Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lv_HSG6kFNlkgjDGniBKHv3d0FI.roa
File: lv_HSG6kFNlkgjDGniBKHv3d0FI.roa (raw, json)
Hash identifier: 39iybwil5a+Sy1F/zGDc9PMtYhzCaRyQE0fTOweWH1M=
Subject key identifier: 96:FF:C7:48:6E:A4:14:D9:64:82:30:C6:9E:20:4A:1E:FD:DD:D0:52
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA9E30243C607314BC466E9E146CFD4
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lv_HSG6kFNlkgjDGniBKHv3d0FI.roa
Signing time: Tue 06 Feb 2024 18:24:16 +0000
ROA not before: Tue 06 Feb 2024 18:24:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200766
IP address blocks: 2a0f:b241:d0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a9:e3:02:43:c6:07:31:4b:c4:66:e9:e1:46:cf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:24:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96ffc7486ea414d9648230c69e204a1efdddd052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e0:eb:15:30:86:4c:2c:e4:d0:49:c8:e1:1d:
ab:ad:62:30:63:54:4e:c1:b5:fe:5a:dc:4b:7a:30:
d7:65:1f:9d:d9:66:15:5e:05:db:ce:b5:3e:d3:25:
46:7f:92:c8:97:14:a4:e1:d5:33:cb:7f:37:ec:31:
6f:51:43:b3:46:f7:da:ae:65:f9:04:5c:8d:70:68:
d6:91:ba:3e:d2:0d:29:f5:09:97:2a:d6:0e:ee:72:
65:8c:b5:9b:8d:45:41:14:6b:2e:fb:35:e5:97:85:
c0:4f:70:51:d1:73:7b:fc:83:cc:7a:7d:39:29:c7:
bb:e8:f2:87:f9:5f:fd:a4:5f:73:67:cf:b8:82:15:
34:4c:87:53:af:ae:12:a1:a4:ce:f1:92:4b:75:f2:
68:09:83:20:4d:b0:71:42:de:6d:11:1d:2f:21:28:
10:59:2f:8d:e9:33:73:7f:84:1e:b8:d5:4d:0e:f6:
9d:d0:b8:3a:86:d4:2d:87:85:21:e9:83:46:e5:e7:
56:d8:35:1d:67:f5:38:63:46:18:b6:85:a3:0c:23:
bf:02:58:b9:b0:80:77:14:c3:bc:e5:82:6d:81:91:
d8:78:10:a6:3b:c6:5f:71:3f:9e:16:49:16:d4:6e:
9a:43:26:a1:17:9b:6c:ca:5a:2c:e0:d4:df:6c:4c:
02:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FF:C7:48:6E:A4:14:D9:64:82:30:C6:9E:20:4A:1E:FD:DD:D0:52
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/lv_HSG6kFNlkgjDGniBKHv3d0FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:d0::/48
Signature Algorithm: sha256WithRSAEncryption
56:09:b0:04:fc:92:26:eb:df:57:09:66:4d:8d:2d:c6:37:d7:
d6:c1:ee:8b:0b:cd:88:62:eb:d9:27:ec:e6:76:7d:80:14:b5:
d2:ce:bf:88:03:e9:ef:40:cc:84:5c:97:eb:e3:97:bb:0a:ee:
b9:cf:36:87:9e:41:fa:13:5d:3a:ca:63:65:50:f9:b4:fb:4b:
b9:e3:e2:16:15:09:54:22:ee:7f:e9:33:74:a6:eb:9b:5e:12:
98:72:53:4e:46:5b:64:88:51:f1:7b:4c:37:fd:15:a8:74:39:
6f:96:d4:29:bf:40:3b:93:da:b1:cf:27:7a:ad:86:61:3d:77:
d2:fe:fc:e1:6d:a7:5f:01:ef:4b:5a:c9:07:d2:64:f0:f7:25:
47:71:87:47:1c:3c:07:c3:5b:87:ab:a0:7f:38:cb:31:e5:03:
a6:a7:f0:ec:61:74:7d:fd:4e:7f:35:70:27:78:08:3c:23:79:
85:07:13:53:63:c1:4e:e7:be:1e:6d:eb:99:8c:a6:9b:48:d8:
6d:07:79:17:85:e6:f3:33:0c:b3:3f:f5:80:c5:21:af:29:18:
70:ed:d6:45:ea:e8:ad:9d:2d:e3:b6:db:5d:64:89:7e:58:12:
52:e3:01:65:b6:59:10:de:b8:88:f8:76:15:2b:7f:59:ec:e5:
02:70:e3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:12 2024 by rpki-client on console-fra.rpki-client.org