Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lPSldGwkOdNx6WH0fYjH5rFsVdU.roa
File: lPSldGwkOdNx6WH0fYjH5rFsVdU.roa (raw, json)
Hash identifier: T0iI/mJrG8QLdyuoymVQzBgBK2tk/ZvYG504jPBBMi4=
Subject key identifier: 94:F4:A5:74:6C:24:39:D3:71:E9:61:F4:7D:88:C7:E6:B1:6C:55:D5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0189F9E8C58B1C6BBC70DBF21B95EBA7194A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lPSldGwkOdNx6WH0fYjH5rFsVdU.roa
Signing time: Tue 15 Aug 2023 15:55:29 +0000
ROA not before: Tue 15 Aug 2023 15:55:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207252
IP address blocks: 2a10:cc40:270::/44 maxlen: 48
2a0e:b107:1199::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 26 Sep 2023 14:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f9:e8:c5:8b:1c:6b:bc:70:db:f2:1b:95:eb:a7:19:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 15 15:55:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94f4a5746c2439d371e961f47d88c7e6b16c55d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:60:15:b2:71:dc:e4:33:67:9f:03:b3:b4:
68:28:61:fc:75:00:fa:d5:41:fb:20:10:9e:c9:02:
44:6d:d8:7f:40:8c:3b:35:0b:99:6f:a6:83:8c:d8:
19:f4:12:5c:14:8a:75:e8:3e:54:0c:25:7f:b9:ac:
2d:38:e8:25:5f:ee:28:f9:00:f2:d7:e2:22:17:b2:
43:15:61:32:d2:06:8f:c3:fc:ba:25:e2:a2:92:d9:
ca:c1:f1:49:02:62:a0:ec:4a:73:f1:87:8d:1c:e0:
26:31:b8:0a:cf:0b:6b:7f:ea:2e:14:ec:65:ec:da:
14:42:61:1b:8a:fe:a5:8e:62:3d:ae:2a:79:12:dd:
c2:a1:1a:cc:7c:38:f5:80:6b:88:b9:81:0f:89:bd:
e9:53:54:d2:ec:7e:05:73:ac:4f:b9:82:f4:11:7d:
88:df:d0:97:84:98:32:5a:8f:59:2e:ac:1f:c0:e4:
3d:50:82:7d:9c:c0:43:77:38:08:7a:9a:5c:d8:58:
17:cb:b0:11:3f:9f:6a:9e:e7:42:da:71:62:5e:dd:
2d:b3:e6:9b:d3:3c:b4:0d:dd:08:b7:c1:29:74:b6:
2f:d1:fa:4e:10:a6:c2:e5:75:e8:b5:e8:75:5e:9c:
35:c9:7f:c3:f5:6a:aa:93:fd:d9:f9:dd:6d:e7:d2:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F4:A5:74:6C:24:39:D3:71:E9:61:F4:7D:88:C7:E6:B1:6C:55:D5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lPSldGwkOdNx6WH0fYjH5rFsVdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1199::/48
2a10:cc40:270::/44
Signature Algorithm: sha256WithRSAEncryption
14:86:98:d2:ea:e8:45:a5:0f:fe:0d:97:c1:0e:07:44:20:c2:
ad:66:74:4a:d2:4e:c9:ec:d5:02:46:e6:b2:db:ae:64:81:a8:
8f:de:ad:19:b2:6b:29:ce:65:41:90:d0:fd:52:c9:e2:da:a3:
95:55:6a:a0:69:66:cc:95:91:c4:bf:73:98:96:4d:7b:d1:cb:
51:3f:e6:a3:91:37:bc:e4:5c:f6:7d:67:a4:88:b4:93:db:8b:
e7:ed:e7:57:97:df:49:9c:90:ec:61:e7:9c:71:40:97:a3:dc:
6b:0d:4a:b7:59:0f:15:36:b2:20:fe:47:66:c4:7f:af:be:3c:
25:7f:54:a1:b5:91:e8:18:45:ed:61:79:88:ec:a4:d8:01:23:
2a:ca:85:56:50:41:ce:6d:2a:47:b4:8c:d9:e7:6a:1d:36:a2:
26:35:2d:9b:33:97:83:2b:72:e6:af:15:e9:65:de:68:07:98:
07:6a:1c:13:76:7e:47:1d:6e:e4:5a:d2:0f:94:db:63:fe:20:
16:33:70:b7:7e:31:f7:5c:b1:6a:f7:9d:ce:f0:46:fe:4c:d4:
a6:27:76:7c:9c:eb:b8:96:eb:a2:00:61:e7:6a:6a:6c:ea:e5:
c5:21:dc:3d:04:22:3a:ab:9d:b5:b2:28:56:86:82:29:c0:df:
b5:97:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:37 2024 by rpki-client on console-fra.rpki-client.org