Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lxnegY2wJwq7bB2Uo8NyNV_6qqQ.roa
File: lxnegY2wJwq7bB2Uo8NyNV_6qqQ.roa (raw, json)
Hash identifier: iHP6N7hAen+cGTuZbdGgiXdoi8eV3PE4vxfFUAhZSA0=
Subject key identifier: 97:19:DE:81:8D:B0:27:0A:BB:6C:1D:94:A3:C3:72:35:5F:FA:AA:A4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C0B01452AD7E16B2843330E25D25020D0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lxnegY2wJwq7bB2Uo8NyNV_6qqQ.roa
Signing time: Sun 26 Nov 2023 09:41:21 +0000
ROA not before: Sun 26 Nov 2023 09:41:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216411
IP address blocks: 2a0e:b107:2050::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0b:01:45:2a:d7:e1:6b:28:43:33:0e:25:d2:50:20:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 26 09:41:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9719de818db0270abb6c1d94a3c372355ffaaaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:c5:d2:73:a9:89:bb:d0:30:9f:b8:11:19:
0e:8c:55:e8:94:4b:0e:06:6b:81:3f:5c:3d:59:b7:
f3:e1:9d:24:e7:dc:3e:42:69:06:6f:79:05:c9:22:
3c:51:e5:8c:ba:ed:3f:5b:2d:5b:ce:b1:7d:e9:1c:
9a:ce:c8:9b:e2:bd:68:5d:43:d6:59:f4:4b:44:cb:
27:66:ef:f6:01:6c:2a:ee:56:14:8a:9d:11:ba:4d:
ba:f9:f2:a0:cf:6a:3c:53:1e:85:bd:ec:5f:f7:d0:
80:86:87:72:a9:9a:57:0d:f0:d7:c0:46:48:18:b8:
a9:58:3f:38:d2:29:df:60:bc:88:bd:33:ac:5c:f7:
c0:2b:8e:54:47:d7:42:7f:89:70:e7:f7:f3:19:0c:
0f:c7:9e:c7:7c:23:b0:84:14:12:a6:aa:d6:b4:9b:
94:82:42:af:fd:5a:d5:88:7e:62:59:f6:f7:e9:cd:
84:d5:8e:b2:9d:f9:04:35:d7:81:d8:9e:93:88:41:
56:4e:aa:7d:89:3e:82:df:53:ef:c2:72:42:b4:f9:
8f:be:3a:77:0f:e7:25:cd:c7:e6:49:90:87:0c:b3:
7b:da:3e:fa:6b:3b:5c:73:72:e8:bb:9d:70:ca:5d:
c0:cd:75:17:83:ae:67:d1:de:79:11:a0:6e:9c:e5:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:19:DE:81:8D:B0:27:0A:BB:6C:1D:94:A3:C3:72:35:5F:FA:AA:A4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lxnegY2wJwq7bB2Uo8NyNV_6qqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2050::/48
Signature Algorithm: sha256WithRSAEncryption
bd:0f:9e:6d:46:e7:d2:bf:ef:46:f7:af:7a:5c:67:da:13:c6:
95:e4:d2:a0:39:a6:25:45:78:32:c5:1f:09:80:fe:80:2d:37:
4d:5e:7a:a9:93:dc:32:82:ea:82:13:42:68:89:d7:91:ed:08:
30:4b:2b:76:01:8b:98:1e:ae:c5:fd:96:4e:1e:91:b4:d3:47:
e4:d3:13:9e:7f:a5:60:10:b0:ba:8f:a9:92:67:f1:bf:cb:b2:
eb:40:72:55:c1:d6:5d:1b:09:e9:79:92:66:c1:91:ae:dd:2c:
90:62:72:fd:71:13:7e:39:a8:92:05:5d:0f:cf:fc:2d:ec:3e:
b4:9c:63:e1:eb:d6:f2:07:73:8f:3d:f5:95:d4:fb:58:d3:fc:
3c:7b:dc:dd:0e:c6:78:5d:83:ea:ea:15:53:97:2b:37:f7:6b:
07:d7:55:3b:38:7d:44:e7:f9:6e:97:8c:07:05:5c:f8:9a:eb:
2d:3b:e4:64:eb:26:76:0a:11:8c:06:6e:ee:68:e2:14:5e:f4:
4a:f0:9f:be:4f:42:7f:72:67:e5:32:9e:1b:7c:65:46:df:3b:
ed:6c:f7:f7:cb:a3:d6:0a:de:19:f9:71:71:4c:a2:1c:b3:6e:
38:65:e3:7a:ee:39:f4:37:9d:d4:f7:c9:79:26:c2:8c:86:61:
ad:8e:3c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org