:cf:
c2:7e:92:67:42:89:c1:1e:db:f3:48:03:9c:5c:cd:03:38:76:
a4:c1:2c:31:55:28:d6:62:03:3e:28:f3:a5:7b:f6:7d:9e:72:
33:27:1a:2a:77:aa:fc:62:00:5c:77:ba:fa:3b:60:f0:47:f9:
97:e9:7c:70:22:ca:37:96:b6:5d:4e:7b:5a:91:52:14:b2:47:
7b:0b:74:9f:55:e0:00:a4:2c:a3:da:ce:9a:e0:c1:e9:55:9d:
49:3b:c7:46:0b:61:d9:6c:c6:16:66:9c:16:b0:df:5a:24:75:
a2:c8:26:1a:3d:b1:5e:f7:c4:03:9e:bc:80:3a:27:95:65:22:
4c:bc:55:28:c9:c8:6f:f1:65:64:4c:0b:62:ef:c8:94:9f:94:
e8:cf:a1:35:5d:73:df:cb:35:a0:16:21:96:7f:67:bd:8e:83:
ca:a3:bd:d9:36:64:43:9d:89:53:a8:06:8e:82:be:8e:59:a7:
85:06:32:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 25 09:59:11 2023 by rpki-client on console-fra.rpki-client.org