Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/YDanMqsGkmn9qdlau7YICxavInw.roa
File: YDanMqsGkmn9qdlau7YICxavInw.roa (raw, json)
Hash identifier: MOWSzBvg4s3PFFlBdfvgpycU1QbIzg25R6luCf5KIvk=
Subject key identifier: 60:36:A7:32:AB:06:92:69:FD:A9:D9:5A:BB:B6:08:0B:16:AF:22:7C
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 01886C5A1CDCA58E62E963E0D3498566E762
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/YDanMqsGkmn9qdlau7YICxavInw.roa
Signing time: Tue 30 May 2023 11:10:24 +0000
ROA not before: Tue 30 May 2023 11:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 37.19.64.0/22 maxlen: 24
185.145.52.0/24 maxlen: 24
5.249.176.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:5a:1c:dc:a5:8e:62:e9:63:e0:d3:49:85:66:e7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: May 30 11:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6036a732ab069269fda9d95abbb6080b16af227c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:56:57:bb:39:88:e6:d3:40:38:da:0f:a8:
a7:47:61:f2:ea:2d:39:aa:00:ea:64:f6:3f:ac:f9:
16:7a:49:4b:54:99:bc:eb:45:15:49:4e:81:ea:cb:
a6:1d:bb:02:2c:6d:e0:82:82:61:d4:22:32:0a:4c:
90:d0:a4:96:31:9b:ad:0c:e6:f2:8a:53:0c:8c:f0:
79:10:8b:00:4b:3d:4e:07:a9:89:f2:6d:dc:5f:a8:
fc:9c:db:8e:a4:2b:df:80:d3:e5:d2:ed:5d:20:5d:
00:90:1d:17:e0:39:1b:e3:aa:bd:d0:d4:38:a7:1e:
e1:3c:b4:3c:50:bc:c5:fe:5b:1c:4d:8f:44:6c:56:
cc:d1:30:7a:eb:d7:65:52:20:9c:13:28:b9:83:75:
34:72:0c:f1:aa:01:8e:c5:33:b7:f1:5a:7f:6f:a0:
c5:36:1e:f8:32:f6:f3:46:a6:2d:e1:a3:a6:ce:4e:
58:2e:87:5a:24:03:10:f6:32:78:0f:94:c1:b4:1a:
91:4a:3b:e9:e0:94:db:54:c0:ed:ba:7f:73:43:fd:
f1:94:09:c9:e4:ce:40:f2:62:cd:9e:f1:d7:d3:7f:
4e:af:16:9c:4e:4b:59:aa:9c:c7:4a:0f:15:11:d1:
46:64:ee:fc:14:54:fa:18:db:3b:b5:e8:67:ee:93:
23:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:36:A7:32:AB:06:92:69:FD:A9:D9:5A:BB:B6:08:0B:16:AF:22:7C
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/YDanMqsGkmn9qdlau7YICxavInw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.176.0/22
37.19.64.0/22
185.145.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:62:65:9f:4d:07:f5:4c:53:a4:03:fe:2e:60:82:a4:44:4f:
4a:bb:90:5d:e5:60:e8:5e:7e:6c:f9:9a:3e:b4:21:f0:bb:18:
06:88:f2:ee:d4:57:13:ff:cf:f2:62:09:36:97:4b:49:f9:fe:
d7:af:7d:3a:5e:c3:c2:91:6f:30:d6:5b:9d:b3:89:c5:7b:a6:
82:7d:af:99:f4:d2:32:82:9a:72:4d:c4:91:e8:aa:33:e7:9d:
99:e2:e6:8b:66:9e:5c:d3:7d:a9:83:71:9b:15:27:97:dc:6b:
be:63:6e:93:86:23:d3:24:94:e9:db:b8:5d:dc:41:e4:6c:1b:
30:f1:e5:0c:7c:4f:5f:39:48:c3:c6:67:80:52:cc:6b:71:cb:
e8:75:06:76:07:78:31:39:dc:9a:dc:38:50:fa:4a:80:1b:aa:
c1:c5:7b:3b:ff:b2:0e:93:67:21:58:f9:2a:00:bb:84:6c:cf:
c2:7d:1c:01:a8:33:3a:d9:0b:82:dd:7b:71:90:2d:68:42:c1:
3a:09:01:d6:ad:ad:75:33:1b:3f:6d:48:29:a1:f1:78:92:2a:
af:87:de:0f:84:16:14:91:f0:c4:f9:e9:d9:23:cd:32:6d:de:
d9:0d:52:ff:34:a1:9e:7a:7e:64:e3:1d:aa:61:12:93:7a:f3:
ef:5d:1b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 23:39:58 2023 by rpki-client on console-ams.rpki-client.org