Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/LHaAuXjqILsxZVAxSAubjskVRoo.roa
File: LHaAuXjqILsxZVAxSAubjskVRoo.roa (raw, json)
Hash identifier: tyuJ0aULk1g5vun82gGLj2ADMbyZouFheNImkY+n3nA=
Subject key identifier: 2C:76:80:B9:78:EA:20:BB:31:65:50:31:48:0B:9B:8E:C9:15:46:8A
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 01856C25D7D21A392E647F17863DE1B0BE3F
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/LHaAuXjqILsxZVAxSAubjskVRoo.roa
Signing time: Sun 01 Jan 2023 07:04:57 +0000
ROA not before: Sun 01 Jan 2023 07:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1741
IP address blocks: 130.231.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:d7:d2:1a:39:2e:64:7f:17:86:3d:e1:b0:be:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: Jan 1 07:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c7680b978ea20bb31655031480b9b8ec915468a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:e7:18:5c:e5:2c:9e:fb:89:06:4e:43:ad:
30:b1:33:d8:b0:6e:fe:cf:6e:11:0b:a7:6f:21:14:
70:6d:ee:f2:8f:41:d6:ed:f4:9f:72:50:f5:75:a7:
6a:c6:b8:59:96:a0:92:c4:24:60:5b:6f:3e:cc:f3:
ae:cb:85:87:9f:24:18:f8:31:7d:f9:70:3b:00:ee:
64:b8:60:50:3b:7f:86:47:fd:b5:cf:c0:2c:f4:96:
9c:23:29:7c:bf:c6:8e:7c:ba:3c:55:1f:3d:82:94:
aa:d5:83:b7:74:d3:18:1a:a6:b4:00:e5:8d:a7:ce:
5a:03:aa:aa:96:ff:3c:12:21:03:11:9e:e9:13:dc:
fd:28:bb:bc:f4:02:9d:12:c5:5a:cd:24:6e:3b:82:
80:d7:27:76:d2:d5:0b:61:4b:2c:94:38:a6:00:33:
26:4b:9e:3f:df:ac:ad:6e:55:60:45:16:be:5a:4c:
61:25:db:30:5a:57:b2:81:22:42:e2:db:4f:7b:f3:
e3:51:70:98:d1:ff:e8:07:63:87:f7:d2:f6:49:2e:
0e:74:32:c8:32:87:87:eb:36:6f:b2:05:a2:8e:95:
ec:3c:04:df:d4:07:d5:33:41:6c:fa:49:ec:54:7b:
98:39:28:03:ce:ec:06:b6:34:f7:d0:40:de:9e:7d:
c3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:76:80:B9:78:EA:20:BB:31:65:50:31:48:0B:9B:8E:C9:15:46:8A
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/LHaAuXjqILsxZVAxSAubjskVRoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:23:57:0e:f0:35:75:ce:f5:a3:7f:2d:2d:73:93:91:5b:19:
f2:79:92:38:58:28:5b:37:1e:05:87:cd:6e:51:9e:dd:97:c3:
9f:96:ff:c1:93:5c:d1:ac:2b:7b:94:12:7b:f8:82:44:f4:ce:
89:bb:4a:78:e3:76:36:26:a8:9a:fe:d0:94:a0:07:a7:8b:27:
b0:bd:7a:50:a5:aa:dd:ed:86:e0:63:ea:01:9c:e0:26:7c:3f:
43:12:a0:3e:d1:33:47:c6:33:35:e6:0f:02:8c:2d:eb:de:04:
b8:94:ad:86:87:4b:38:3f:99:b1:df:01:5b:94:63:d5:ee:ba:
f8:d9:5c:a5:92:c0:45:dd:c1:b6:00:a6:7c:aa:2d:de:6b:3d:
40:df:ea:fd:10:c5:df:82:82:a1:74:18:c2:cd:73:7e:45:cd:
08:39:7f:ed:50:84:92:ee:c5:1e:a3:04:5f:a8:2a:19:fe:0f:
11:23:c0:d7:f1:33:81:60:05:47:d1:63:dc:6c:b7:ba:10:f4:
56:0c:a6:3c:e7:1b:8e:f0:73:2d:21:d0:0b:b0:4e:d5:39:27:
f9:05:4a:66:5f:93:36:00:8c:2e:7f:56:93:0c:fe:4b:7c:90:
63:41:bb:63:ec:ca:a6:62:a1:72:6a:a7:46:02:6b:a3:4f:a2:
97:df:d6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:10 2024 by rpki-client on console-ams.rpki-client.org