Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/W6ffpgLDHGdi9YsUYqcf3QjYrf8.roa
File: W6ffpgLDHGdi9YsUYqcf3QjYrf8.roa (raw, json)
Hash identifier: zicYtIOFniUqzhhXaWLd1B4BeiD2N+7x6WLj2GesbzE=
Subject key identifier: 5B:A7:DF:A6:02:C3:1C:67:62:F5:8B:14:62:A7:1F:DD:08:D8:AD:FF
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 0191217B271A370A3C4A7F47D819287AFCC6
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/W6ffpgLDHGdi9YsUYqcf3QjYrf8.roa
Signing time: Mon 05 Aug 2024 07:40:04 +0000
ROA not before: Mon 05 Aug 2024 07:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.249.184.0/22 maxlen: 24
195.95.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 09:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:7b:27:1a:37:0a:3c:4a:7f:47:d8:19:28:7a:fc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Aug 5 07:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ba7dfa602c31c6762f58b1462a71fdd08d8adff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:27:2a:b3:4b:4d:1a:18:8e:21:80:df:94:
bb:ae:d9:9a:d1:4d:28:67:d2:9c:93:1b:ff:d7:ec:
b3:ed:79:60:44:49:e6:37:27:97:79:88:f0:38:28:
41:e7:5e:4a:2e:d1:dc:17:bc:4b:be:8a:07:9f:8c:
d8:e3:21:f6:fc:6c:9c:c1:e1:d2:b3:aa:ae:6b:85:
32:aa:88:80:3d:5c:e4:c0:3c:0f:a3:02:fd:53:18:
4d:a4:f8:9e:a8:24:f2:b6:97:7a:cf:ca:9d:2e:77:
6d:e0:2e:34:cc:27:e5:00:78:bc:5a:3c:c1:52:4e:
03:ee:5f:4f:10:59:6c:7e:a6:a8:0e:57:b4:7c:27:
75:0a:74:9f:58:ac:99:9d:64:25:a2:3f:f0:5b:ad:
46:c0:d2:85:d3:76:be:0d:79:27:e4:70:8a:e2:45:
45:09:aa:5e:25:29:50:12:1f:0a:71:dc:64:d0:ba:
8b:a7:24:6d:cc:07:2c:db:b9:68:32:22:86:9b:da:
34:1f:be:ca:da:f5:a1:8e:98:45:de:0a:16:26:be:
a4:f6:4c:6a:d4:0d:01:14:ac:93:8c:09:c1:39:98:
ff:b2:4b:a9:97:72:76:f3:e0:c2:4c:a2:b7:47:5c:
75:1f:88:09:1d:33:43:d4:cb:2f:b1:c9:06:23:02:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A7:DF:A6:02:C3:1C:67:62:F5:8B:14:62:A7:1F:DD:08:D8:AD:FF
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/W6ffpgLDHGdi9YsUYqcf3QjYrf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.184.0/22
195.95.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a9:c2:b2:8a:48:f8:af:24:1b:d4:ed:a2:07:ac:03:5a:de:
f3:79:82:78:12:10:2e:b6:de:09:23:c9:d8:f5:38:8a:91:a4:
a1:3d:b3:89:60:8f:eb:22:75:8f:8d:bd:ca:5a:17:07:49:40:
06:9a:66:57:c2:55:76:95:64:04:26:e2:24:5c:fa:39:74:ee:
f3:19:55:0e:5e:98:66:36:9f:1b:e6:06:67:58:43:c3:4e:bc:
6c:7d:7f:14:6b:f8:24:5f:84:a5:37:81:a4:49:f4:32:73:98:
37:0d:2e:03:6a:ac:af:7a:96:51:0e:1c:79:c4:a0:3e:f7:f2:
fd:4d:3e:4e:6b:f0:4e:fb:cc:f2:5d:89:e9:b7:38:88:0e:58:
04:c9:64:b8:29:d9:97:de:54:f3:57:19:92:bc:aa:dc:d9:7b:
cb:ff:ce:2d:80:cc:43:55:c3:76:c9:43:43:86:07:cd:f0:1d:
d6:89:7d:51:2b:4e:7c:d7:1f:d3:e1:b3:1d:d5:51:84:80:85:
b5:10:ae:2f:5f:a2:7e:31:08:e6:0c:a5:2a:b4:e7:88:51:5a:
12:1f:43:cc:90:2e:4d:6c:e8:12:6f:8a:36:fe:b7:1e:43:c2:
ef:a9:00:0a:49:54:df:5a:4b:fc:97:3b:23:c2:9c:49:63:34:
10:f7:9c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 11:36:48 2024 by rpki-client on console-ams.rpki-client.org