Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lb6-676NbqksdHjCSEzPJrLLWe4.roa
File: lb6-676NbqksdHjCSEzPJrLLWe4.roa (raw, json)
Hash identifier: F1FZJtni+Mg5z/3gCp/EtcPy661V6/3BjebF7Ee6q3E=
Subject key identifier: 95:BE:BE:EB:BE:8D:6E:A9:2C:74:78:C2:48:4C:CF:26:B2:CB:59:EE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AE603D1F1502F7C4CB12EBB745DB1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lb6-676NbqksdHjCSEzPJrLLWe4.roa
Signing time: Tue 24 Jan 2023 16:09:46 +0000
ROA not before: Tue 24 Jan 2023 16:09:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209391
IP address blocks: 2a0e:b107:1c90::/48 maxlen: 48
2a10:cc40:1cf::/48 maxlen: 48
2a0e:b107:1c95::/48 maxlen: 48
2a10:cc40:1ca::/48 maxlen: 48
2a0e:b107:1c9a::/48 maxlen: 48
2a10:cc40:1c5::/48 maxlen: 48
2a0e:b107:1c9f::/48 maxlen: 48
2a10:cc40:1c0::/48 maxlen: 48
2a10:cc40:1c3::/48 maxlen: 48
2a0e:b107:1c93::/48 maxlen: 48
2a0e:b107:1c98::/48 maxlen: 48
2a10:cc40:1c7::/48 maxlen: 48
2a0e:b107:1c9d::/48 maxlen: 48
2a10:cc40:1c2::/48 maxlen: 48
2a10:cc40:1c0::/44 maxlen: 48
2a0e:b107:1c91::/48 maxlen: 48
2a0e:b107:1c96::/48 maxlen: 48
2a0e:b107:1c9b::/48 maxlen: 48
2a10:cc40:1cc::/48 maxlen: 48
2a0e:b107:1c94::/48 maxlen: 48
2a0e:b107:1c99::/48 maxlen: 48
2a10:cc40:1ce::/48 maxlen: 48
2a0e:b107:1c9e::/48 maxlen: 48
2a10:cc40:1c9::/48 maxlen: 48
2a10:cc40:1c4::/48 maxlen: 48
2a0e:b107:1c92::/48 maxlen: 48
2a10:cc40:1cd::/48 maxlen: 48
2a0e:b107:1c97::/48 maxlen: 48
2a10:cc40:1c8::/48 maxlen: 48
2a0e:b107:1c9c::/48 maxlen: 48
2a10:cc40:1cb::/48 maxlen: 48
2a10:cc40:1c6::/48 maxlen: 48
2a10:cc40:1c1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:e6:03:d1:f1:50:2f:7c:4c:b1:2e:bb:74:5d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95bebeebbe8d6ea92c7478c2484ccf26b2cb59ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:df:31:a5:84:f9:1b:c5:5f:07:43:47:21:
f6:ad:fa:8e:d6:b1:55:9d:2d:ed:6d:60:a2:28:29:
24:05:c0:df:90:17:94:43:ca:65:db:0e:10:f8:a8:
93:57:4d:d3:48:9b:59:91:24:33:fc:ca:db:c3:89:
0b:b5:c8:c0:be:db:ad:4e:a3:9e:7a:aa:53:b3:3b:
3b:55:2f:bf:f4:b8:a1:0e:d4:7b:ba:86:b2:37:58:
f1:47:6b:57:11:5a:02:aa:2a:9a:f1:23:df:3e:c8:
ea:e5:5f:0d:f5:49:2b:f7:bd:a2:3f:01:77:e4:8f:
cc:66:67:37:60:cb:a5:63:fb:e5:30:86:f4:51:3e:
d0:00:c1:b4:81:46:61:59:5c:5e:66:5d:fc:6f:b0:
67:b7:7a:9a:64:85:b6:de:b8:b7:c3:61:3e:a9:ad:
e7:08:1b:0d:14:23:69:c1:f4:95:66:c3:19:48:0c:
b0:42:5b:a5:27:fb:1d:e0:48:27:18:dd:a2:7f:62:
01:70:82:3c:33:cd:70:bd:e4:f6:f7:e2:b5:f2:61:
d2:33:08:de:1a:bc:55:16:8e:27:0f:67:a7:a4:a7:
b0:33:fc:1e:03:95:9d:f9:ff:f0:38:8f:ad:fb:64:
b3:ed:8b:50:e2:e3:df:00:e8:dc:54:42:26:d7:67:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BE:BE:EB:BE:8D:6E:A9:2C:74:78:C2:48:4C:CF:26:B2:CB:59:EE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lb6-676NbqksdHjCSEzPJrLLWe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c90::/44
2a10:cc40:1c0::/44
Signature Algorithm: sha256WithRSAEncryption
b5:e7:4e:80:8a:4f:d3:7d:fe:39:e8:07:b1:6a:1f:38:66:2a:
fc:f3:d6:2e:fe:f4:68:14:f9:38:d1:fb:21:51:44:c7:eb:16:
f0:cd:f3:6d:93:87:44:43:4c:52:fb:94:f7:80:ba:db:96:bb:
fe:24:c9:3e:58:cb:64:f8:e1:6d:8c:3a:12:60:f1:3a:14:56:
d6:5d:6f:f0:7d:3b:28:28:d2:5d:ec:20:f5:26:b1:ec:1f:4c:
1d:01:4b:21:69:89:2d:5d:e6:e2:3b:44:b4:df:94:9d:4d:d1:
6f:1e:3b:59:ea:c2:9d:a0:3c:ca:b6:ef:b4:ac:41:90:9f:5a:
69:21:db:da:d9:91:ad:bd:e9:22:6d:ce:34:01:b8:48:88:1e:
3f:bd:21:8b:a9:ef:23:93:9f:cf:c5:21:b2:92:d4:38:d7:cc:
1e:80:12:c3:03:16:86:3b:06:a6:68:36:ed:1f:de:ac:ae:69:
80:68:4e:7a:6b:f0:4a:16:5b:74:9e:e8:60:1b:5f:e6:ff:6a:
9c:28:e5:b3:ce:34:5c:da:30:b1:cc:42:af:41:da:2c:28:fa:
4f:1a:4e:4c:1e:92:91:6a:a2:d2:70:f1:d8:f9:cd:96:81:fe:
9a:66:d8:08:ce:4c:a2:b8:e3:82:7f:41:b1:27:87:55:0a:14:
bb:1d:d0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 00:30:34 2023 by rpki-client on console-ams.rpki-client.org