Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Lqwg_iWrwtsnostDkeFHmn2JHYY.roa
File: Lqwg_iWrwtsnostDkeFHmn2JHYY.roa (raw, json)
Hash identifier: /zvz+T9eaq93j/rqU7XmxaJx5vTzkD0pua7TC/oD+E4=
Subject key identifier: 2E:AC:20:FE:25:AB:C2:DB:27:A2:CB:43:91:E1:47:9A:7D:89:1D:86
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A6D89DE89E3C777DC324100AFD2FF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Lqwg_iWrwtsnostDkeFHmn2JHYY.roa
Signing time: Tue 02 Jan 2024 12:33:47 +0000
ROA not before: Tue 02 Jan 2024 12:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 2a00:1c8d::/32 maxlen: 32
2a00:1c8a::/32 maxlen: 32
2a00:1c8b::/32 maxlen: 32
2a00:1c89::/32 maxlen: 32
2a00:1c8c::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 04 Jan 2024 15:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:6d:89:de:89:e3:c7:77:dc:32:41:00:af:d2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2eac20fe25abc2db27a2cb4391e1479a7d891d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:55:ec:e8:41:d9:9b:18:c9:bc:3a:ee:d8:
14:f5:c5:6e:8f:ed:41:3c:90:3c:29:23:ff:c9:92:
5b:d6:d8:12:0e:ee:c0:19:1b:54:00:75:01:5d:ac:
4c:a6:d8:c4:8b:6d:80:36:0f:9a:f8:f8:54:a8:3f:
27:00:1c:da:ae:5f:64:24:4b:58:88:d2:58:b3:2e:
eb:fa:c6:21:73:ab:c2:9a:af:d6:dc:a3:c8:cc:d2:
1d:12:7e:9b:d6:1d:20:df:7a:bc:2d:b5:d8:7e:fd:
99:9b:00:2d:17:4c:6d:65:fd:1e:9e:5e:a9:b2:a3:
fe:24:c7:39:2f:c0:7a:52:d4:e3:8f:2c:f2:93:aa:
df:b8:dc:a3:c1:f0:8d:cb:00:ea:f3:61:7f:37:0b:
cb:fb:07:a7:86:43:06:87:74:92:6d:11:81:6c:bf:
4a:2c:ca:b5:9d:2a:55:b5:8b:60:8e:8a:35:94:58:
0d:19:fb:70:6d:ae:c0:32:55:a8:30:e8:a1:71:e0:
b6:4c:c3:bd:e2:3c:69:7f:1f:0b:04:f3:de:5d:9c:
0c:2f:90:3b:df:62:96:1d:bc:68:a3:35:01:45:0f:
fb:74:b7:05:28:63:59:1f:ca:19:70:c6:1d:15:59:
ef:31:11:5a:a2:91:1c:5b:a0:1e:aa:3c:f1:17:35:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AC:20:FE:25:AB:C2:DB:27:A2:CB:43:91:E1:47:9A:7D:89:1D:86
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Lqwg_iWrwtsnostDkeFHmn2JHYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1c89::-2a00:1c8d:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
72:74:46:20:c2:88:77:95:9c:a1:8d:61:e8:eb:43:2a:62:6d:
49:68:02:d1:0f:7b:bb:f9:85:1a:d9:88:e6:14:f1:11:78:f6:
15:d4:e2:43:1b:a1:75:53:e7:75:e5:68:c1:48:03:3b:87:92:
99:bb:01:0b:11:30:bc:d0:6f:d0:35:8d:d4:05:50:de:e6:6a:
db:6e:99:e7:ae:b1:18:03:ba:e8:1a:95:59:da:49:d8:49:25:
c0:d5:2a:05:1f:20:0b:e0:0f:60:eb:63:e5:e8:4e:90:d9:f2:
d4:b3:ce:2b:0e:db:83:09:e4:6c:c2:ad:9f:2e:d9:1a:9c:56:
06:fb:b2:7f:ac:0b:5e:f0:c4:80:be:ec:45:5b:b9:aa:52:5a:
ad:2d:6c:4f:34:95:be:13:9b:4a:64:fd:dc:04:31:b1:35:c4:
be:ee:50:d2:71:8d:e7:9f:29:bd:59:4f:c8:56:4b:c4:6b:96:
40:64:db:b4:a9:1e:39:4f:89:03:65:89:64:28:bb:95:bd:8c:
19:3a:d8:34:53:cc:23:ec:3d:0a:63:2f:e5:49:11:9a:2c:62:
67:60:c0:95:3b:93:e7:57:44:9b:8f:5c:5f:cc:76:8b:67:df:
5e:7f:bc:6d:7c:1c:7b:f8:80:6c:33:bf:dc:1a:cb:f6:6f:80:
6e:13:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:14 2024 by rpki-client on console-fra.rpki-client.org