Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/LImeecSPZH17U2Nw8FENkiVj4gU.roa
File: LImeecSPZH17U2Nw8FENkiVj4gU.roa (raw, json)
Hash identifier: HoWtkWgCPSWXErJCZqbTk1qG9WdDVBpMQ4SKFPVIrOc=
Subject key identifier: 2C:89:9E:79:C4:8F:64:7D:7B:53:63:70:F0:51:0D:92:25:63:E2:05
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01903AC088271307ADAC879600D2156EA472
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/LImeecSPZH17U2Nw8FENkiVj4gU.roa
Signing time: Fri 21 Jun 2024 12:23:34 +0000
ROA not before: Fri 21 Jun 2024 12:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214647
IP address blocks: 2a14:67c0:300::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 18 Jul 2024 18:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:c0:88:27:13:07:ad:ac:87:96:00:d2:15:6e:a4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jun 21 12:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c899e79c48f647d7b536370f0510d922563e205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:30:7f:fa:c3:ed:25:c7:69:f4:24:5c:ba:
45:49:bf:30:14:9e:25:26:15:7a:06:08:24:ee:55:
69:37:6f:89:22:bd:87:cc:f7:99:11:6d:67:12:49:
66:cb:83:49:3e:00:65:21:13:91:77:0b:17:38:b2:
e1:3a:f6:1d:96:6d:08:41:92:e7:ff:c9:5c:e9:66:
1a:4c:55:b4:ff:f6:67:83:99:90:79:94:7e:be:28:
0b:0c:03:46:6e:f1:75:17:72:ac:8e:24:04:cb:d4:
9e:60:40:9c:ad:86:9f:f0:32:f7:bc:0e:24:90:94:
51:46:b6:00:d2:96:41:65:76:96:a2:7f:a2:0c:5f:
c4:fd:5e:ca:f1:6a:10:18:8b:40:82:88:b3:03:be:
1d:cb:bd:f1:77:21:63:ff:01:cc:18:bc:5a:bf:53:
d9:53:ab:1e:6e:83:3a:a3:67:8d:c6:2f:1a:37:73:
f5:28:cf:29:6a:2f:2e:f5:88:f8:68:c2:d0:ba:b3:
00:f9:aa:69:2c:1e:6a:28:06:69:1a:b2:f0:ce:e1:
53:a3:ae:ab:cd:00:06:b8:7c:be:bd:f0:a6:bc:4a:
e7:b3:60:6c:76:34:ca:23:02:99:2e:25:e3:9b:4a:
a5:e0:be:c3:84:32:49:1e:b8:f9:0b:b2:df:c7:20:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:89:9E:79:C4:8F:64:7D:7B:53:63:70:F0:51:0D:92:25:63:E2:05
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/LImeecSPZH17U2Nw8FENkiVj4gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c0:300::/44
Signature Algorithm: sha256WithRSAEncryption
68:9a:e7:ca:d9:57:7e:9f:83:9c:25:fc:6c:0b:a3:4c:17:2c:
20:c3:3c:15:b2:31:78:ec:c3:ad:d1:6d:ca:4f:93:ee:37:fc:
58:eb:49:b9:0a:0a:bc:c2:ed:42:56:6f:84:45:26:e2:e5:51:
0a:f0:58:27:f8:67:62:5d:50:32:4c:34:c6:37:b1:d6:88:c4:
6a:6e:37:79:ff:2d:24:b5:b4:49:6e:ad:f7:e8:f3:f3:72:83:
d9:a4:17:4e:15:3e:74:ac:1c:fe:06:55:98:38:a2:4a:b8:d8:
ae:ad:fc:40:b6:ff:1c:4f:b4:d4:a0:a3:03:f8:f1:ad:67:1c:
d1:f9:3e:f1:ad:87:23:4e:d0:a5:55:75:ac:4d:41:5e:fe:6e:
95:9a:24:d4:f1:27:5a:02:4c:7e:d7:ad:10:27:7c:0f:d3:5b:
f1:c0:ff:5b:d7:08:e8:45:ba:d4:31:fe:91:1b:4a:d4:05:69:
8b:37:0c:73:77:e8:44:20:f0:8b:a5:05:ec:10:db:02:9e:24:
ec:26:74:57:59:9b:9e:ed:b2:f5:6b:84:0b:d0:b3:75:78:7d:
80:be:96:ab:77:9c:63:bb:39:e0:60:83:79:ad:f4:e6:17:f7:
8d:cd:b6:64:5c:52:5e:11:b0:21:2e:20:55:85:17:32:54:0c:
78:76:1f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 20:10:51 2024 by rpki-client on console-fra.rpki-client.org