Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LAWboRnzPJ9V7_ZDHiq0X8qLeHw.roa
File: LAWboRnzPJ9V7_ZDHiq0X8qLeHw.roa (raw, json)
Hash identifier: +7B9ILGgiTbUwelMEKJJGCRE9/paZWsm0ufA9+DS/QI=
Subject key identifier: 2C:05:9B:A1:19:F3:3C:9F:55:EF:F6:43:1E:2A:B4:5F:CA:8B:78:7C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0186115DECCA35831F4F516105E45072DBED
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LAWboRnzPJ9V7_ZDHiq0X8qLeHw.roa
Signing time: Thu 02 Feb 2023 09:03:33 +0000
ROA not before: Thu 02 Feb 2023 09:03:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49768
IP address blocks: 2a10:cc42:1a0::/46 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:5d:ec:ca:35:83:1f:4f:51:61:05:e4:50:72:db:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 2 09:03:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c059ba119f33c9f55eff6431e2ab45fca8b787c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:31:cd:ec:52:70:09:04:45:34:60:0c:e9:5d:
42:e3:26:6f:de:b4:58:af:f0:17:1b:f3:d9:49:12:
71:92:e9:2d:71:a5:1e:ac:0b:de:a1:b7:a3:7e:52:
3e:9a:60:c3:ce:45:3b:53:b1:3a:8e:4f:b8:36:da:
4c:29:63:28:fd:54:a1:db:29:1a:54:a7:91:b3:ec:
78:dc:86:c9:29:40:61:76:b8:7a:57:0d:92:54:40:
e8:48:b6:e7:e6:61:b3:bc:ca:d8:2d:31:aa:8b:34:
54:c8:3a:31:48:1c:75:30:8c:a0:94:f5:f7:46:46:
78:f4:e8:f5:b1:ca:6f:c6:c7:cd:bc:36:fe:f1:04:
b1:74:c3:33:c5:02:e0:80:0a:d9:69:4c:af:d9:53:
b6:cc:ac:02:e7:69:30:9b:ed:62:69:c9:c7:8c:94:
07:ae:d7:d3:29:43:26:a9:35:28:f2:60:ea:0b:ae:
6b:73:15:a5:85:66:2b:6b:e8:84:8e:08:98:1c:58:
79:fe:67:66:b2:59:98:f6:a5:1e:6e:b9:e6:ce:d5:
28:b4:86:a3:7c:d1:6c:e0:9e:71:ae:82:c3:99:31:
82:7a:42:04:d1:59:1e:62:d7:47:e5:17:01:0a:80:
24:f4:95:e1:27:a3:e5:7a:ba:da:a4:b2:99:ec:29:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:05:9B:A1:19:F3:3C:9F:55:EF:F6:43:1E:2A:B4:5F:CA:8B:78:7C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LAWboRnzPJ9V7_ZDHiq0X8qLeHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc42:1a0::/46
Signature Algorithm: sha256WithRSAEncryption
73:07:a6:59:96:25:d9:fa:b0:6b:d4:bd:18:24:f2:ac:6a:6f:
13:69:ea:b1:2b:49:07:a1:a5:70:0e:47:ac:e2:f5:1d:cd:f5:
57:9b:aa:91:65:a1:ca:a7:d3:aa:df:91:54:ac:5f:fb:fe:ca:
32:23:7c:2a:bc:52:d9:ab:97:05:5c:3f:58:cd:55:ea:4d:a1:
c1:eb:a3:f2:88:aa:23:d0:26:f5:50:98:7e:a4:ac:84:1e:94:
ca:f8:1a:e4:1a:5f:58:69:a4:fb:f3:62:55:d7:4d:f2:25:10:
12:3c:d1:2e:20:21:24:47:c9:94:3c:1a:2a:b2:5d:29:d6:76:
28:d8:f3:95:b9:a7:34:7e:1c:8e:fe:8e:48:47:59:ba:3e:b1:
d7:0f:19:58:8f:b0:00:e9:6e:9a:12:c6:09:c0:e6:16:4d:ff:
3a:a1:5f:c8:fa:e8:97:d2:23:04:58:f4:e8:51:1f:c3:3a:1e:
fd:2d:9b:2e:79:26:89:49:89:bf:58:f9:22:58:ef:a4:8a:6f:
8e:ed:15:b1:84:11:de:0c:91:c5:a8:7b:7e:86:ab:22:40:38:
bc:30:76:5f:0e:31:bb:b0:41:8b:59:0a:b2:87:07:8f:9c:10:
8b:c5:a0:dd:d2:a0:6a:15:1a:b1:91:d8:da:be:b2:fe:e9:e5:
ba:cc:02:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:30 2024 by rpki-client on console-fra.rpki-client.org