Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LN9JcveotKfYmGxU3jSK4MjJTxw.roa
File: LN9JcveotKfYmGxU3jSK4MjJTxw.roa (raw, json)
Hash identifier: l7JwoYa80SVyTPZXPNxpAXFpaTBJwnwveMFAGg6lQJM=
Subject key identifier: 2C:DF:49:72:F7:A8:B4:A7:D8:98:6C:54:DE:34:8A:E0:C8:C9:4F:1C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018651A464C42B7F1700BD1C7211F57B80E1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LN9JcveotKfYmGxU3jSK4MjJTxw.roa
Signing time: Tue 14 Feb 2023 20:36:13 +0000
ROA not before: Tue 14 Feb 2023 20:36:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208454
IP address blocks: 2a10:cc44:1d0::/44 maxlen: 48
2a10:2f00:140::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Feb 2023 05:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:51:a4:64:c4:2b:7f:17:00:bd:1c:72:11:f5:7b:80:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 14 20:36:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cdf4972f7a8b4a7d8986c54de348ae0c8c94f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:d1:1e:4e:2a:34:da:34:ac:fa:3f:fb:b5:
66:25:98:39:42:70:50:8a:43:b5:81:83:95:aa:6a:
bb:7f:50:5e:ee:2c:e7:01:8c:b2:d2:d8:9c:96:3c:
20:db:c0:ae:5f:c1:ed:c5:a7:30:26:92:e0:20:1d:
64:81:0c:1c:c3:d6:f4:f3:82:37:e9:89:ec:cb:34:
9c:6e:cb:f9:ec:e2:5e:4f:44:c6:a4:11:89:d9:d0:
fb:1e:8f:2d:6e:fa:b4:65:ba:cb:2c:49:8a:06:9a:
b7:73:da:a4:f4:e1:da:42:6f:e4:01:58:52:35:18:
1b:e2:fb:93:92:69:a6:e3:7e:5c:77:68:fa:8b:1d:
3e:58:c5:ed:5c:a7:2d:82:0c:b9:99:a7:1f:1b:b7:
35:6d:f6:09:4b:aa:e1:e6:0c:ba:a4:e5:6e:f4:3e:
16:c9:a0:c7:cd:db:fe:ff:db:ba:4e:75:b9:86:e0:
ce:b2:64:06:d5:1b:74:2d:13:f4:e1:e4:28:4f:85:
a8:e5:5e:92:f0:6f:b1:26:3b:c1:13:b9:6f:f3:10:
d2:db:c7:0d:9f:fe:64:37:bf:2e:17:3a:39:fd:ba:
f2:c4:6b:b9:cf:2b:7c:33:96:a2:8d:51:5f:97:bf:
69:42:b4:3b:b6:44:a8:05:fe:ce:c7:b1:ed:1a:91:
7c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DF:49:72:F7:A8:B4:A7:D8:98:6C:54:DE:34:8A:E0:C8:C9:4F:1C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LN9JcveotKfYmGxU3jSK4MjJTxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:140::/48
2a10:cc44:1d0::/44
Signature Algorithm: sha256WithRSAEncryption
02:59:53:92:01:6a:34:3b:46:e6:64:1a:c1:fd:87:b5:1b:89:
5b:78:a3:38:1e:01:c1:76:7c:04:65:19:13:1c:87:70:3e:fe:
56:73:6c:c6:2f:ff:22:6d:7c:3d:28:c6:2e:53:2b:f1:bf:4d:
cd:1a:44:de:d1:44:d3:42:e3:1c:cc:de:4e:5b:e3:be:0c:b3:
97:81:3e:5e:a9:71:dd:06:e2:a6:f8:4d:d3:f6:5e:e2:29:ae:
b7:d0:42:0b:f3:fd:23:07:fc:ed:49:7e:f7:db:a0:c3:06:ca:
9d:c6:8e:bf:5c:ae:d3:af:30:04:56:01:ec:d4:f0:f3:5a:7b:
77:28:2a:3c:0d:fb:df:b3:dc:25:a3:44:7b:0d:fa:e3:d3:a5:
95:6a:09:6e:69:29:82:8b:6f:8e:24:2a:26:bb:ee:56:37:fa:
b9:98:a2:52:92:37:3c:33:76:6f:ee:37:bb:1e:9e:6e:94:bc:
a7:e0:d1:4e:ec:4e:70:52:46:ce:77:a4:96:00:31:34:7f:25:
97:10:7d:50:d6:0a:3b:6d:ce:df:98:fd:ad:db:98:1f:fd:c6:
6e:cc:ff:03:d0:5d:33:81:3a:83:1d:ca:5b:a2:3c:a2:ca:eb:
ce:89:85:d6:45:88:34:24:89:64:9d:cc:11:05:bb:87:8f:de:
82:b5:b1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:00 2024 by rpki-client on console-ams.rpki-client.org