Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/LxH5wpOy-wvQGV1Vb6DYjscAyP8.roa
File: LxH5wpOy-wvQGV1Vb6DYjscAyP8.roa (raw, json)
Hash identifier: DA2Obo0Oyx/V/gHS8C/IatEFsV4JL1AjSfIRncdvgZs=
Subject key identifier: 2F:11:F9:C2:93:B2:FB:0B:D0:19:5D:55:6F:A0:D8:8E:C7:00:C8:FF
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 0189DCC2C3C64217E3FD65953A8D761B12CE
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/LxH5wpOy-wvQGV1Vb6DYjscAyP8.roa
Signing time: Thu 10 Aug 2023 00:04:58 +0000
ROA not before: Thu 10 Aug 2023 00:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61977
IP address blocks: 2a13:1500::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 23 Aug 2023 13:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:dc:c2:c3:c6:42:17:e3:fd:65:95:3a:8d:76:1b:12:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Aug 10 00:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f11f9c293b2fb0bd0195d556fa0d88ec700c8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:1f:e5:2b:e3:ca:23:a7:99:a0:bd:08:a5:
b2:b0:f5:1e:ec:60:02:1f:95:20:d2:7b:a2:a5:bc:
01:83:35:cc:67:f8:65:d7:19:ab:20:46:d6:a9:d7:
50:a2:00:6d:60:60:53:12:35:26:31:d8:63:52:b3:
d4:24:9f:04:62:71:ed:b7:62:45:77:5f:89:4c:52:
5b:bf:8d:4b:7f:31:8f:e9:a2:72:a2:48:fd:4a:c2:
9e:e0:98:52:1f:48:8f:78:47:f9:26:72:a9:10:56:
1e:39:ac:6a:5a:e3:ef:0a:d0:17:be:62:5b:82:cb:
8e:e3:ac:34:8f:86:63:e2:a0:5a:45:03:5f:e9:2c:
bc:21:1f:e6:fc:11:64:7e:2b:1c:f9:6b:bd:de:f5:
91:72:52:8b:b8:a0:0c:50:0a:85:19:26:18:01:d6:
85:1b:4c:74:9f:a3:83:f5:a4:13:b6:bd:38:a0:50:
1e:49:5c:d2:be:eb:46:8e:0a:13:f1:93:73:08:85:
4b:27:c2:b3:3b:bb:1c:63:59:2a:57:d8:24:9d:20:
9a:d0:ba:4f:86:67:bd:34:16:e3:06:44:11:db:b3:
15:b2:08:f3:e7:d3:ab:1a:f9:07:2d:a9:3c:90:cf:
22:2a:47:16:70:95:0c:79:85:fd:ea:df:a8:3e:1e:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:11:F9:C2:93:B2:FB:0B:D0:19:5D:55:6F:A0:D8:8E:C7:00:C8:FF
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/LxH5wpOy-wvQGV1Vb6DYjscAyP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1500::/29
Signature Algorithm: sha256WithRSAEncryption
1f:b6:99:37:be:9a:fc:6d:70:a1:64:22:66:d0:d0:a3:94:14:
d6:a8:67:c5:7c:24:68:9c:c8:b9:93:dd:e8:76:fc:f7:5e:c6:
1e:c6:2b:e8:8f:98:e2:fe:fe:ad:9a:b9:35:f8:ce:17:a3:3d:
b4:66:90:87:67:52:f7:8c:e1:e7:84:f3:65:e3:db:c2:99:ab:
9f:a2:f5:30:ad:ca:6c:1f:9e:d0:69:4d:3d:15:a6:3a:59:fd:
8f:4d:a3:27:3e:7d:65:79:b7:1e:f4:bd:53:a3:6a:5c:60:e0:
d6:7e:25:99:96:1c:48:06:ee:d9:df:b6:2d:c2:cb:3b:42:50:
78:6d:79:03:84:e8:fa:ea:61:2f:5c:1f:7d:10:f0:e1:06:f3:
05:70:8e:de:db:9b:c2:2e:33:b1:13:63:1f:75:65:f9:33:08:
2b:4c:6d:05:cc:52:d1:ec:e6:56:ba:e8:30:e3:64:3c:2d:b3:
0a:f2:df:d8:66:4f:f8:b7:2f:77:d5:7e:27:4a:de:c3:74:de:
23:08:b7:31:ce:88:b8:b6:c0:a5:bc:1b:69:9b:87:14:19:e8:
86:6b:d9:6b:0f:4f:d4:6b:b5:d5:ad:4b:c5:f8:65:b6:78:5e:
86:03:f7:1e:97:50:6a:70:0e:30:e0:9d:29:ec:82:85:48:56:
65:06:97:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:52 2024 by rpki-client on console-fra.rpki-client.org