Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LXGABohPLzgDWz06WoLNP40H-r8.roa
File: LXGABohPLzgDWz06WoLNP40H-r8.roa (raw, json)
Hash identifier: +hg3ckjRzpU6tr0XT86/uEb5BLU43LoqzLQe5q09Hl4=
Subject key identifier: 2D:71:80:06:88:4F:2F:38:03:5B:3D:3A:5A:82:CD:3F:8D:07:FA:BF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A7B0F930989BDC34FE79B65F18887FBCB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LXGABohPLzgDWz06WoLNP40H-r8.roa
Signing time: Sat 09 Sep 2023 17:48:52 +0000
ROA not before: Sat 09 Sep 2023 17:48:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31898
IP address blocks: 2a0e:b107:360::/48 maxlen: 48
2a0e:b107:f50::/44 maxlen: 48
2a0e:b107:362::/48 maxlen: 48
2a0e:b107:364::/48 maxlen: 48
2a0e:b107:361::/48 maxlen: 48
2a0e:b107:363::/48 maxlen: 48
2a0e:97c0:aba::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 09 Sep 2023 17:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7b:0f:93:09:89:bd:c3:4f:e7:9b:65:f1:88:87:fb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 9 17:48:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d718006884f2f38035b3d3a5a82cd3f8d07fabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:9b:70:90:e2:a4:5d:f2:9c:6a:0e:71:fd:
bc:a7:b5:7e:0b:bf:af:70:4a:f1:4d:a8:39:0a:5a:
ac:6c:df:bd:49:15:82:2b:69:3c:cb:e4:bc:63:f2:
65:d0:dd:56:ef:8a:a5:36:80:8b:81:1b:d7:2f:1e:
f5:e7:86:3c:63:e8:87:b2:86:e2:08:06:ff:e9:f4:
f5:d2:da:4d:8f:e5:42:43:51:bc:71:b8:5a:64:d5:
31:b8:c0:be:0a:90:73:72:6e:2b:16:df:27:1b:be:
4d:5d:bc:e4:98:60:b2:a5:c9:a4:1c:d0:de:93:8f:
ad:23:60:8f:5d:e5:ea:3e:6d:73:1d:fa:b6:7a:57:
10:d4:d0:69:3e:b2:c3:50:cf:a9:ac:1a:44:71:57:
f8:8f:f2:ab:11:91:90:75:a8:5e:3a:ca:6e:7a:b1:
f9:25:c7:8b:21:db:59:dc:dc:d5:5d:36:42:4a:30:
2f:42:e8:a4:9f:79:1e:19:eb:49:7d:61:f9:c2:7a:
55:d7:55:15:80:16:15:0c:cc:ed:c3:32:ff:7a:42:
5c:ca:89:02:a5:01:08:5c:3f:69:9e:77:2b:88:66:
a3:a2:7a:ee:a7:18:4a:35:24:80:7f:f0:98:cc:fd:
87:92:a5:07:a6:9a:7b:b8:e3:aa:b4:a5:ae:3b:71:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:71:80:06:88:4F:2F:38:03:5B:3D:3A:5A:82:CD:3F:8D:07:FA:BF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LXGABohPLzgDWz06WoLNP40H-r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:aba::/48
2a0e:b107:360::-2a0e:b107:364:ffff:ffff:ffff:ffff:ffff
2a0e:b107:f50::/44
Signature Algorithm: sha256WithRSAEncryption
78:51:d5:e2:7f:c9:e1:05:c5:5a:1a:fb:b6:c8:31:f8:7a:35:
b1:52:8e:ef:b6:26:24:71:b1:40:53:54:2c:a0:d3:90:f3:77:
fd:37:97:72:3b:73:a7:3b:bf:d9:89:cb:6d:2c:2e:75:08:f2:
cd:d4:94:4b:30:ff:5d:d0:59:46:a9:9f:2f:93:eb:e5:95:88:
16:d2:77:36:73:53:51:d8:3f:f6:a3:79:0a:82:14:43:c6:d5:
97:68:d7:cf:c9:a0:0f:0f:e4:73:b1:08:c4:91:33:13:ba:c8:
a7:80:39:75:8d:6f:b0:f8:90:20:10:a8:dc:da:f5:94:c9:00:
72:25:88:68:d9:50:08:09:77:4e:32:2b:2b:91:d0:b0:c8:d9:
91:b3:5e:fb:39:25:da:13:8e:17:18:f3:ee:68:04:4c:57:c0:
06:19:77:33:90:a7:06:bc:9b:75:27:21:47:db:3a:23:62:10:
1d:07:41:b0:5c:98:bb:01:1e:66:51:37:be:39:ef:c3:9e:1a:
42:b3:db:31:62:1a:f3:9d:3a:7c:d3:02:75:6b:70:b9:af:88:
f3:5e:1c:a8:22:19:b2:43:69:5d:53:7c:33:62:5a:ef:5e:48:
e5:32:71:af:04:7f:8c:89:d9:aa:24:20:e5:3b:34:ec:3c:c4:
9d:46:14:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:00 2024 by rpki-client on console-ams.rpki-client.org