Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LBGQZu_TjGQlLzQYd0jw-J5knuE.roa
File: LBGQZu_TjGQlLzQYd0jw-J5knuE.roa (raw, json)
Hash identifier: AzE5OK2UI/bxs+T7g1IIFWFq0HmTeOb360KlnmgK4q4=
Subject key identifier: 2C:11:90:66:EF:D3:8C:64:25:2F:34:18:77:48:F0:F8:9E:64:9E:E1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C21ABE3455F3B9EF6BB481695A8F86371
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LBGQZu_TjGQlLzQYd0jw-J5knuE.roa
Signing time: Thu 30 Nov 2023 19:19:22 +0000
ROA not before: Thu 30 Nov 2023 19:19:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44553
IP address blocks: 2a10:2f00:19e::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:21:ab:e3:45:5f:3b:9e:f6:bb:48:16:95:a8:f8:63:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 30 19:19:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c119066efd38c64252f34187748f0f89e649ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bb:6f:59:71:56:7a:ab:66:08:d8:f1:c4:73:
4c:01:d2:8f:9d:10:88:b7:2f:fa:8a:53:67:0a:88:
24:a4:97:6c:33:bd:db:25:f9:22:e8:71:9f:cc:c8:
6b:40:ba:90:57:bd:d1:20:57:69:a8:45:2b:27:5f:
8f:ad:63:2b:a9:43:bc:e1:05:54:74:b9:8b:f4:e9:
74:a8:6e:4c:d4:8f:3e:36:46:03:71:4d:37:8b:69:
b5:db:a8:e6:34:68:fe:81:7c:1f:cd:e7:02:10:fa:
8a:d0:ff:ed:d1:86:e0:62:46:6f:cf:1a:15:50:01:
25:d1:d4:8a:33:73:91:48:08:f4:5f:b8:cc:4a:59:
82:01:7d:06:a6:86:19:43:ae:21:c3:52:31:9c:52:
09:c2:66:22:21:61:c6:66:f1:ba:63:8f:18:0a:da:
6c:c7:75:63:93:9d:48:db:6b:1f:41:cd:07:e6:62:
db:16:97:0b:d3:99:0c:9a:f3:2f:d4:52:d8:ce:76:
d4:8f:d5:1b:a1:35:54:ae:f0:18:be:1f:2f:4f:c1:
c4:f8:29:74:ac:5c:19:85:ab:e7:ec:c8:ff:3d:10:
77:9f:d0:2b:ae:39:0d:87:d2:3f:62:21:b2:6c:13:
06:7a:95:d5:f3:a1:0e:df:9b:d9:f3:19:30:96:ca:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:11:90:66:EF:D3:8C:64:25:2F:34:18:77:48:F0:F8:9E:64:9E:E1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LBGQZu_TjGQlLzQYd0jw-J5knuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:19e::/48
Signature Algorithm: sha256WithRSAEncryption
81:99:c9:a1:15:82:19:12:8f:b9:66:f4:9c:5d:7d:97:fe:5c:
f5:d3:7f:a6:5a:5e:c6:e8:da:b4:f3:3c:ef:6e:6f:d9:fe:96:
b0:99:ae:a8:db:57:d4:c2:78:bc:bd:11:3e:99:80:3b:7b:09:
a6:63:ae:bf:7b:07:06:63:1f:9d:87:a1:2c:33:2f:70:7f:b9:
15:ce:66:06:34:59:a7:79:9f:24:b1:ef:49:91:bb:89:fd:75:
53:cb:16:63:32:76:a4:61:88:85:18:8f:9f:19:14:77:cb:04:
30:55:60:5d:82:09:1f:60:6f:4e:2a:5e:89:5d:4a:b7:3f:11:
87:0f:2e:6a:f1:ac:cd:bc:cd:e2:89:ab:72:84:34:8e:3a:2c:
97:a6:b0:c9:f7:2c:70:22:7a:56:7d:f7:f8:c4:7b:27:e6:2b:
7f:91:53:a3:27:42:0f:5d:c4:4a:3f:09:f2:4e:a1:88:9a:37:
0f:58:93:f2:2f:87:0f:78:c5:09:c9:2a:e8:bf:cc:d8:7c:aa:
d3:e3:9e:f8:e4:08:94:4d:1f:13:0a:92:63:7f:dc:0a:fa:b3:
4c:ec:2f:bb:9e:81:ea:b8:e5:97:7e:55:7d:2c:e1:cf:5b:f8:
cb:99:f9:de:56:00:64:9a:bb:50:a7:4a:e2:56:f1:e5:ea:80:
01:73:10:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:30 2024 by rpki-client on console-fra.rpki-client.org