Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LqT3G_33kmunufhNmhLKYPiK5iI.roa
File: LqT3G_33kmunufhNmhLKYPiK5iI.roa (raw, json)
Hash identifier: uHgzwsMi4PvGCD8Ia4KsxL4y4an+f1ECLHZ8zKthQJg=
Subject key identifier: 2E:A4:F7:1B:FD:F7:92:6B:A7:B9:F8:4D:9A:12:CA:60:F8:8A:E6:22
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 01886C5931FDC883CFACE1DDC341D76DC850
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LqT3G_33kmunufhNmhLKYPiK5iI.roa
Signing time: Tue 30 May 2023 11:09:24 +0000
ROA not before: Tue 30 May 2023 11:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.95.201.0/24 maxlen: 24
37.19.68.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:59:31:fd:c8:83:cf:ac:e1:dd:c3:41:d7:6d:c8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: May 30 11:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ea4f71bfdf7926ba7b9f84d9a12ca60f88ae622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:09:bb:a0:12:ee:dc:3e:40:a4:4e:0f:c7:
e4:50:c9:34:71:23:68:04:fd:c4:b8:f5:5e:dd:47:
3b:97:e3:d9:66:43:74:32:2e:1c:b3:d8:36:27:f6:
f9:d4:47:47:c8:01:8a:ad:e5:79:15:cc:b8:30:3a:
29:19:e0:66:df:18:f6:0a:07:35:82:c0:1e:a3:33:
3b:c0:aa:5a:a8:85:11:f1:8a:41:fc:d6:2b:9e:ab:
aa:2f:28:e3:2d:04:c6:ae:68:a4:f8:51:1a:af:e2:
24:5a:b9:b5:0e:73:5f:a2:84:f5:8c:d2:10:5e:b6:
29:9d:2c:aa:cd:68:31:ca:88:95:4b:90:5f:e6:4a:
86:bf:a1:74:10:05:cc:55:d2:f6:5d:48:2d:6e:79:
4f:f1:83:4d:46:78:cf:24:ab:6c:02:82:9e:e4:8d:
46:2e:1e:aa:cc:6a:18:23:ca:dd:59:23:09:25:7f:
27:1b:01:0a:c7:f7:be:b4:e2:14:da:9c:e0:b8:8a:
84:27:02:e8:06:e7:35:60:54:f8:b9:c3:ad:0e:94:
45:ec:9c:63:f9:8e:11:a5:93:d1:db:a0:94:7b:fb:
11:48:55:56:7f:7e:f6:2d:09:85:90:2f:8d:77:45:
93:e3:00:6d:e0:b6:9a:96:63:33:7c:84:c2:04:85:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A4:F7:1B:FD:F7:92:6B:A7:B9:F8:4D:9A:12:CA:60:F8:8A:E6:22
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LqT3G_33kmunufhNmhLKYPiK5iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.68.0/22
195.95.201.0/24
Signature Algorithm: sha256WithRSAEncryption
99:5c:fb:12:25:76:a4:d7:84:9d:b2:a5:33:e8:9d:7f:db:67:
df:37:38:a1:8d:36:3b:76:0f:7c:84:ae:39:a0:b4:51:2b:03:
69:4d:bb:2c:25:ad:63:f3:f9:9c:08:c1:62:b2:22:20:1e:f3:
bb:15:45:37:20:1f:7b:53:6b:f3:b6:55:53:46:b5:8c:78:65:
5f:47:b1:d2:6b:54:7f:0f:17:23:65:0b:35:cb:13:c2:43:0f:
d8:91:ed:55:5d:5c:72:4a:a2:87:bb:77:81:41:2f:c7:96:a1:
f1:4e:f1:89:f0:d3:4a:91:f2:d5:15:1d:37:eb:3d:60:12:33:
9b:57:3b:78:1d:63:ec:c0:77:30:9c:01:c0:d6:fa:c8:c0:64:
72:42:87:e3:2b:9c:f3:f5:97:7e:ca:8d:98:82:16:8a:a8:4a:
2a:29:e7:16:78:cc:02:7b:09:76:d4:ab:4b:8e:91:e7:4d:1e:
0d:33:68:01:ac:07:06:c7:ee:55:79:67:1b:20:e9:3e:4c:d8:
c5:9f:a6:92:7e:40:f4:4a:a4:9b:e7:1b:f8:10:20:0b:a8:ba:
d2:33:9e:a4:32:95:ac:b7:6e:42:71:2d:57:a7:f2:56:0a:cc:
fd:3a:be:d0:9e:f3:38:9f:dd:c1:c7:95:d1:08:f0:31:b4:30:
75:ce:0a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:30 2023 by rpki-client on console-ams.rpki-client.org