Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/fXPRrJlxCrr2LHVS8jH8aAGn2_Q.roa
File: fXPRrJlxCrr2LHVS8jH8aAGn2_Q.roa (raw, json)
Hash identifier: jz3mfZ+L6CuzFhPKKVQp0Hk9KvgqQZeQpFs2BZAgRcE=
Subject key identifier: 7D:73:D1:AC:99:71:0A:BA:F6:2C:75:52:F2:31:FC:68:01:A7:DB:F4
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 0185B6F1A96941C78B00DF1F736E42CA526C
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/fXPRrJlxCrr2LHVS8jH8aAGn2_Q.roa
Signing time: Sun 15 Jan 2023 19:39:28 +0000
ROA not before: Sun 15 Jan 2023 19:39:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 37.19.64.0/22 maxlen: 24
5.249.176.0/22 maxlen: 24
5.249.184.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b6:f1:a9:69:41:c7:8b:00:df:1f:73:6e:42:ca:52:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jan 15 19:39:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d73d1ac99710abaf62c7552f231fc6801a7dbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f6:3c:df:2c:3b:15:d6:88:c1:80:61:1a:c9:
a5:2a:33:0a:d3:dd:8f:51:01:43:ac:44:a1:10:1b:
e3:13:d1:3b:63:38:b7:c6:23:8f:ac:91:b7:c5:b1:
84:56:c3:58:65:64:0f:ea:5b:fc:58:f5:9e:f3:25:
c5:9e:af:69:c4:8b:c4:ee:89:86:02:8d:79:90:e9:
30:46:73:c9:36:74:9a:1a:3f:aa:aa:d1:31:b2:4f:
c4:32:6c:80:b1:7b:57:d0:1d:09:4d:a1:22:06:b2:
7e:76:30:a6:60:51:e3:e9:1f:8b:9e:23:94:bc:01:
20:bb:02:c4:8c:cc:ef:16:3f:82:46:4e:53:e7:7c:
18:6e:0f:35:be:f6:60:a3:bf:c1:ed:9a:e6:41:54:
4c:7a:89:ea:3a:38:83:6a:b5:40:4e:b8:01:ea:cb:
8a:8a:00:eb:45:da:04:96:9c:2b:a4:17:0a:4c:8f:
25:e6:cb:d3:6d:92:70:eb:04:eb:8f:46:27:04:76:
a5:5c:12:87:f5:ef:02:17:06:58:e5:32:94:e0:f2:
4d:37:4f:a0:40:a2:e9:ed:8d:73:21:d2:d9:30:7c:
2b:da:7b:dc:37:41:b1:27:27:34:72:aa:c0:06:a3:
c5:22:1b:85:ec:c5:df:17:75:0f:f6:36:02:fa:88:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:D1:AC:99:71:0A:BA:F6:2C:75:52:F2:31:FC:68:01:A7:DB:F4
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/fXPRrJlxCrr2LHVS8jH8aAGn2_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.176.0/22
5.249.184.0/22
37.19.64.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:98:2b:9a:01:17:08:25:39:bf:04:c2:26:da:5c:06:01:a7:
9a:5d:1e:60:bd:85:f6:75:76:eb:f8:97:2e:a2:6c:9e:8e:46:
c5:37:21:ce:92:8d:01:0c:51:f9:a0:68:b3:ae:fe:6b:7d:24:
51:08:06:f8:11:d7:39:bd:72:25:c1:19:e4:cd:5d:27:94:be:
44:22:c5:e4:4d:ab:45:ea:f2:ee:3f:67:f3:f2:00:51:b4:45:
d7:b4:26:0d:e6:8b:ab:83:00:14:75:bb:e5:78:54:60:44:88:
e0:11:2b:0a:d2:f2:2a:07:a6:58:b3:02:a6:16:bc:e7:a9:48:
c3:c1:78:85:1f:e9:ea:c4:28:f9:04:81:e0:cf:f3:1b:0d:a4:
25:f1:dc:e6:32:7b:71:c3:bc:5e:b7:d9:73:b6:94:e2:80:36:
8c:60:1d:e4:fa:83:5d:ba:a5:6a:96:a9:85:6a:c3:5c:fc:c8:
f7:9b:85:bd:aa:03:bd:df:71:c2:98:98:e7:90:3c:b2:5f:e6:
a5:ca:74:f4:5a:8e:95:b8:cb:c9:9e:46:f9:91:50:6b:1d:00:
30:a9:eb:49:86:88:ce:50:81:be:f1:cf:48:ee:88:f9:4b:f7:
a8:01:94:2d:92:f0:8d:fc:42:2e:2f:15:60:88:9c:eb:8d:22:
72:b5:7e:38
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYW28alpQceLAN8fc25CylJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk
NmNlNTEwHhcNMjMwMTE1MTkzOTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDczZDFhYzk5NzEwYWJhZjYyYzc1NTJmMjMxZmM2ODAxYTdkYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/Y83yw7FdaIwYBhGsmlKjMK092P
UQFDrEShEBvjE9E7Yzi3xiOPrJG3xbGEVsNYZWQP6lv8WPWe8yXFnq9pxIvE7omG
Ao15kOkwRnPJNnSaGj+qqtExsk/EMmyAsXtX0B0JTaEiBrJ+djCmYFHj6R+LniOU
vAEguwLEjMzvFj+CRk5T53wYbg81vvZgo7/B7ZrmQVRMeonqOjiDarVATrgB6suK
igDrRdoElpwrpBcKTI8l5svTbZJw6wTrj0YnBHalXBKH9e8CFwZY5TKU4PJNN0+g
QKLp7Y1zIdLZMHwr2nvcN0GxJyc0cqrABqPFIhuF7MXfF3UP9jYC+ohrjQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH1z0ayZcQq69ix1UvIx/GgBp9v0MB8GA1UdIwQY
MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt
ZGY2NGYwZTgyMzYwLzEvZlhQUnJKbHhDcnIyTEhWUzhqSDhhQUduMl9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw
LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCBfmwAwQC
Bfm4AwQCJRNAMA0GCSqGSIb3DQEBCwUAA4IBAQDPmCuaARcIJTm/BMIm2lwGAaea
XR5gvYX2dXbr+JcuomyejkbFNyHOko0BDFH5oGizrv5rfSRRCAb4Edc5vXIlwRnk
zV0nlL5EIsXkTatF6vLuP2fz8gBRtEXXtCYN5ourgwAUdbvleFRgRIjgESsK0vIq
B6ZYswKmFrznqUjDwXiFH+nqxCj5BIHgz/MbDaQl8dzmMntxw7xet9lztpTigDaM
YB3k+oNduqVqlqmFasNc/Mj3m4W9qgO933HCmJjnkDyyX+alynT0Wo6VuMvJnkb5
kVBrHQAwqetJhojOUIG+8c9I7oj5S/eoAZQtkvCN/EIuLxVgiJzrjSJytX44
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:38 2023 by rpki-client on console-fra.rpki-client.org