Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/LDXLQHiKr_gQm639Dvoac81LLbM.roa
File: LDXLQHiKr_gQm639Dvoac81LLbM.roa (raw, json)
Hash identifier: vAKBVEM/Cp/7Rj1H1HGu6odueQbmRmd1KzD1IUGRVmo=
Subject key identifier: 2C:35:CB:40:78:8A:AF:F8:10:9B:AD:FD:0E:FA:1A:73:CD:4B:2D:B3
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2ECEF666737091DB8497A2FEA7E03B
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/LDXLQHiKr_gQm639Dvoac81LLbM.roa
Signing time: Sun 01 Jan 2023 07:14:44 +0000
ROA not before: Sun 01 Jan 2023 07:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56796
IP address blocks: 2a0d:2146:8460::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:ce:f6:66:73:70:91:db:84:97:a2:fe:a7:e0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c35cb40788aaff8109badfd0efa1a73cd4b2db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:4b:76:ae:31:ed:19:9f:fe:2d:9f:b6:e9:
14:47:38:cf:2b:fd:5a:d5:41:36:32:fd:d0:0d:00:
0d:b5:87:7f:40:1d:8e:00:27:a6:22:62:55:76:74:
09:db:53:ca:ee:d3:ae:a6:7c:4e:8b:45:68:db:fe:
76:5b:8a:8e:6c:27:04:c0:22:a8:a2:5c:24:2e:15:
62:d2:a2:45:33:a9:ac:db:f6:c5:b9:91:4b:16:96:
55:5d:97:cf:6f:9b:54:bf:79:b5:72:ed:68:bf:3b:
0b:c1:8f:ff:d1:7a:db:79:bc:8f:6b:9f:5b:96:66:
bf:e2:bc:a4:8d:b8:2e:7d:3d:64:1a:1f:9b:3e:c0:
2c:9a:6c:62:15:10:f4:80:43:99:dc:41:2e:ec:56:
d1:96:60:d0:07:db:fa:24:39:ff:c8:c8:9a:42:b2:
1c:41:93:8b:6c:bc:eb:35:c8:e7:be:d7:ca:77:b8:
a6:e8:7e:76:db:e3:12:5b:81:d4:24:59:b7:20:62:
32:41:77:34:3e:d5:f5:9a:f9:87:92:e2:b7:bb:53:
db:ad:f7:f1:82:f0:72:7e:08:27:de:68:69:9f:d7:
78:37:ed:c5:18:4f:aa:64:83:79:c5:53:b6:50:e4:
f1:a3:22:9c:75:93:3a:d5:12:e4:17:12:bc:34:a2:
ee:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:35:CB:40:78:8A:AF:F8:10:9B:AD:FD:0E:FA:1A:73:CD:4B:2D:B3
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/LDXLQHiKr_gQm639Dvoac81LLbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8460::/44
Signature Algorithm: sha256WithRSAEncryption
7d:b7:0e:84:40:52:f5:33:85:dd:ea:b6:d3:bd:a9:75:e2:15:
1b:b6:72:d6:2a:a7:0c:7a:46:d3:6a:0b:cc:59:ed:38:6f:94:
36:6c:31:af:fa:5a:f1:85:e2:0f:02:3c:5b:3e:23:43:51:95:
c8:e2:63:69:b7:2b:2e:02:5d:41:8b:a9:4c:90:eb:d4:40:6e:
af:bb:38:3a:e7:22:74:0d:4f:1d:52:dd:50:82:6c:be:a4:5a:
65:e6:38:29:76:df:c4:2d:87:63:a7:3b:ca:3d:53:e1:85:91:
0b:1c:b2:2b:40:c8:43:ef:08:6b:76:42:a1:db:57:3f:a5:1e:
6f:d0:41:26:66:45:f2:0a:6f:a5:b9:ab:13:79:ff:1b:f0:79:
3b:e0:e3:15:54:48:59:7a:98:08:d9:5e:40:20:7b:b4:95:0f:
b0:36:be:84:14:d3:92:35:85:59:79:b3:53:9f:c9:1a:49:c8:
a7:79:c2:68:46:51:c1:96:98:22:72:f2:98:a1:e0:17:53:cf:
b5:15:cf:3e:2f:07:a9:98:b6:98:0d:a2:80:2d:bf:0d:45:60:
f3:d9:88:05:a9:02:fd:37:58:cf:53:7b:80:a8:15:14:08:c2:
f2:b1:32:93:97:58:9d:11:a5:01:4a:12:37:fd:48:32:1b:56:
56:fa:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org