Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LkvUg0Ld5tzZKnHr_Og4h4MLs-c.roa
File: LkvUg0Ld5tzZKnHr_Og4h4MLs-c.roa (raw, json)
Hash identifier: jOKqaGfC9gzXA1XDHFYO1RAAL4+/aOyXEukGXaJ0m+U=
Subject key identifier: 2E:4B:D4:83:42:DD:E6:DC:D9:2A:71:EB:FC:E8:38:87:83:0B:B3:E7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0189C1C80517A09776FA4F29B191C031DF8D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LkvUg0Ld5tzZKnHr_Og4h4MLs-c.roa
Signing time: Fri 04 Aug 2023 18:20:58 +0000
ROA not before: Fri 04 Aug 2023 18:20:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48002
IP address blocks: 2a0e:b107:1450::/48 maxlen: 48
2a0e:b107:1452::/48 maxlen: 48
2a0e:b107:1454::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c1:c8:05:17:a0:97:76:fa:4f:29:b1:91:c0:31:df:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 4 18:20:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e4bd48342dde6dcd92a71ebfce83887830bb3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a9:7d:8e:3c:19:d0:9b:35:a9:8d:32:bf:28:
f7:69:df:30:d1:20:45:04:09:11:b0:92:7e:40:ee:
ed:f8:03:e3:4a:92:36:59:8e:9a:27:d8:0f:d4:be:
97:d4:f9:01:ee:3a:56:e6:64:9b:4e:c6:02:ee:20:
51:8a:ed:26:d7:3a:65:35:18:2b:76:aa:6d:cb:af:
16:45:2b:58:5a:03:6f:51:e1:6d:36:8d:f9:27:72:
61:6a:c8:d2:76:24:8a:e8:72:d2:fb:e4:64:f6:4e:
a0:16:1f:c1:73:4b:9d:78:67:27:5a:b8:88:c1:64:
8c:d5:06:03:92:23:ed:a4:29:7a:0e:0c:a6:91:17:
24:66:32:85:23:08:a6:51:41:17:35:f8:47:c2:25:
6f:43:0f:e6:d2:29:0a:25:81:8a:4f:d3:8f:a6:d2:
d7:45:15:24:51:cf:96:7b:56:4e:6d:83:92:8a:3e:
f6:c8:c8:10:a3:65:0e:4f:02:a5:99:f2:e6:89:fa:
f7:9a:f4:76:b9:26:4b:9d:71:9a:5e:ce:2a:5d:59:
02:e9:a8:e4:6c:11:10:91:cd:f3:02:af:6e:0d:39:
6e:b2:a5:c3:e8:1a:9f:f3:d0:c1:a9:99:df:dd:3d:
29:08:9b:67:71:63:83:59:3a:f3:92:d3:7a:2b:55:
d4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4B:D4:83:42:DD:E6:DC:D9:2A:71:EB:FC:E8:38:87:83:0B:B3:E7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LkvUg0Ld5tzZKnHr_Og4h4MLs-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1450::/48
2a0e:b107:1452::/48
2a0e:b107:1454::/48
Signature Algorithm: sha256WithRSAEncryption
92:fc:5d:d8:52:63:44:51:0d:d1:27:4c:9e:c1:92:f5:39:41:
25:8b:0f:3f:b7:cd:b7:8b:d3:00:30:9d:7c:db:b1:dc:d6:ad:
fe:9e:1f:52:b2:fd:f1:0d:2f:b5:ae:01:ef:d8:70:d8:fe:ae:
b3:e1:78:d5:35:1e:e7:5f:f3:31:aa:84:3c:5e:bb:ae:56:e6:
31:9f:a0:bf:c6:73:6c:25:c6:64:3a:41:d9:ae:f0:13:e5:60:
e4:bb:b1:67:df:dc:f2:4f:a5:27:b6:a5:8e:da:28:14:52:bb:
dd:07:c9:9a:a9:27:d6:aa:9d:79:99:2f:39:94:16:9f:f7:fc:
43:5f:d7:1f:c5:80:39:b8:dd:38:a4:ed:11:84:be:c4:0c:fc:
76:87:1a:02:d0:bd:1d:ea:89:cc:19:2e:71:12:73:7c:29:35:
22:b1:2f:4d:87:85:4f:50:ba:74:60:3f:82:c8:d1:8d:c6:cf:
25:03:3d:fe:46:1a:54:b4:fb:97:2d:98:ca:24:dd:e1:0a:ca:
1d:84:fa:0e:86:40:11:cf:3e:eb:af:c1:82:9b:04:27:ab:5b:
7a:68:86:0c:94:0b:2b:39:c1:ef:12:0a:7f:8f:9f:85:f6:49:
74:61:11:ad:ed:a9:b6:48:1d:5c:40:fa:c4:d4:84:78:35:a7:
ff:ea:0d:19
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYnByAUXoJd2+k8psZHAMd+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwODA0MTgyMDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTRiZDQ4MzQyZGRlNmRjZDkyYTcxZWJmY2U4Mzg4NzgzMGJiM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAial9jjwZ0Js1qY0yvyj3ad8w0SBF
BAkRsJJ+QO7t+APjSpI2WY6aJ9gP1L6X1PkB7jpW5mSbTsYC7iBRiu0m1zplNRgr
dqpty68WRStYWgNvUeFtNo35J3JhasjSdiSK6HLS++Rk9k6gFh/Bc0udeGcnWriI
wWSM1QYDkiPtpCl6DgymkRckZjKFIwimUUEXNfhHwiVvQw/m0ikKJYGKT9OPptLX
RRUkUc+We1ZObYOSij72yMgQo2UOTwKlmfLmifr3mvR2uSZLnXGaXs4qXVkC6ajk
bBEQkc3zAq9uDTlusqXD6Bqf89DBqZnf3T0pCJtncWODWTrzktN6K1XUqwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFC5L1INC3ebc2Spx6/zoOIeDC7PnMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTGt2VWcwTGQ1dHpaS25Icl9PZzRoNE1Mcy1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg6xBxRQ
AwcAKg6xBxRSAwcAKg6xBxRUMA0GCSqGSIb3DQEBCwUAA4IBAQCS/F3YUmNEUQ3R
J0yewZL1OUEliw8/t823i9MAMJ1827Hc1q3+nh9Ssv3xDS+1rgHv2HDY/q6z4XjV
NR7nX/MxqoQ8XruuVuYxn6C/xnNsJcZkOkHZrvAT5WDku7Fn39zyT6UntqWO2igU
UrvdB8maqSfWqp15mS85lBaf9/xDX9cfxYA5uN04pO0RhL7EDPx2hxoC0L0d6onM
GS5xEnN8KTUisS9Nh4VPULp0YD+CyNGNxs8lAz3+RhpUtPuXLZjKJN3hCsodhPoO
hkARzz7rr8GCmwQnq1t6aIYMlAsrOcHvEgp/j5+F9kl0YRGt7am2SB1cQPrE1IR4
Naf/6g0Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:00 2024 by rpki-client on console-ams.rpki-client.org