Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/LC0D4517S7zIZTogVQA4WA___ug.roa
File: LC0D4517S7zIZTogVQA4WA___ug.roa (raw, json)
Hash identifier: M+FVh9PXXc97o7Jyo7V1nBc/f1RGiF00u2Rjvk4qQ1o=
Subject key identifier: 2C:2D:03:E3:9D:7B:4B:BC:C8:65:3A:20:55:00:38:58:0F:FF:FE:E8
Certificate issuer: /CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Certificate serial: 0189DFD4791CC756B0FE28546A3E7A46C2E2
Authority key identifier: 6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/LC0D4517S7zIZTogVQA4WA___ug.roa
Signing time: Thu 10 Aug 2023 14:23:10 +0000
ROA not before: Thu 10 Aug 2023 14:23:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48296
IP address blocks: 2a13:a8c0:1::/48 maxlen: 48
2a13:a8c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:d4:79:1c:c7:56:b0:fe:28:54:6a:3e:7a:46:c2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Validity
Not Before: Aug 10 14:23:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c2d03e39d7b4bbcc8653a20550038580ffffee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:53:ca:78:27:2f:98:a1:e1:98:04:30:ee:
fe:3d:e8:f3:de:97:ac:4a:00:1c:60:d5:64:b6:57:
18:8e:ef:d4:23:27:4d:a7:33:b6:d5:fa:c0:db:ed:
cd:26:4f:c5:ab:18:15:d5:7f:84:3d:aa:10:2e:a8:
82:6a:9f:0c:94:d0:bb:41:3c:0b:55:3e:99:54:0b:
6a:3b:1c:73:dd:d7:f9:80:e1:dd:ca:f6:46:25:0c:
76:6a:64:c9:2a:7c:12:ac:d4:64:bb:33:01:4c:95:
44:d9:a7:d1:cc:c7:7b:2a:72:28:53:de:b6:e6:7b:
8b:ce:fb:64:2f:5c:46:19:fb:9e:70:9e:85:f0:3f:
ed:73:09:a2:c8:53:d5:a9:c3:68:17:1c:80:b2:30:
bd:cb:f6:b9:a1:96:1d:c9:49:f9:f7:4b:7a:df:14:
cb:d1:dd:55:89:88:6f:12:d3:a2:e6:e0:bf:a1:6b:
00:df:8e:44:e6:3f:1c:0c:4f:30:43:50:b6:71:1a:
0c:7e:b1:50:29:5c:a3:e4:69:5b:44:05:ec:90:8f:
2e:db:f3:4e:ca:48:70:e8:a4:a5:72:5e:0c:a6:df:
b9:79:ca:e0:44:8b:84:ad:4b:b2:d5:84:29:b1:a1:
01:4d:86:ad:6b:d9:23:be:eb:71:da:01:5b:e1:d3:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2D:03:E3:9D:7B:4B:BC:C8:65:3A:20:55:00:38:58:0F:FF:FE:E8
X509v3 Authority Key Identifier:
keyid:6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/LC0D4517S7zIZTogVQA4WA___ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a8c0:1::-2a13:a8c0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
43:f6:0e:22:34:95:8d:d8:f9:03:d0:4b:7a:78:23:40:ad:4c:
28:23:d4:5e:89:fd:eb:59:4b:8b:aa:fd:d3:f2:c8:eb:17:01:
df:29:76:08:e3:78:0a:2c:13:5e:1e:03:d0:5f:00:61:01:be:
8e:47:88:09:8e:5f:f0:4a:a0:78:df:3a:76:86:78:bf:f5:11:
94:0a:39:32:bc:ad:67:08:de:7c:da:cf:d8:ff:e6:ee:89:3b:
0e:6f:85:01:0c:33:d5:80:14:f6:32:2f:12:7b:d6:53:be:54:
64:b5:39:86:21:ce:8a:84:bf:92:35:7a:2e:1e:9c:ef:df:4b:
f6:5b:47:f3:04:da:d1:ac:d4:01:c8:c4:d7:96:6b:2d:fa:ef:
8b:86:38:fa:a0:35:21:f6:09:1f:4e:05:a0:63:a0:1b:7b:55:
13:ec:b1:d8:22:e1:3a:f8:57:c0:a7:b1:9d:b0:6e:2e:94:8f:
51:29:a7:35:6e:df:ef:87:2f:c4:46:98:fa:e0:81:de:f2:4b:
60:e5:63:2a:b1:26:d2:a4:43:89:61:3c:44:af:de:c6:96:80:
34:ed:61:c8:2b:98:b9:76:ca:5d:f2:98:87:c4:89:75:09:9b:
b8:d7:fc:69:cf:8c:75:8d:08:7f:dc:63:3a:e3:fb:76:3e:08:
70:2a:c9:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:24 2024 by rpki-client on console-fra.rpki-client.org