Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/liw_zK63QgS5qH2cNU3PFCdBeII.roa
File: liw_zK63QgS5qH2cNU3PFCdBeII.roa (raw, json)
Hash identifier: /ZZlLgEhNWaq+QPB7bSxQ3Klb6ccbYXKuw8kugxBeuI=
Subject key identifier: 96:2C:3F:CC:AE:B7:42:04:B9:A8:7D:9C:35:4D:CF:14:27:41:78:82
Certificate issuer: /CN=7803558ea6e5165b3876097af75bf1e92a142cf2
Certificate serial: 01920F6E70283A38FF3F92646CBE200215E2
Authority key identifier: 78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/liw_zK63QgS5qH2cNU3PFCdBeII.roa
Signing time: Fri 20 Sep 2024 12:35:48 +0000
ROA not before: Fri 20 Sep 2024 12:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50340
IP address blocks: 2a06:1301:4210::/48 maxlen: 48
2a06:1301:4570::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Sep 2024 18:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0f:6e:70:28:3a:38:ff:3f:92:64:6c:be:20:02:15:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7803558ea6e5165b3876097af75bf1e92a142cf2
Validity
Not Before: Sep 20 12:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=962c3fccaeb74204b9a87d9c354dcf1427417882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:60:36:b7:6d:7b:f7:eb:14:5d:3a:a0:22:
6d:5d:c6:a9:ef:13:16:d6:f9:4b:5c:b4:07:b6:73:
81:78:9c:28:99:9d:de:0a:b3:95:d7:47:90:20:1c:
b1:86:09:98:8d:77:d5:11:12:cf:2a:4d:24:43:9a:
db:a2:ed:99:0b:89:3f:22:1f:34:15:d2:4f:ff:17:
3b:2d:4c:72:62:e2:70:b7:98:71:05:88:90:ce:b8:
c1:81:30:14:ad:98:30:fb:01:06:b8:d0:45:c9:ab:
14:5f:0b:2e:6d:77:d8:08:68:0c:96:83:28:51:ce:
47:00:d9:ac:1c:50:f5:fb:bb:52:57:c1:19:6a:47:
fd:c9:c9:96:4d:2b:f5:8a:01:bc:53:31:6b:e0:75:
d3:60:03:85:8b:1a:e1:6b:79:64:b1:f8:93:73:d6:
39:31:9b:13:6e:d0:30:59:d2:5a:37:59:42:58:df:
d9:c8:bd:67:d4:d7:1c:b4:f5:5d:11:d4:48:86:15:
d4:57:ad:0b:c8:26:de:a5:1e:cc:9e:a0:46:d0:1a:
21:24:0d:46:78:6f:dc:ee:b6:09:79:68:28:91:5d:
96:67:fc:33:da:ba:94:b1:14:6e:b1:ce:87:43:10:
3a:b7:03:72:92:d9:03:5b:02:ea:72:c3:2c:c4:5c:
cd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2C:3F:CC:AE:B7:42:04:B9:A8:7D:9C:35:4D:CF:14:27:41:78:82
X509v3 Authority Key Identifier:
keyid:78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/liw_zK63QgS5qH2cNU3PFCdBeII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/eANVjqblFls4dgl691vx6SoULPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1301:4210::/48
2a06:1301:4570::/48
Signature Algorithm: sha256WithRSAEncryption
80:16:5d:ac:c7:87:34:00:7c:a7:78:eb:ef:72:b0:93:e0:3a:
5b:49:87:ca:81:99:0e:b9:ae:d0:8d:b9:16:41:8f:bc:70:5a:
35:fb:7c:2d:40:f3:72:a2:b1:76:f3:75:a5:eb:9f:9b:4d:e8:
62:ad:cf:96:06:8f:20:da:37:34:2c:15:8e:12:b7:c7:0c:02:
27:24:af:3b:00:2d:fd:52:a5:4f:ee:69:bf:fd:dc:56:76:f4:
ab:88:ae:cd:ba:f8:fc:01:6f:2f:b7:b6:64:7c:2b:89:64:e0:
b6:73:6c:dd:b7:ac:63:b9:fc:e8:c5:7a:e9:c0:97:ca:24:f3:
ba:de:9e:ed:f9:df:74:4b:a0:e3:a6:12:7b:11:ec:f2:02:e0:
a3:ee:46:88:8e:03:2d:c1:95:6d:9e:4f:77:f3:8c:4a:bf:22:
08:50:66:58:8e:dc:bf:8a:9f:00:c2:bc:1d:b1:7c:6d:bc:db:
d6:61:ad:88:b0:d5:df:95:82:52:ae:ff:96:81:95:8b:e5:af:
8a:d2:15:82:c2:12:54:45:29:98:1d:dd:9b:15:0b:1d:59:ce:
86:83:2e:19:53:21:41:b9:f8:12:1f:d6:34:e7:a8:9a:6d:d6:
27:5b:fe:f5:4b:38:dd:45:65:15:d3:e6:e8:ca:d4:55:59:ce:
61:ce:f0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 20:31:13 2024 by rpki-client on console-fra.rpki-client.org