Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/lc1qsuy9GwWi2r1GtUoaz6JtoOM.roa
File: lc1qsuy9GwWi2r1GtUoaz6JtoOM.roa (raw, json)
Hash identifier: izugf0CBssc2OoTqCqd6KupDC/0kBUrqgZQYuz1UA+U=
Subject key identifier: 95:CD:6A:B2:EC:BD:1B:05:A2:DA:BD:46:B5:4A:1A:CF:A2:6D:A0:E3
Certificate issuer: /CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Certificate serial: 0189DE97831E4618E14BC15291DB5E14CA7C
Authority key identifier: 6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/lc1qsuy9GwWi2r1GtUoaz6JtoOM.roa
Signing time: Thu 10 Aug 2023 08:36:58 +0000
ROA not before: Thu 10 Aug 2023 08:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48296
IP address blocks: 2a13:a8c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:97:83:1e:46:18:e1:4b:c1:52:91:db:5e:14:ca:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Validity
Not Before: Aug 10 08:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95cd6ab2ecbd1b05a2dabd46b54a1acfa26da0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:61:8d:eb:91:65:20:e1:a1:5d:e9:d2:86:
f1:19:bf:24:51:31:64:7c:87:2a:22:71:cd:a2:3f:
fb:b2:3c:0d:a8:b4:d9:b9:d6:94:62:da:d3:72:e9:
d1:be:12:61:a9:04:e6:41:96:e1:87:4c:e0:b3:c1:
34:45:aa:51:f4:dd:67:d8:63:c5:fd:7e:62:88:75:
28:d7:9c:bf:40:11:7e:b9:32:46:6a:00:71:04:73:
68:53:71:c5:15:4a:d6:aa:95:39:4e:72:30:a9:8f:
c0:e4:e4:e6:ef:7d:cb:3b:f0:d2:1e:bc:5a:42:87:
9c:36:4a:af:61:b5:6b:6e:e0:f9:13:07:62:11:42:
15:16:2f:87:fd:cb:20:aa:00:5b:25:c5:25:d9:17:
31:29:f1:ef:2a:77:99:39:c7:d5:eb:e7:14:3b:cc:
54:a6:3c:31:0e:c4:5d:c0:6a:dd:e3:2f:c1:68:d3:
6a:18:95:ae:4f:47:54:e1:3c:4b:53:fe:51:ae:09:
54:b3:9e:26:8d:3d:e3:13:28:1c:3a:43:45:65:3b:
5b:3d:ed:08:74:9b:5d:2d:4b:be:0c:78:04:5e:00:
93:0b:24:20:0c:6a:a1:85:a3:a0:a5:9c:dd:e4:23:
07:6e:89:47:75:9b:42:25:5d:61:2e:7f:50:d0:f5:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CD:6A:B2:EC:BD:1B:05:A2:DA:BD:46:B5:4A:1A:CF:A2:6D:A0:E3
X509v3 Authority Key Identifier:
keyid:6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/lc1qsuy9GwWi2r1GtUoaz6JtoOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a8c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
12:fd:25:06:78:e0:2b:76:cf:32:4b:ae:95:64:40:3e:ac:8f:
55:f5:c7:bd:9c:92:77:eb:3d:2f:41:01:36:e3:09:24:ba:23:
3e:8a:4b:78:e9:15:95:87:a6:0b:28:56:99:7d:df:e9:96:b9:
45:c9:d1:3a:3b:53:fb:32:0e:87:bf:05:9b:06:09:78:3d:c3:
c1:cc:c5:2d:1e:af:bc:d8:e9:66:ed:db:3b:97:f1:12:c2:ee:
ec:c9:fc:ae:1f:5d:c5:a7:60:ef:22:f2:2f:ea:a9:b6:54:33:
dc:ae:e4:95:62:e8:67:a8:51:4e:2e:1f:6a:f6:b7:ea:c3:38:
f1:e0:02:85:a4:03:98:6a:eb:c2:6b:b9:0b:e1:9e:ac:f6:c3:
0d:b1:4b:4c:b9:80:ab:03:4b:22:4b:5b:13:23:1a:78:cc:e6:
e4:38:00:2e:d4:fb:9b:b4:73:e2:9b:bc:30:63:b8:62:db:03:
a9:90:ed:48:f0:d7:2d:ee:e6:8d:8e:dc:0a:c0:a9:26:c7:f8:
31:eb:60:bb:12:85:28:5f:73:85:ac:54:5b:35:38:34:15:70:
c5:95:c0:2c:aa:5c:05:f7:74:b7:15:26:c7:5b:f7:b3:fb:d5:
96:42:32:37:50:69:c8:4d:ca:35:2c:2b:96:c1:3e:38:9e:40:
18:ae:e2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 15:04:21 2023 by rpki-client on console-fra.rpki-client.org