Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lc-z3MOE0HpX24m8pCqdWJ8--Sk.roa
File: lc-z3MOE0HpX24m8pCqdWJ8--Sk.roa (raw, json)
Hash identifier: Ae/Ew/UbVvWRQtsYepnY+AokdOg3QLuFHeht2J2m1LI=
Subject key identifier: 95:CF:B3:DC:C3:84:D0:7A:57:DB:89:BC:A4:2A:9D:58:9F:3E:F9:29
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018B439652AF667AF0580AFD7E19995193D2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lc-z3MOE0HpX24m8pCqdWJ8--Sk.roa
Signing time: Wed 18 Oct 2023 16:20:06 +0000
ROA not before: Wed 18 Oct 2023 16:20:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207252
IP address blocks: 2a10:cc40:270::/44 maxlen: 48
2a10:cc40:270::/48 maxlen: 48
2a0e:b107:1199::/48 maxlen: 48
2a06:de00:400::/38 maxlen: 48
2a06:de00:400::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Nov 2023 16:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:96:52:af:66:7a:f0:58:0a:fd:7e:19:99:51:93:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 18 16:20:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95cfb3dcc384d07a57db89bca42a9d589f3ef929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:ae:dd:55:86:9b:96:21:26:a4:47:5c:c9:
ee:ba:bb:6d:51:cb:65:12:d8:87:d4:90:b7:94:a6:
c3:2d:30:bf:18:78:76:27:18:64:05:10:e5:fc:9b:
86:d6:51:42:2a:1d:32:a6:07:28:1c:71:19:0b:21:
c3:b9:58:31:af:15:d1:94:6d:46:93:18:81:e3:cc:
36:cc:b2:1a:86:bb:f6:35:0c:87:95:ee:f7:ce:cb:
0b:8c:f8:07:e7:c7:4b:e1:56:0a:c8:9e:92:38:71:
0d:88:c6:9a:33:f7:07:95:2d:c1:d7:a0:88:c4:19:
f3:0f:fd:86:3d:4d:39:e4:11:e5:28:34:c7:03:58:
05:3f:57:73:a5:f4:86:7a:51:99:07:27:af:58:7c:
d0:8e:f3:87:f2:cd:a2:16:6e:b7:99:c4:87:eb:53:
df:55:6b:6a:35:b6:72:12:7d:39:7f:5e:3e:21:53:
cb:fa:c1:68:36:ca:67:5c:80:4b:fc:b1:e6:17:f4:
f0:f8:e2:4c:19:d5:e9:5b:e1:2c:2f:d9:44:dd:7c:
a8:21:88:33:cb:97:92:85:a8:66:5a:6b:48:b3:3c:
3e:83:a3:b5:8a:4d:2a:74:68:a4:39:39:98:21:28:
66:12:f7:4e:7f:10:8b:2d:ad:00:7c:8a:77:fc:14:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CF:B3:DC:C3:84:D0:7A:57:DB:89:BC:A4:2A:9D:58:9F:3E:F9:29
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lc-z3MOE0HpX24m8pCqdWJ8--Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:400::/38
2a0e:b107:1199::/48
2a10:cc40:270::/44
Signature Algorithm: sha256WithRSAEncryption
03:36:ad:1f:de:a2:a5:81:a7:8f:50:80:e9:da:4e:3a:2c:81:
7d:4a:17:57:d0:96:7e:04:cf:d8:50:2f:5f:05:5b:fb:68:39:
f3:01:7b:23:d8:c3:03:d2:a0:b2:18:db:77:34:23:ff:b1:e1:
57:ca:88:9e:ce:b9:2e:29:7e:54:38:04:57:71:cf:f1:b9:9b:
87:f5:3a:33:4e:e6:2a:e3:3a:a9:23:05:99:1d:3c:5a:a1:5f:
0c:e8:70:af:62:a8:6e:4b:d5:9a:30:cc:9f:b6:dd:47:6e:de:
d5:3e:aa:fc:a5:b0:71:69:db:65:e3:0e:ad:67:fe:11:e6:ac:
27:db:1c:37:e7:c0:72:8c:78:a9:c3:aa:5f:bd:fb:54:ec:63:
55:a8:df:d6:80:0b:7f:54:fb:58:3a:12:0a:9b:fb:ad:df:49:
b3:6c:fb:5b:98:d1:08:a9:b0:ff:50:34:87:f4:58:26:e3:da:
80:68:eb:20:17:95:7c:40:80:d8:bf:ae:51:6e:c0:18:da:5d:
16:5f:fa:65:4b:47:9b:50:bc:f9:02:8b:68:92:70:5c:32:42:
01:b1:3e:cb:aa:bd:95:4b:50:09:8d:eb:ab:7e:d9:bd:69:96:
9a:e5:89:7a:b8:7b:61:5f:c2:0e:3e:95:b3:f6:a6:b2:89:3c:
44:f2:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:11 2024 by rpki-client on console-ams.rpki-client.org