Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/oZ0o0lgu7OK4BLVqBM06Zfmt_7A.roa
File: oZ0o0lgu7OK4BLVqBM06Zfmt_7A.roa (raw, json)
Hash identifier: LgEsTwVclZ8uxVGvXjdr1vjIGKktSPqVuvW0grmSzdw=
Subject key identifier: A1:9D:28:D2:58:2E:EC:E2:B8:04:B5:6A:04:CD:3A:65:F9:AD:FF:B0
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 018805C13B8421BF94CBE87F1A8A7C3C54D5
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/oZ0o0lgu7OK4BLVqBM06Zfmt_7A.roa
Signing time: Wed 10 May 2023 13:02:09 +0000
ROA not before: Wed 10 May 2023 13:02:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 37.19.64.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:c1:3b:84:21:bf:94:cb:e8:7f:1a:8a:7c:3c:54:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: May 10 13:02:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a19d28d2582eece2b804b56a04cd3a65f9adffb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fb:2a:50:93:3a:a4:26:29:73:58:48:6d:bb:
66:16:af:92:92:32:65:67:78:dc:7c:45:f0:04:d4:
0c:b1:7c:b2:63:3c:fd:1f:83:6d:d4:47:ff:e7:14:
e7:b7:88:89:38:0b:35:b0:71:a2:c0:3f:85:d6:7a:
b1:4d:5c:49:01:ab:f0:e3:16:cb:ce:12:5d:db:fd:
58:58:17:7b:e0:b8:0f:05:b6:bd:ac:42:8e:55:75:
91:e3:a4:5b:e2:75:ab:7d:87:4d:b4:6a:f6:4e:e5:
ca:8b:5c:01:fa:72:bf:96:1c:70:13:20:08:bb:49:
94:6a:2d:1a:1a:6c:14:80:0b:7b:2e:99:e8:38:45:
8e:df:97:f4:c0:9a:7c:df:a9:06:02:93:1f:93:73:
d4:1c:42:15:05:80:98:a4:c6:d9:e8:dd:3a:3d:80:
f7:b0:ad:32:41:5c:87:2e:19:50:37:4c:17:fd:98:
3f:60:e5:bb:aa:4c:d6:75:d2:c1:31:c2:6f:23:97:
c0:00:ce:22:f5:6d:23:4e:a2:0a:fc:fd:80:9c:50:
c2:19:0a:e7:f9:c2:3f:57:b8:60:d4:46:74:92:4c:
b9:32:71:ef:ea:c0:2b:6e:54:85:90:5a:c5:ef:52:
e6:2b:c1:e6:25:76:c3:bb:90:be:d9:6d:17:de:78:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9D:28:D2:58:2E:EC:E2:B8:04:B5:6A:04:CD:3A:65:F9:AD:FF:B0
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/oZ0o0lgu7OK4BLVqBM06Zfmt_7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.64.0/22
Signature Algorithm: sha256WithRSAEncryption
56:25:11:9a:6e:3f:96:56:9c:c3:2a:c1:a9:54:f6:35:b3:61:
2c:ce:8c:37:59:17:b9:98:21:3a:92:17:ce:05:50:87:31:b3:
59:50:c4:e2:d9:a3:a4:1b:1f:84:16:b7:3a:64:49:9a:97:e6:
8b:e5:62:4b:01:03:5a:3d:f9:74:35:b1:87:be:03:2c:07:1f:
fb:41:d0:93:4c:3e:db:91:8d:58:8d:2f:cc:51:63:8f:41:28:
f2:cb:e7:2b:8f:de:4f:5d:ef:e9:2b:1f:03:65:6a:37:df:b6:
34:15:15:c9:38:10:3b:25:3a:fe:70:cd:61:9b:64:d3:e4:1d:
e5:5c:e7:6d:1d:f0:6d:2e:28:01:48:e6:40:e4:4c:4f:ff:f8:
ae:58:16:dd:c7:90:a9:1a:3e:5c:6c:d3:ad:18:a8:11:5a:e1:
71:84:61:19:68:36:eb:c1:b5:ce:a2:2f:3c:dd:f5:dd:69:41:
37:a5:e5:23:34:99:65:0c:f8:8c:b7:9e:11:34:60:b6:70:c3:
df:71:9b:c6:02:36:59:59:10:11:88:c7:ee:b1:17:80:47:a3:
1e:6e:a5:9e:a3:b7:f3:80:93:5a:d0:5e:4d:9a:52:94:be:40:
ff:17:f9:d4:1c:7f:cf:f3:ef:92:8d:5a:9b:6b:c8:ad:8a:a7:
6d:74:5b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:13 2024 by rpki-client on console-fra.rpki-client.org