Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/llLGUEKFsbwT34Ab9iDVP1raokM.roa
File: llLGUEKFsbwT34Ab9iDVP1raokM.roa (raw, json)
Hash identifier: +gE/zRoskRgU08m9j+wiCRC5+hmeijbJF43xQ1+jyKI=
Subject key identifier: 96:52:C6:50:42:85:B1:BC:13:DF:80:1B:F6:20:D5:3F:5A:DA:A2:43
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018875FD84DB8422926339E63AD2D061C9AC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/llLGUEKFsbwT34Ab9iDVP1raokM.roa
Signing time: Thu 01 Jun 2023 08:05:28 +0000
ROA not before: Thu 01 Jun 2023 08:05:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199340
IP address blocks: 2a10:ccc2:9c00::/38 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 Jun 2023 08:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:fd:84:db:84:22:92:63:39:e6:3a:d2:d0:61:c9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 1 08:05:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9652c6504285b1bc13df801bf620d53f5adaa243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:42:28:52:3c:04:53:6a:7d:13:c0:48:d1:
7d:97:e2:6c:7d:dd:ea:e2:ac:6b:36:f3:a4:6a:b0:
5b:b4:b0:7d:af:f6:2f:be:ec:ae:92:ad:fa:29:f8:
b2:00:67:0c:c9:45:6f:e3:15:66:26:41:e1:e5:14:
a7:51:88:dc:6e:eb:77:9d:a6:b4:26:0b:1b:95:db:
2e:0d:b5:63:96:24:1c:7f:f8:99:02:8a:c0:97:35:
ba:69:cc:5f:2f:91:40:61:9e:71:51:8a:ed:5e:6a:
b2:05:54:73:ff:a2:34:5e:85:c8:39:86:75:58:1d:
85:a8:15:5a:93:d6:5e:d7:fa:b3:36:73:c5:36:f2:
5d:6b:05:3b:b3:ea:ce:ac:a3:2a:80:ec:59:3a:a4:
9a:44:5a:cd:ba:9a:f1:26:05:5d:b3:28:ab:9c:db:
84:f4:e0:16:b8:44:f7:71:9a:a0:2f:b6:de:48:d1:
c7:8f:59:74:23:fd:8c:dc:2a:a6:1f:fc:84:c5:2c:
19:a8:4f:70:ae:b8:55:d4:42:c5:c4:63:a9:8c:3f:
bc:59:35:2c:bf:a3:67:58:f3:a7:ea:fb:cb:86:20:
ec:ed:fd:22:d3:52:e2:33:c1:f6:65:76:81:2f:f0:
47:d0:b3:b9:d4:08:4b:b4:a5:02:af:1e:53:fd:2c:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:52:C6:50:42:85:B1:BC:13:DF:80:1B:F6:20:D5:3F:5A:DA:A2:43
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/llLGUEKFsbwT34Ab9iDVP1raokM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc2:9c00::/38
Signature Algorithm: sha256WithRSAEncryption
04:58:70:96:6e:c6:96:da:1e:4e:a3:f8:9c:61:c1:a0:a2:aa:
f0:f6:30:39:48:bf:89:28:98:e3:fe:37:b1:1a:69:d7:93:00:
99:e5:44:b2:74:c2:bc:dc:4d:ae:c8:a2:be:f6:d7:12:56:8f:
12:3f:89:36:f0:73:c2:e4:ca:62:ba:48:36:c5:92:4c:26:18:
88:a8:6f:cf:74:19:d2:a7:9d:f1:04:e1:61:e9:6f:ca:84:c2:
8e:32:1e:03:85:ae:92:7d:66:63:0d:4c:40:b8:7a:7e:e6:8f:
b9:0f:a9:c6:33:78:06:4a:7d:4c:84:ed:8b:ea:9f:98:b2:8c:
c3:4c:58:94:14:f8:ab:ea:a0:94:f9:3b:a6:a3:8d:50:05:8e:
35:75:19:01:72:a8:f3:90:17:83:0f:53:ca:b0:c2:e1:ea:89:
34:cb:57:9c:0b:8e:4a:53:64:b0:2f:45:67:00:8b:fd:d7:a4:
12:cd:43:c3:f4:c3:37:b7:5b:9c:2d:58:73:9f:52:3f:e1:e0:
76:3b:fc:97:f4:64:4b:91:54:81:44:63:ff:d4:1d:e3:c7:9a:
28:3d:b9:bd:78:18:1b:33:7e:9b:39:b2:b9:a0:3a:0f:72:07:
24:b0:f1:24:c2:5f:81:58:d4:54:47:51:c5:91:78:c3:80:b9:
ec:ce:5a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:37 2024 by rpki-client on console-fra.rpki-client.org