Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LWM82xR9emBraeYMMRiO4510qZc.roa
File: LWM82xR9emBraeYMMRiO4510qZc.roa (raw, json)
Hash identifier: ugl/grwtTwu5TmFsYfsyxliXrgTbLVJAcxMalFqLLjU=
Subject key identifier: 2D:63:3C:DB:14:7D:7A:60:6B:69:E6:0C:31:18:8E:E3:9D:74:A9:97
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018AA0AA4FF8B328EC2633C738231201108B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LWM82xR9emBraeYMMRiO4510qZc.roa
Signing time: Sun 17 Sep 2023 01:03:50 +0000
ROA not before: Sun 17 Sep 2023 01:03:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26042
IP address blocks: 2a0e:97c0:d50::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a0:aa:4f:f8:b3:28:ec:26:33:c7:38:23:12:01:10:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 17 01:03:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d633cdb147d7a606b69e60c31188ee39d74a997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:a3:f8:0b:7d:92:82:94:bb:ee:df:80:6f:
c9:3e:df:e0:c7:49:05:d7:27:f3:67:57:96:49:6e:
57:fd:35:e9:8b:65:0d:da:2d:b1:e0:eb:9a:73:1b:
cd:74:57:a4:a6:2a:fc:87:e6:fd:19:8f:50:85:95:
18:40:88:20:b2:db:75:b7:7d:4e:cd:20:bf:92:bc:
98:43:60:e1:a7:75:1e:70:f4:95:24:62:8c:fa:8a:
7b:38:7b:d5:b7:19:e1:5e:f4:e5:c0:e5:0a:b3:8e:
8b:a6:71:91:d0:8c:b2:62:fb:f3:26:a9:70:82:0e:
30:90:eb:4a:a6:d3:2d:e7:06:f7:47:30:c2:12:ff:
57:9c:7a:a4:17:d8:c7:21:9d:93:54:0d:fc:01:df:
c2:c4:3e:1f:e7:be:0c:21:df:42:2c:82:a4:7d:a7:
11:e4:b6:06:6f:de:ab:2e:b0:5c:30:b0:1a:b0:d5:
ca:07:4d:af:03:52:4c:35:17:6a:95:39:6a:c0:41:
69:15:3c:c5:58:f5:82:84:45:ed:27:34:1b:45:db:
66:fd:0e:6f:5e:0c:36:58:b5:3f:37:dc:09:7b:8d:
91:30:28:2e:2f:04:b7:f7:e2:60:40:4c:ce:79:09:
e2:ba:76:29:d4:5f:21:4c:6b:90:7a:f7:e8:56:6a:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:63:3C:DB:14:7D:7A:60:6B:69:E6:0C:31:18:8E:E3:9D:74:A9:97
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LWM82xR9emBraeYMMRiO4510qZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:d50::/44
Signature Algorithm: sha256WithRSAEncryption
9e:3f:6e:14:87:8b:8c:1a:b1:a6:1a:b6:4b:35:b9:c3:37:fd:
5a:26:23:d5:54:94:75:1b:29:84:60:24:db:58:57:50:98:5c:
72:1c:bc:f6:3e:4f:ce:85:9c:a3:43:23:d9:98:cd:03:17:e6:
8b:46:6e:58:21:c0:a8:04:d6:2f:48:21:20:54:4e:bf:9e:bd:
a6:65:e7:d0:dd:e4:d8:a2:2f:28:75:9b:e3:1a:27:cb:24:12:
44:70:00:22:d5:5d:13:43:6a:9c:ce:69:a1:35:fb:f3:2d:8b:
8b:3e:e4:bf:ba:b7:d3:4c:4d:87:79:37:9f:68:db:1b:85:bc:
aa:7c:31:f5:6c:f6:f6:01:70:64:e8:f4:7e:29:66:00:6d:b7:
32:74:ca:d1:a7:36:09:57:bf:22:e8:d2:94:8a:e1:72:9c:ee:
99:68:e0:2d:ab:39:18:51:74:b7:ae:cc:2b:76:2f:e6:b2:77:
22:31:bc:af:36:f2:b9:6a:af:a3:b2:2f:fb:19:5f:64:69:41:
d2:85:fc:fa:98:13:85:5e:c2:3c:85:ea:f0:2f:a5:3d:a9:e1:
a8:ec:ed:6c:bd:3e:25:a1:f1:11:f9:d2:78:a6:38:52:6d:d2:
2a:14:42:2a:10:1e:fa:8a:4d:40:64:90:f6:75:20:44:27:b1:
3a:c8:5a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:00 2024 by rpki-client on console-ams.rpki-client.org