Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LmBtAsr_p_Q6ID8UcvlFxHtuxoc.roa
File: LmBtAsr_p_Q6ID8UcvlFxHtuxoc.roa (raw, json)
Hash identifier: 7GNdVRVqAdGj88PRNtugEPyV7qPlpe2ox4DcTDts2WE=
Subject key identifier: 2E:60:6D:02:CA:FF:A7:F4:3A:20:3F:14:72:F9:45:C4:7B:6E:C6:87
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018BDD96FCFFC89C1A6D256E81205F6F4D68
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LmBtAsr_p_Q6ID8UcvlFxHtuxoc.roa
Signing time: Fri 17 Nov 2023 14:02:21 +0000
ROA not before: Fri 17 Nov 2023 14:02:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a0e:b107:19a0::/48 maxlen: 48
2a10:ccc0:3000::/48 maxlen: 48
2a06:de00:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 19 Nov 2023 00:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:96:fc:ff:c8:9c:1a:6d:25:6e:81:20:5f:6f:4d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 17 14:02:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e606d02caffa7f43a203f1472f945c47b6ec687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:ef:12:2a:a0:e5:6c:a4:d8:9f:e6:60:5d:
7b:d8:b2:05:cf:e8:66:ca:d0:b9:89:0c:f9:9f:e9:
51:65:fa:b8:dc:ad:81:36:0e:03:18:74:cf:0d:09:
db:85:af:63:6e:07:f3:91:f6:b0:b5:3f:d5:ea:8b:
83:7b:df:9c:96:f8:e7:fb:fb:73:0a:4c:68:a2:c2:
2d:c6:8f:88:c3:c1:05:dd:bc:d4:3e:c7:18:cd:45:
ae:54:92:7a:26:c7:9a:69:ab:40:92:89:5a:64:4e:
aa:ab:f5:bb:7c:60:a9:fc:23:7c:fe:4b:54:eb:be:
f6:e3:61:d9:73:05:fe:e0:2e:77:43:6b:34:fe:a0:
ba:f4:59:8a:c2:2a:7a:0d:e5:6c:8d:a5:7f:40:c2:
a9:2a:b8:0c:12:3f:99:f6:9a:82:08:f0:1b:f5:96:
ed:c7:15:2e:de:d4:b6:6e:e7:97:75:c9:0f:7d:06:
2c:10:90:6a:71:8b:d1:2b:d6:ba:7e:53:6d:93:cc:
aa:c2:4e:ec:37:2c:da:b1:92:c3:4a:3d:00:a8:a7:
04:27:12:27:42:f1:54:de:ae:1d:3a:5d:8f:5e:6e:
9d:73:7d:c2:5e:f9:67:05:6a:47:25:c2:6d:0e:c0:
f1:65:37:96:e9:5a:88:d0:75:35:10:b6:fb:8f:55:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:60:6D:02:CA:FF:A7:F4:3A:20:3F:14:72:F9:45:C4:7B:6E:C6:87
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LmBtAsr_p_Q6ID8UcvlFxHtuxoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:10::/48
2a0e:b107:19a0::/48
2a10:ccc0:3000::/48
Signature Algorithm: sha256WithRSAEncryption
6f:48:71:98:a1:7e:8c:8b:62:dc:44:37:dd:8f:d9:f7:26:30:
0a:1b:7f:51:63:cd:dc:1b:58:2b:c4:ba:2d:ab:31:da:2b:35:
f3:d1:ed:45:92:b9:d5:87:ed:e7:d0:2b:94:eb:fa:e5:51:a3:
1b:3e:23:27:2b:4e:db:85:f2:b1:cf:b0:e1:ec:90:ce:76:8b:
b0:43:9a:53:f7:f8:56:14:e4:94:73:8e:16:59:cf:d2:56:ea:
0c:32:39:22:c4:fe:0e:30:a6:71:b5:36:8c:c0:ad:55:36:44:
40:f1:79:b9:e4:2e:25:a5:a1:3b:7a:8a:96:da:26:c8:2b:04:
af:f4:94:80:a5:4a:cc:50:8f:00:b7:19:18:d9:7a:83:08:13:
33:95:ab:43:13:4f:66:09:42:43:18:0e:30:9f:29:65:3e:91:
bf:c5:9c:50:1c:f8:d6:5e:b5:b0:33:d5:3c:e4:65:08:82:9a:
c8:6d:18:f4:b5:fb:c1:cf:c2:8f:af:e6:cd:77:b5:f0:86:45:
77:89:5c:a3:05:b5:c3:0f:c9:f7:3b:0a:ef:87:2e:39:23:5e:
3b:26:8c:db:be:1c:a9:d6:41:fd:46:93:74:40:a3:cd:d0:4c:
88:8a:e6:8b:2a:d8:81:c9:e4:95:49:95:40:45:2f:99:3b:c1:
89:ac:27:1e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYvdlvz/yJwabSVugSBfb01oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMxMTE3MTQwMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTYwNmQwMmNhZmZhN2Y0M2EyMDNmMTQ3MmY5NDVjNDdiNmVjNjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4rvEiqg5Wyk2J/mYF172LIFz+hm
ytC5iQz5n+lRZfq43K2BNg4DGHTPDQnbha9jbgfzkfawtT/V6ouDe9+clvjn+/tz
CkxoosItxo+Iw8EF3bzUPscYzUWuVJJ6JseaaatAkolaZE6qq/W7fGCp/CN8/ktU
677242HZcwX+4C53Q2s0/qC69FmKwip6DeVsjaV/QMKpKrgMEj+Z9pqCCPAb9Zbt
xxUu3tS2bueXdckPfQYsEJBqcYvRK9a6flNtk8yqwk7sNyzasZLDSj0AqKcEJxIn
QvFU3q4dOl2PXm6dc33CXvlnBWpHJcJtDsDxZTeW6VqI0HU1ELb7j1UYJwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFC5gbQLK/6f0OiA/FHL5RcR7bsaHMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTG1CdEFzcl9wX1E2SUQ4VWN2bEZ4SHR1eG9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKgbeAAAQ
AwcAKg6xBxmgAwcAKhDMwDAAMA0GCSqGSIb3DQEBCwUAA4IBAQBvSHGYoX6Mi2Lc
RDfdj9n3JjAKG39RY83cG1grxLotqzHaKzXz0e1FkrnVh+3n0CuU6/rlUaMbPiMn
K07bhfKxz7Dh7JDOdouwQ5pT9/hWFOSUc44WWc/SVuoMMjkixP4OMKZxtTaMwK1V
NkRA8Xm55C4lpaE7eoqW2ibIKwSv9JSApUrMUI8AtxkY2XqDCBMzlatDE09mCUJD
GA4wnyllPpG/xZxQHPjWXrWwM9U85GUIgprIbRj0tfvBz8KPr+bNd7XwhkV3iVyj
BbXDD8n3Owrvhy45I147Jozbvhyp1kH9RpN0QKPN0EyIiuaLKtiByeSVSZVARS+Z
O8GJrCce
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:30 2024 by rpki-client on console-fra.rpki-client.org