Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Leai7t17-9LdhRiswGTFZFKjMZ8.roa
File: Leai7t17-9LdhRiswGTFZFKjMZ8.roa (raw, json)
Hash identifier: iFoSXIfCItxG1kNJdL8Mn1BdBOVsoRj6GTd3ant9fNw=
Subject key identifier: 2D:E6:A2:EE:DD:7B:FB:D2:DD:85:18:AC:C0:64:C5:64:52:A3:31:9F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD1F9FBBD52E2C849DF29F6F1E7628
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Leai7t17-9LdhRiswGTFZFKjMZ8.roa
Signing time: Tue 02 Jan 2024 10:34:23 +0000
ROA not before: Tue 02 Jan 2024 10:34:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209735
IP address blocks: 2a06:de01:f4::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 16 Mar 2024 22:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:1f:9f:bb:d5:2e:2c:84:9d:f2:9f:6f:1e:76:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2de6a2eedd7bfbd2dd8518acc064c56452a3319f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:34:dc:48:50:b3:ce:91:1c:e9:ab:97:a9:
0a:ff:40:7c:81:53:c7:e0:b9:d8:f0:66:69:c6:24:
da:2b:f1:09:40:3c:e2:cf:96:0a:ba:5a:72:9d:18:
3d:74:7c:63:58:24:9a:16:88:dd:4a:ae:bf:ac:18:
cb:63:e0:0f:59:0a:b4:59:37:42:25:98:2b:cd:2e:
a2:0f:c2:60:20:38:2a:84:8d:b3:a0:7e:26:61:ee:
3e:f0:d3:c8:62:cc:f4:cb:fa:a9:92:52:11:f2:c2:
a4:ef:6b:3d:4b:1c:45:fb:c7:df:f1:7c:69:f3:19:
16:79:fd:47:33:d1:88:26:cd:e7:a2:3d:4e:ce:37:
c1:a3:4c:db:a8:f2:3d:99:29:fa:d4:28:32:af:f1:
fe:00:2a:06:a6:f3:8b:5d:5b:c1:9e:3d:6a:27:b6:
fc:05:87:1c:30:9b:5a:8c:f4:7a:c7:6d:4e:3a:a1:
b1:28:55:74:0c:cc:f3:ff:ca:a2:f3:bd:05:d9:2f:
c7:e5:99:17:81:1c:3b:20:3e:87:bb:0c:f5:ea:2a:
49:63:64:41:8a:50:6e:71:be:22:02:44:6d:3b:44:
c9:25:d2:71:d0:20:95:3c:e2:f3:e5:e2:70:28:51:
df:f9:69:7a:fa:83:7c:02:a9:3e:f2:0f:a8:fd:0e:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E6:A2:EE:DD:7B:FB:D2:DD:85:18:AC:C0:64:C5:64:52:A3:31:9F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Leai7t17-9LdhRiswGTFZFKjMZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:f4::/48
Signature Algorithm: sha256WithRSAEncryption
4c:52:40:16:fb:db:f6:15:7b:98:df:42:7a:1c:fe:1d:17:fc:
1e:21:26:c3:0d:d5:85:09:56:6a:61:a8:b5:3b:37:7c:a1:f8:
4f:df:23:90:f2:20:53:6e:a9:88:d0:c7:22:4a:fa:c4:e5:1e:
95:81:95:7d:1a:14:51:b2:9e:5e:82:f8:05:22:20:b1:10:11:
d9:ec:74:97:d8:23:82:39:1b:02:07:94:36:7c:5f:32:cc:65:
bf:dc:b0:a3:5c:8e:f6:31:9c:4e:b3:47:ba:13:e0:f4:51:f0:
86:b3:b8:df:8f:9e:aa:60:b8:fd:ab:ab:b1:2e:ce:c0:14:e4:
b7:8c:b0:02:0a:4f:f0:6f:91:68:93:2d:12:ae:47:a9:3d:e9:
c1:a1:70:8b:65:84:2f:be:e7:2c:83:0d:6e:88:fb:ba:79:6a:
3f:18:2d:be:a3:74:c8:76:b8:ad:a9:89:8d:9d:f1:10:c6:30:
81:11:8a:34:70:3e:99:3d:8b:1b:e0:bb:80:9e:08:43:95:54:
4c:67:34:d1:de:c9:9a:cd:22:b9:99:b9:d2:8d:8b:29:0d:e7:
b0:c8:1d:b4:4a:70:24:bb:18:7f:eb:b4:fc:06:f0:5f:4a:9a:
64:3b:9e:c0:21:25:85:0d:da:8d:d4:b4:c5:69:8c:34:34:88:
3b:d2:69:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 02:02:31 2024 by rpki-client on console-fra.rpki-client.org