Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LyrJRVAeWkhS3TfqroW-EKVrpK4.roa
File: LyrJRVAeWkhS3TfqroW-EKVrpK4.roa (raw, json)
Hash identifier: uJOmRFTtPEgOml0LawJ+Q0jBe840WtxR5cwdeZjLA9A=
Subject key identifier: 2F:2A:C9:45:50:1E:5A:48:52:DD:37:EA:AE:85:BE:10:A5:6B:A4:AE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C8332FEDB4AB585A8F4EA964D8AF4FCFD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LyrJRVAeWkhS3TfqroW-EKVrpK4.roa
Signing time: Tue 19 Dec 2023 17:50:06 +0000
ROA not before: Tue 19 Dec 2023 17:50:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198055
IP address blocks: 2a0e:b107:28a8::/48 maxlen: 48
2a0e:b107:1d12::/48 maxlen: 48
2a0e:b107:28a9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:83:32:fe:db:4a:b5:85:a8:f4:ea:96:4d:8a:f4:fc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 19 17:50:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f2ac945501e5a4852dd37eaae85be10a56ba4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:75:1b:da:a6:0d:79:8f:c8:fe:c1:d2:f7:
15:ff:55:6d:40:d8:66:62:62:59:49:6c:5a:66:33:
2f:c8:61:a9:45:d2:d5:a9:31:7f:84:e0:2a:f1:58:
4c:a6:4a:25:99:5b:a5:2c:5f:88:c5:b5:a2:c0:08:
70:04:3d:94:3f:dd:95:6a:02:5f:17:cd:60:6f:ff:
b3:04:cd:01:ef:73:fb:09:96:40:6f:6e:f5:37:69:
c7:4e:ac:a4:23:00:8d:b5:d7:46:15:f0:1c:77:ec:
c6:29:ad:48:bc:fc:b6:31:9f:c1:63:0d:7c:3b:fe:
04:e6:e2:7d:3a:93:53:6c:94:ff:90:24:4b:26:03:
6d:7f:06:56:44:92:90:69:89:f5:ac:35:fb:28:7a:
45:8e:6d:31:52:49:fe:f8:4e:e2:6d:bd:bb:72:da:
56:a6:e0:69:41:ea:0a:7a:90:9a:8e:87:f2:74:5e:
67:29:4f:0c:88:e1:f4:7f:c7:ac:9d:4e:ab:28:d4:
55:db:17:8d:86:43:94:2a:b0:bf:4a:eb:97:1f:6a:
70:17:05:3e:76:0d:58:4c:89:20:d3:43:93:f0:15:
0b:f0:b9:bf:19:59:3d:6b:cb:e4:71:f5:73:32:08:
53:b4:b5:6d:6f:a8:bd:5f:6e:b9:37:2c:0c:df:3d:
7e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2A:C9:45:50:1E:5A:48:52:DD:37:EA:AE:85:BE:10:A5:6B:A4:AE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LyrJRVAeWkhS3TfqroW-EKVrpK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d12::/48
2a0e:b107:28a8::/47
Signature Algorithm: sha256WithRSAEncryption
19:2a:13:3d:b5:28:33:76:41:0a:6d:12:7f:02:9d:5a:95:4a:
36:31:b9:17:a5:03:5c:6f:28:33:28:8a:c4:9a:96:60:00:b9:
ce:b5:71:bf:4a:e3:3c:aa:5d:2f:b8:bd:3d:90:7e:35:d7:71:
18:2f:fc:0e:e9:27:4e:c3:52:e9:8d:49:6a:3f:9e:31:77:cb:
65:5e:dc:be:c7:81:1b:bf:84:dd:51:f0:56:13:a5:e5:01:91:
d2:05:dd:be:56:d6:fc:6c:f2:a3:01:af:59:53:fa:83:9a:10:
51:ec:26:8c:89:7b:d9:34:06:ac:07:21:c3:37:af:c8:23:fc:
b9:95:99:97:60:84:60:35:60:5f:d2:9b:2e:09:fb:77:18:38:
ef:28:12:99:56:ef:a2:4a:fe:bf:b7:bc:da:df:4f:df:3c:ac:
c0:fd:78:49:90:9c:22:a5:eb:42:64:d0:5b:b5:92:a2:6d:d8:
2d:b1:1c:98:d9:1d:ca:7f:ec:5c:b3:fa:9d:f4:8e:e5:a0:5a:
81:4c:cd:94:06:8f:f3:be:99:f0:d3:98:48:5a:ef:6b:2a:b7:
1d:05:88:46:12:ad:93:60:c5:fd:16:17:b9:eb:e1:b4:2d:27:
a6:04:ea:81:ae:eb:54:b9:9c:51:c1:96:59:ee:dd:b8:88:92:
87:13:fb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:30 2024 by rpki-client on console-fra.rpki-client.org