Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/YGLlttju3oljoq5fqsQT2-CkXHc.roa
File: YGLlttju3oljoq5fqsQT2-CkXHc.roa (raw, json)
Hash identifier: UGuNF/9fpXpyhIHjOLb7JKn/8kfqjICyZlMJ4SGVB9o=
Subject key identifier: 60:62:E5:B6:D8:EE:DE:89:63:A2:AE:5F:AA:C4:13:DB:E0:A4:5C:77
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 01856BC117A88544551476B3D30F64D6AF56
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/YGLlttju3oljoq5fqsQT2-CkXHc.roa
Signing time: Sun 01 Jan 2023 05:14:54 +0000
ROA not before: Sun 01 Jan 2023 05:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 37.19.64.0/22 maxlen: 24
185.145.52.0/24 maxlen: 24
5.249.176.0/22 maxlen: 24
5.249.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 15:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:17:a8:85:44:55:14:76:b3:d3:0f:64:d6:af:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jan 1 05:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6062e5b6d8eede8963a2ae5faac413dbe0a45c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:ba:72:c4:c8:e6:4a:7d:e2:44:4b:9c:48:
e0:e7:4b:c2:fe:05:6c:f8:06:2b:65:55:1e:e8:72:
36:cb:73:b4:30:32:e9:8d:39:11:4f:8e:ab:01:4d:
58:bc:80:ea:22:93:29:31:b1:41:c1:16:b1:ec:e4:
7e:a7:0e:db:9c:b7:13:10:ca:99:31:00:a6:14:5b:
a4:0a:24:88:5b:e8:57:d0:13:5c:3f:30:aa:fc:82:
fb:41:10:58:8d:b2:65:5b:5b:51:f5:4d:d6:21:06:
f5:41:35:e0:aa:ac:79:d3:37:f0:95:76:44:4a:0e:
51:9d:65:a6:e7:7c:69:fe:ec:48:f3:45:25:dd:89:
d2:99:d1:8b:2e:64:7c:da:9c:bb:88:12:e3:5f:0b:
f0:58:9c:8a:38:5c:e2:8f:b0:5f:a2:fa:b8:3d:98:
e3:e2:ec:4e:3f:08:ba:8c:5a:0d:08:e9:4e:1f:58:
bf:69:57:6e:16:8a:ed:94:a3:2e:e9:9a:60:72:e4:
8f:ad:68:99:04:f1:bf:9c:e5:c2:bb:9c:ff:5b:ed:
3f:99:7a:b9:bd:84:d2:59:97:a3:78:a5:38:33:31:
8e:11:fd:8d:ea:99:b1:cd:8d:32:a3:21:bd:8b:3e:
74:19:61:77:b8:b7:41:b6:2f:41:e3:8b:b8:c9:a6:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:62:E5:B6:D8:EE:DE:89:63:A2:AE:5F:AA:C4:13:DB:E0:A4:5C:77
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/YGLlttju3oljoq5fqsQT2-CkXHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.176.0/22
5.249.184.0/22
37.19.64.0/22
185.145.52.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f5:c7:d2:c9:f1:a2:c4:63:e8:1f:5c:c8:cf:70:37:27:98:
c3:d9:2d:21:0b:fc:27:e8:c7:b1:21:18:2d:4e:27:22:5f:e1:
42:f9:c3:6e:04:ad:8d:10:5d:ca:0e:6d:b3:9c:1f:07:3c:ee:
eb:cf:0f:f6:50:af:20:4b:c5:8a:75:24:de:ef:bb:3a:f0:8c:
cf:ab:39:6a:a7:b7:a1:37:e1:c2:a3:1d:cd:c6:b8:b9:cb:c0:
8f:05:64:41:63:d6:db:ed:6d:96:48:e0:60:be:1a:da:cc:9c:
4d:76:ba:49:7a:87:91:10:63:1a:97:f8:a5:12:47:1d:30:87:
5a:d6:dc:7f:12:b1:98:ad:d4:bd:7e:c0:95:f0:a2:da:b3:3a:
3b:6b:4c:65:25:82:e0:7a:bc:6c:48:d0:0c:ce:55:07:7c:ef:
1d:ca:be:4a:04:49:58:e2:8e:e4:87:55:c4:4f:3f:9c:17:b2:
c0:9b:ba:58:9f:67:ee:8a:db:06:86:16:47:1c:63:a8:2e:97:
40:4d:e9:4b:16:30:c8:f9:8e:10:8d:91:df:6c:82:60:d5:71:
3a:9f:7a:9a:1c:45:83:46:a2:74:09:af:43:8b:c8:9b:9a:f4:
ac:1e:d2:2e:d8:fe:7d:bd:9e:d2:6a:e8:af:ca:ea:19:51:67:
99:1c:45:44
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVrwReohURVFHaz0w9k1q9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk
NmNlNTEwHhcNMjMwMTAxMDUxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDYyZTViNmQ4ZWVkZTg5NjNhMmFlNWZhYWM0MTNkYmUwYTQ1Yzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX26csTI5kp94kRLnEjg50vC/gVs
+AYrZVUe6HI2y3O0MDLpjTkRT46rAU1YvIDqIpMpMbFBwRax7OR+pw7bnLcTEMqZ
MQCmFFukCiSIW+hX0BNcPzCq/IL7QRBYjbJlW1tR9U3WIQb1QTXgqqx50zfwlXZE
Sg5RnWWm53xp/uxI80Ul3YnSmdGLLmR82py7iBLjXwvwWJyKOFzij7Bfovq4PZjj
4uxOPwi6jFoNCOlOH1i/aVduFortlKMu6ZpgcuSPrWiZBPG/nOXCu5z/W+0/mXq5
vYTSWZejeKU4MzGOEf2N6pmxzY0yoyG9iz50GWF3uLdBti9B44u4yab+XwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGBi5bbY7t6JY6KuX6rEE9vgpFx3MB8GA1UdIwQY
MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt
ZGY2NGYwZTgyMzYwLzEvWUdMbHR0anUzb2xqb3E1ZnFzUVQyLUNrWEhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw
LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCBfmwAwQC
Bfm4AwQCJRNAAwQAuZE0MA0GCSqGSIb3DQEBCwUAA4IBAQBW9cfSyfGixGPoH1zI
z3A3J5jD2S0hC/wn6MexIRgtTiciX+FC+cNuBK2NEF3KDm2znB8HPO7rzw/2UK8g
S8WKdSTe77s68IzPqzlqp7ehN+HCox3Nxri5y8CPBWRBY9bb7W2WSOBgvhrazJxN
drpJeoeREGMal/ilEkcdMIda1tx/ErGYrdS9fsCV8KLaszo7a0xlJYLgerxsSNAM
zlUHfO8dyr5KBElY4o7kh1XETz+cF7LAm7pYn2fuitsGhhZHHGOoLpdATelLFjDI
+Y4QjZHfbIJg1XE6n3qaHEWDRqJ0Ca9Di8ibmvSsHtIu2P59vZ7SauivyuoZUWeZ
HEVE
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:09 2024 by rpki-client on console-ams.rpki-client.org