Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/LVWN2KeXWrKahsbV1ZRmr-eXhVY.roa
File: LVWN2KeXWrKahsbV1ZRmr-eXhVY.roa (raw, json)
Hash identifier: RgHEqU39oIUkojx5vqitGCLS+wrnTeVwyzVIoAkV1qI=
Subject key identifier: 2D:55:8D:D8:A7:97:5A:B2:9A:86:C6:D5:D5:94:66:AF:E7:97:85:56
Certificate issuer: /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial: 0185E4EAD4E92DEB9FB8F566A5D3B5B33949
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/LVWN2KeXWrKahsbV1ZRmr-eXhVY.roa
Signing time: Tue 24 Jan 2023 17:54:33 +0000
ROA not before: Tue 24 Jan 2023 17:54:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209319
IP address blocks: 2a0f:300::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:ea:d4:e9:2d:eb:9f:b8:f5:66:a5:d3:b5:b3:39:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Validity
Not Before: Jan 24 17:54:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d558dd8a7975ab29a86c6d5d59466afe7978556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:e6:a8:f9:2d:73:35:df:b5:a5:f1:ab:ec:
1f:f8:95:d4:07:d1:ce:d0:a0:11:64:07:81:0b:34:
c3:63:be:27:55:6f:02:d9:2c:6a:38:f6:41:b4:62:
8b:2c:6f:5b:98:99:ab:ee:7f:1b:c0:02:dc:2c:3e:
ef:fe:6e:3a:02:7c:e1:7c:0c:29:01:b3:9b:29:05:
13:80:23:24:83:34:37:7b:5a:95:d0:b6:41:d7:a6:
15:a4:f8:98:4e:c6:91:8c:af:85:a9:45:37:1e:11:
94:fc:46:d1:e5:3f:56:13:a3:e8:06:10:3f:02:c1:
13:24:d9:df:a5:ac:72:1d:29:02:03:cd:94:58:86:
70:ac:6a:52:a8:96:d9:77:59:e3:5e:52:66:5f:7f:
80:3a:13:6b:50:a7:f9:6b:c3:be:07:46:42:64:4f:
2a:f0:da:89:f6:fc:c7:06:32:e2:80:0f:64:a8:94:
7b:08:6c:0f:a7:d4:18:09:0b:0e:79:12:57:75:00:
27:e8:e8:fb:19:24:d7:5d:a1:40:59:dc:52:b9:6e:
3d:9a:4b:85:d8:d4:2d:dd:31:c9:8c:29:25:69:71:
39:4e:d0:2c:af:ac:e3:62:67:91:a0:19:69:f6:86:
f7:f7:ce:72:47:dd:0d:b0:5d:53:a2:d1:94:b1:9c:
0c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:55:8D:D8:A7:97:5A:B2:9A:86:C6:D5:D5:94:66:AF:E7:97:85:56
X509v3 Authority Key Identifier:
keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/LVWN2KeXWrKahsbV1ZRmr-eXhVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:300::/29
Signature Algorithm: sha256WithRSAEncryption
67:67:82:0c:9a:b3:d7:7a:ab:16:a6:bc:3c:2d:cf:31:40:f7:
56:7e:da:55:23:6d:7c:46:90:df:92:d4:84:1e:dc:d4:f5:1d:
57:08:48:fe:be:af:4a:29:c5:c2:61:3f:5f:14:51:fa:1e:2b:
fd:a4:ca:4a:8f:7b:42:da:86:56:11:21:35:94:94:a6:4b:0b:
c7:dd:39:bd:6c:97:49:b1:2d:4d:73:dc:95:8f:3b:76:2e:b1:
17:d9:7f:d6:f8:51:80:2e:20:33:cd:54:d4:e2:d6:db:f8:02:
f8:0b:10:0a:61:ad:32:b1:bd:c9:83:76:62:b6:de:89:5a:fd:
c4:54:36:4f:b6:f3:dc:12:d5:b0:81:44:08:7e:3c:d4:76:3b:
23:e0:b9:81:9e:2d:fb:6e:32:59:db:77:a6:6f:1a:2b:8f:5c:
0c:1c:f0:d0:4c:90:a0:e7:17:f9:6e:ac:2e:b7:70:31:18:fb:
c1:8c:63:54:e0:78:98:37:26:b2:ad:eb:8b:11:bb:2e:d5:87:
ea:60:d9:d0:d4:6d:c3:0a:6c:db:aa:8b:5e:c1:54:58:61:7d:
fe:f7:c0:ce:76:f6:1a:c8:31:a6:26:37:27:9c:27:ee:0a:66:
1d:88:1d:80:f8:80:04:b3:7b:9b:33:84:c5:e7:d3:ff:fa:a7:
90:5d:a0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:39 2024 by rpki-client on console-fra.rpki-client.org