Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LTR39jiX1LA_oOMuXzDMDa6gW6w.roa
File: LTR39jiX1LA_oOMuXzDMDa6gW6w.roa (raw, json)
Hash identifier: u3vqPW4NYTTuuspkgaban8ZjYRtH47ZVGdc7lq26iGg=
Subject key identifier: 2D:34:77:F6:38:97:D4:B0:3F:A0:E3:2E:5F:30:CC:0D:AE:A0:5B:AC
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246EBE6E32489F1C60970AA5C01FAC0
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LTR39jiX1LA_oOMuXzDMDa6gW6w.roa
Signing time: Mon 02 Jan 2023 11:38:48 +0000
ROA not before: Mon 02 Jan 2023 11:38:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213392
IP address blocks: 2a0c:9a40:8040::/43 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:eb:e6:e3:24:89:f1:c6:09:70:aa:5c:01:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d3477f63897d4b03fa0e32e5f30cc0daea05bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:5e:93:e5:e7:96:76:44:23:91:2e:51:21:
29:25:d9:37:68:d5:4d:aa:2d:8b:85:5b:43:e9:e4:
07:87:1c:8f:0a:56:69:e7:c4:5c:e8:5c:e3:c1:20:
20:a7:28:2d:57:25:4c:b5:0d:fe:48:10:0d:9a:9e:
05:4d:92:d9:b3:8e:f1:95:bc:0e:90:5f:c7:6a:26:
32:59:80:31:45:7a:45:9f:d3:b9:b1:8c:bc:83:61:
f9:94:7e:e0:6e:92:ff:9e:c9:b4:a4:a7:0d:28:db:
70:70:da:45:b1:d7:9c:f7:8a:99:74:a3:13:2f:08:
ab:90:5a:1b:01:f0:04:ac:8f:09:18:0f:5b:b3:87:
c8:e6:53:c9:ed:d8:56:48:fe:89:6e:40:e8:fb:c1:
5b:99:60:d6:b6:95:0d:b9:95:d9:6c:10:f1:63:36:
3e:38:6f:86:b8:1e:f1:8d:fa:97:cf:ba:f0:4e:bf:
67:5c:80:38:93:05:44:f8:5a:f0:ce:d6:55:d2:95:
8a:78:64:41:7d:c0:62:11:7f:16:2e:16:8b:f5:33:
83:4a:c9:12:8c:34:48:57:2c:e7:26:3e:91:b7:63:
0f:72:20:76:1d:ab:28:da:0d:ef:f4:a3:1d:d1:e5:
c7:b2:6c:89:e4:11:04:0f:07:cc:f6:db:b8:25:0f:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:34:77:F6:38:97:D4:B0:3F:A0:E3:2E:5F:30:CC:0D:AE:A0:5B:AC
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LTR39jiX1LA_oOMuXzDMDa6gW6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8040::/43
Signature Algorithm: sha256WithRSAEncryption
84:a3:a2:1b:7a:e7:6b:06:6d:41:8a:84:2a:67:1f:41:b9:6e:
c7:73:53:63:7c:4d:3d:79:1c:cf:34:ff:33:a4:26:ef:cf:d1:
1a:fb:3e:ef:d4:19:96:87:10:40:b2:10:17:9c:e1:69:a5:10:
be:5e:16:8d:77:05:a7:ad:84:c0:c7:37:72:1b:a3:45:dc:91:
01:18:62:b4:d5:9f:f7:6b:fb:34:45:00:f6:0e:5b:45:ae:17:
21:04:00:4e:a2:54:94:17:36:03:44:70:e4:e2:e7:ef:37:51:
dc:ab:c9:d3:02:a5:82:69:58:00:65:87:ae:44:99:6d:49:3c:
aa:ec:57:e8:ee:38:f1:31:08:9e:05:18:50:de:58:07:46:f9:
fa:cf:7f:95:16:53:14:54:0a:ef:33:e9:02:b3:27:4b:6f:f6:
87:64:ca:47:64:f2:0c:5b:14:75:24:1c:8a:5b:5e:d8:a2:09:
f8:98:6a:41:4f:75:65:02:58:23:27:33:b1:57:2c:5a:8a:c2:
a9:fd:c6:07:20:67:be:0f:42:3b:ec:82:9e:ea:bd:5e:91:60:
30:63:a1:7a:c3:8b:ba:ba:96:09:7c:9a:23:20:2a:88:95:d8:
23:c9:67:83:bf:26:ef:c5:92:63:aa:19:34:ef:ef:09:94:60:
b7:88:b7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:50 2024 by rpki-client on console-fra.rpki-client.org