Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LoiflaUGYyyJ5-N7jjLfDs7wgEE.roa
File: LoiflaUGYyyJ5-N7jjLfDs7wgEE.roa (raw, json)
Hash identifier: buJlu11Gg3QSMJhxjDLzK5vJyqu10U0b9B/TkpNHq9I=
Subject key identifier: 2E:88:9F:95:A5:06:63:2C:89:E7:E3:7B:8E:32:DF:0E:CE:F0:80:41
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188EEBFA662C89C1AD9031D857B95C987D7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LoiflaUGYyyJ5-N7jjLfDs7wgEE.roa
Signing time: Sat 24 Jun 2023 18:51:57 +0000
ROA not before: Sat 24 Jun 2023 18:51:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212516
IP address blocks: 2a0e:97c1:104::/48 maxlen: 48
2a0e:97c1:108::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Jul 2023 13:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ee:bf:a6:62:c8:9c:1a:d9:03:1d:85:7b:95:c9:87:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 24 18:51:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e889f95a506632c89e7e37b8e32df0ecef08041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:2f:19:6e:10:ec:00:38:a1:e6:84:67:bc:
b7:e6:6c:8e:20:81:70:9f:84:d4:d9:f9:29:55:52:
90:a1:80:31:8a:5e:ff:3f:cc:3d:c4:7e:f5:53:20:
73:89:09:2d:5c:1f:27:b3:74:f9:74:98:62:23:7a:
ff:bf:da:f7:a5:43:05:b9:1e:16:73:09:38:ea:c5:
9a:e0:c6:7b:72:cd:d4:be:f2:af:2d:ce:92:fb:73:
53:c0:cd:c5:53:44:db:6d:ac:69:96:9d:c1:ab:f2:
99:c7:44:45:18:1c:e7:07:17:98:d6:6e:3d:6e:db:
77:2e:6b:f5:a2:6a:69:d7:db:9e:9c:a9:68:09:a2:
6f:6e:6d:4e:1e:a6:e3:f4:b0:4f:64:4e:3d:9d:76:
9f:78:ad:34:40:f6:1a:38:1c:74:f0:24:5b:3a:af:
8f:33:02:17:5d:d7:7e:bd:55:5d:57:e6:00:92:c5:
99:09:a9:e9:bb:eb:33:ce:cf:7c:0d:c1:63:5e:45:
99:73:4e:05:5a:da:11:62:88:18:78:ea:5b:50:29:
9e:d4:1c:e8:1f:da:ba:86:6c:73:ab:33:b7:66:00:
ec:fc:1a:91:2b:c6:77:fd:ef:ff:f7:17:49:a7:00:
5a:8a:4a:db:2f:2c:de:cc:74:57:13:fe:ae:e9:34:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:88:9F:95:A5:06:63:2C:89:E7:E3:7B:8E:32:DF:0E:CE:F0:80:41
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LoiflaUGYyyJ5-N7jjLfDs7wgEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c1:104::/48
2a0e:97c1:108::/48
Signature Algorithm: sha256WithRSAEncryption
00:43:2e:a6:e3:90:72:bd:3f:b6:a6:32:b1:59:34:88:04:6f:
b5:d0:87:c3:b2:1b:b3:e0:d1:0c:cd:75:20:57:61:74:0a:7e:
26:f2:c1:3c:0b:ee:03:d6:f9:16:0e:ac:0e:99:bd:94:24:c3:
f3:0e:be:40:98:fb:9b:cb:93:ae:75:e1:4d:47:31:80:c9:85:
ab:4e:44:2c:86:ad:6b:12:60:6b:4c:61:c6:ed:1e:4e:3d:e2:
94:b1:ec:3f:60:cf:fd:09:b3:65:c9:7f:ac:15:3f:f1:45:85:
80:63:f0:8f:5d:29:e4:45:39:ec:6f:ca:d6:2d:54:c8:09:9f:
ca:14:94:fc:76:16:7f:d0:80:2a:56:c5:41:86:ac:ee:92:c1:
1c:aa:af:59:b5:7d:8b:e6:fa:41:c3:0a:22:1c:5f:79:4a:c7:
67:09:69:c3:66:be:23:c6:22:d8:68:09:68:21:39:29:ac:06:
4f:65:c0:77:9c:de:5f:c7:3b:1b:d6:3c:7a:cc:d6:35:b5:a2:
41:d7:70:e6:c3:cc:8d:da:9f:6c:b1:bb:94:1f:b8:28:1e:ca:
00:04:35:f8:de:25:71:bd:52:ae:4e:a5:04:b8:a0:20:91:00:
d2:4e:ce:c5:42:d8:03:29:e7:a9:d7:77:78:c5:ff:58:cf:3d:
07:81:78:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:00 2024 by rpki-client on console-ams.rpki-client.org