Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Lu-a1-7r3fYMbglrd3ubX58JZZU.roa
File: Lu-a1-7r3fYMbglrd3ubX58JZZU.roa (raw, json)
Hash identifier: 7gXjaS3yfhTDOKqyXmEvY68j61m7xqBdgyuihfXucC8=
Subject key identifier: 2E:EF:9A:D7:EE:EB:DD:F6:0C:6E:09:6B:77:7B:9B:5F:9F:09:65:95
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB7A538A182A20C480D36502AD85FF3
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Lu-a1-7r3fYMbglrd3ubX58JZZU.roa
Signing time: Tue 06 Feb 2024 18:39:18 +0000
ROA not before: Tue 06 Feb 2024 18:39:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211758
IP address blocks: 2a0f:b241:149::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b7:a5:38:a1:82:a2:0c:48:0d:36:50:2a:d8:5f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:39:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2eef9ad7eeebddf60c6e096b777b9b5f9f096595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:11:4a:30:c7:fd:55:05:9e:ea:1f:f3:5b:
67:b0:74:a1:a4:e4:5c:66:38:2e:e1:6d:ae:3e:e0:
a0:d6:cc:91:4b:9b:88:35:60:fa:d6:15:fb:29:13:
27:3c:84:86:8f:f1:3b:ea:0a:5f:a7:47:66:05:12:
80:40:85:64:da:85:62:45:51:05:bc:2e:b0:e4:0c:
f8:28:1d:d3:3b:7f:9b:f8:d9:4b:ae:66:7f:a3:da:
bd:27:e1:54:6c:b0:46:35:18:e5:9a:f5:48:ce:3f:
b3:54:f9:1c:c0:f0:c3:a5:cc:f2:28:00:20:2b:00:
eb:66:78:d5:e6:9d:66:e1:b9:5a:59:9a:a7:54:6a:
08:60:f4:29:18:d4:3c:94:da:1f:09:fc:6f:05:43:
4d:55:a8:ff:4e:32:c6:bb:e5:ef:7c:82:ad:d0:0c:
ee:d6:d9:75:0f:b3:bc:86:c4:45:64:6e:dc:bc:84:
c5:e7:7f:9f:7b:65:7b:88:2d:7a:60:9a:0c:f6:3c:
ad:e2:43:ec:22:de:29:93:a2:f5:fd:46:5b:c0:62:
18:bd:14:85:cc:54:27:83:1c:1f:fc:76:6a:34:5b:
b7:1c:27:27:94:43:29:12:9f:3d:d3:07:f4:81:46:
d0:3a:78:d0:8e:3b:2e:b1:f4:ef:73:ab:36:4e:cf:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EF:9A:D7:EE:EB:DD:F6:0C:6E:09:6B:77:7B:9B:5F:9F:09:65:95
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Lu-a1-7r3fYMbglrd3ubX58JZZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:149::/48
Signature Algorithm: sha256WithRSAEncryption
03:b7:06:c1:9b:9c:a5:64:eb:32:d2:3e:7d:14:0f:80:35:63:
b9:07:a0:c3:c3:a3:8c:cd:1b:74:98:42:15:fc:8e:bc:6b:13:
c1:0f:6e:83:2c:6e:7e:f3:ab:f3:b8:0b:43:f9:ec:35:18:63:
67:3a:63:f8:a9:2e:ed:9c:6c:90:f3:ff:7e:42:a2:50:e6:33:
58:b0:0a:77:47:ae:23:7c:a0:43:6f:dd:bb:cc:f0:e6:71:3d:
5e:01:b1:d0:dc:f6:79:c1:a0:de:ce:6e:c5:35:9b:db:1f:b0:
58:54:7d:75:86:9d:c8:d7:5b:c6:e3:cd:ea:f8:53:bd:f8:af:
da:f8:4b:4a:2e:01:9e:da:c4:aa:76:c9:38:e8:15:67:1f:bd:
f1:b3:13:40:40:ec:15:ed:88:a6:86:62:27:9e:a1:f8:c0:30:
9e:f3:b3:93:e6:2c:b4:fd:c3:25:06:9a:36:0c:aa:1b:1c:e9:
b2:ce:b1:fd:1c:5d:81:48:6c:cf:0a:0a:68:b3:5f:0e:f3:6d:
b3:b8:62:85:ce:12:52:12:bd:81:02:65:3e:ce:b8:fa:a2:57:
23:fe:62:08:19:0d:0a:71:18:9d:0f:3e:ff:3a:88:1a:68:9d:
f7:0f:47:d4:69:54:51:54:97:2f:21:4c:a2:1a:2c:46:84:8e:
aa:cf:59:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:08 2024 by rpki-client on console-ams.rpki-client.org