Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/LQ5rtnuxY5awIzSF0zvqwr1nJLQ.roa
File: LQ5rtnuxY5awIzSF0zvqwr1nJLQ.roa (raw, json)
Hash identifier: C5FEWok2aLATAJlHX6W18hKogY6LBZz8eW24AsZz83s=
Subject key identifier: 2D:0E:6B:B6:7B:B1:63:96:B0:23:34:85:D3:3B:EA:C2:BD:67:24:B4
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 01856FCBB257E645349BBE8601C9403E70D9
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/LQ5rtnuxY5awIzSF0zvqwr1nJLQ.roa
Signing time: Mon 02 Jan 2023 00:04:58 +0000
ROA not before: Mon 02 Jan 2023 00:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196610
IP address blocks: 2a02:c50:db8::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:b2:57:e6:45:34:9b:be:86:01:c9:40:3e:70:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Jan 2 00:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d0e6bb67bb16396b0233485d33beac2bd6724b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:ac:37:eb:6a:2f:7c:d3:a3:1e:7a:ee:89:
a1:76:87:6a:03:fb:37:d7:1c:48:8f:e0:a8:c4:2d:
18:bf:b2:6d:27:3a:2a:ea:d3:62:1f:83:d2:ef:b1:
eb:f2:0b:04:ec:fc:46:d9:7a:80:c0:f2:dc:88:2a:
a3:5c:fb:42:ea:ff:ba:31:f9:b4:60:02:15:5f:6e:
c7:b3:19:73:c7:a8:57:94:b6:31:71:64:f9:a2:85:
c7:d3:d5:6a:ba:fe:84:95:72:4a:c0:f5:91:dd:ac:
84:58:ff:e3:69:17:b3:09:a8:93:1b:2f:99:3a:ee:
41:71:89:21:75:92:2c:f0:40:b2:d8:38:a7:f4:a3:
2e:9b:7c:be:3a:95:27:6d:f8:8b:76:0f:b9:9d:73:
7f:ca:4f:bc:67:6a:20:d1:b4:91:f0:80:14:e4:6a:
71:e4:ed:01:02:c8:c0:c6:72:5f:f8:41:a1:ca:ce:
f0:e8:93:54:c0:6c:80:b2:7a:57:cc:68:f7:04:f3:
62:97:d6:19:5d:a6:3a:ab:4b:c5:25:7e:8f:91:b9:
11:b8:ed:af:02:02:01:2b:01:c4:34:a0:86:10:fe:
95:f4:cf:89:03:1e:82:d0:3f:ac:6d:3e:27:57:59:
f6:59:da:a1:a4:e0:e0:21:ed:ef:a3:fb:da:a9:09:
22:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0E:6B:B6:7B:B1:63:96:B0:23:34:85:D3:3B:EA:C2:BD:67:24:B4
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/LQ5rtnuxY5awIzSF0zvqwr1nJLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:c50:db8::/48
Signature Algorithm: sha256WithRSAEncryption
c6:15:39:b8:ec:d5:7f:aa:30:bb:48:ad:29:7d:a9:40:34:30:
38:1b:3d:5b:b7:bd:6f:92:1c:7c:e0:6b:64:d1:12:b2:84:2b:
27:a4:4f:9d:37:d7:68:ba:5f:dd:cc:dc:fb:4a:d7:de:46:d9:
2e:9d:d6:3e:d3:e2:9f:48:c6:c7:ec:9b:81:fb:08:f8:a8:e0:
8a:17:34:e0:54:10:fa:1c:fc:77:a2:6b:01:7e:ce:87:38:e4:
7e:dc:01:4d:ef:e1:36:2b:14:b3:7f:fd:51:30:30:c1:db:0a:
e7:d3:08:61:35:e3:32:b2:c5:93:17:c3:03:4e:f0:6d:8c:47:
08:f1:e1:b4:48:a8:94:7c:b3:6d:a3:d6:8b:d1:0b:b2:7f:89:
5b:40:3f:de:4f:58:2b:bb:d4:8b:e4:f9:cb:d3:8b:24:f9:07:
06:17:a4:4c:63:a0:29:e9:30:0f:0a:4f:7b:76:2c:1f:1e:18:
3c:46:43:f8:95:20:16:f2:bf:5a:54:8a:0f:94:fa:71:43:81:
d2:de:b6:6b:44:ba:49:18:a8:25:e3:0c:08:25:4e:85:8e:e3:
28:c9:f8:27:03:2e:c5:25:3a:b9:a3:e4:8f:44:7f:73:da:8e:
8f:ad:b4:c3:92:a2:74:92:b6:76:d6:7b:35:55:33:f1:54:9d:
41:f8:80:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:45 2024 by rpki-client on console-fra.rpki-client.org