Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LG_vVmapk459gMDwb6Y0n8S83ZU.roa
File: LG_vVmapk459gMDwb6Y0n8S83ZU.roa (raw, json)
Hash identifier: 4YnrC1Ys7Ps7jOV1vyosmmorWYKcBW3ZcPxaCsSMkko=
Subject key identifier: 2C:6F:EF:56:66:A9:93:8E:7D:80:C0:F0:6F:A6:34:9F:C4:BC:DD:95
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8E255FB0D4B915A13B6256D569DFA
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LG_vVmapk459gMDwb6Y0n8S83ZU.roa
Signing time: Mon 01 Jan 2024 20:30:54 +0000
ROA not before: Mon 01 Jan 2024 20:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200367
IP address blocks: 2a0c:9a40:8ca0::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jan 2024 18:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e2:55:fb:0d:4b:91:5a:13:b6:25:6d:56:9d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c6fef5666a9938e7d80c0f06fa6349fc4bcdd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:18:2a:7a:02:e4:00:cf:9f:40:42:1e:98:47:
3b:a6:a8:df:e7:e5:f3:be:ad:6d:30:0c:e4:3b:75:
4d:05:0d:95:d3:47:17:9c:28:c8:40:5f:e5:66:57:
da:77:56:99:e6:df:91:be:d6:25:af:6f:0a:47:7e:
32:40:06:6d:69:3b:6f:7a:b3:4d:63:e5:0c:9f:45:
5b:b4:90:95:a0:90:4b:29:a7:31:53:ad:07:6c:54:
3f:7d:bd:c7:96:78:9d:14:92:a9:f9:e7:ae:50:25:
cb:aa:89:df:e6:4b:d6:38:52:88:2c:ac:6c:ca:18:
00:cf:8a:aa:e6:f6:ec:f8:11:ed:d4:69:61:ee:27:
ab:a0:84:ae:ce:7b:17:68:6d:8c:6f:ee:c2:ae:ff:
81:ae:a6:8d:e1:12:31:30:7a:5d:61:bf:95:3d:fd:
ac:5f:ea:7c:9e:ab:cb:a4:8e:bb:06:15:5d:70:7d:
ad:2d:fb:75:89:06:1b:8a:74:4f:1f:f3:8e:a3:a9:
8c:7e:5c:b6:be:fb:bf:71:e7:d5:53:74:59:c3:fc:
30:63:15:ad:da:59:16:65:8b:64:6d:d7:bf:90:13:
ae:90:a3:99:f5:8f:ab:01:f9:55:0f:d5:76:b6:81:
ef:6b:f1:37:6c:2f:36:e1:70:ff:ca:d8:5b:c2:8c:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6F:EF:56:66:A9:93:8E:7D:80:C0:F0:6F:A6:34:9F:C4:BC:DD:95
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LG_vVmapk459gMDwb6Y0n8S83ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8ca0::/44
Signature Algorithm: sha256WithRSAEncryption
52:b1:bc:d3:46:64:c3:6a:be:2a:b0:28:84:44:81:13:14:3f:
a4:d5:d9:24:3f:be:01:24:7d:4c:24:18:6c:38:29:43:35:ce:
af:b5:fc:b5:94:f3:c3:dc:35:76:b2:62:fa:c4:aa:9e:ff:dd:
bb:13:e3:6d:fd:d7:d9:e3:a8:80:56:f8:18:a7:ae:b7:22:a7:
9b:dd:6f:bc:11:c7:9b:f1:22:df:e7:83:dc:fa:41:57:b0:67:
b8:ae:c4:40:a2:38:74:93:22:b5:e1:66:82:a9:10:b1:05:b3:
b6:d7:e9:d4:ed:7e:ff:40:fe:e7:3d:27:a8:f1:02:36:90:84:
9a:c8:0c:3b:78:2c:a7:a0:6a:46:76:a2:9d:6e:73:31:05:f3:
5f:62:cf:f6:a4:a7:2d:de:99:76:af:b4:d3:a5:4a:80:cb:e4:
df:02:36:74:e6:c6:cb:66:b3:f6:53:20:f5:e3:78:ed:73:a5:
05:f6:4b:e9:14:8f:b9:40:94:65:31:ef:07:76:dd:92:59:fe:
b3:ab:08:bb:d1:13:cd:10:74:97:44:eb:c9:ff:db:bb:58:0f:
f1:ea:b4:05:9d:5e:e6:de:b9:6f:95:bd:0a:d2:9b:2e:4e:ff:
f0:c5:1c:b3:f9:07:92:1c:c8:23:1a:30:0d:19:02:fa:a8:6e:
c4:e6:f9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:50 2024 by rpki-client on console-fra.rpki-client.org