Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/lfkYhJk2knOmdlAD0tQCVMl9a-s.roa
File: lfkYhJk2knOmdlAD0tQCVMl9a-s.roa (raw, json)
Hash identifier: POa6NpkmLowmGtR4KOqofqGhwGo6EHne/cQi7kFy+Qg=
Subject key identifier: 95:F9:18:84:99:36:92:73:A6:76:50:03:D2:D4:02:54:C9:7D:6B:EB
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 018C3ABC673E430FB6A13C8FD14790786864
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/lfkYhJk2knOmdlAD0tQCVMl9a-s.roa
Signing time: Tue 05 Dec 2023 16:07:54 +0000
ROA not before: Tue 05 Dec 2023 16:07:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56534
IP address blocks: 2a11:f185::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:bc:67:3e:43:0f:b6:a1:3c:8f:d1:47:90:78:68:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Dec 5 16:07:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95f9188499369273a6765003d2d40254c97d6beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:a1:53:f5:f5:d6:a9:03:0d:d7:79:7b:9f:
68:3f:28:ab:23:c2:70:a8:ba:70:b8:de:d7:3b:96:
17:c2:70:bb:3a:8b:be:46:82:85:03:d1:d3:b3:b1:
31:d7:0b:cb:89:17:59:a3:24:01:79:ba:2d:ac:c1:
d9:fe:14:d5:52:f3:8b:f7:7d:63:06:86:fa:bd:fa:
9e:60:4f:58:ab:a9:80:d1:0d:11:9e:83:14:70:69:
8c:4c:f7:1d:bd:2f:ae:7a:cd:4b:29:fc:e4:03:76:
58:97:57:6f:e9:8d:a1:8f:d3:c2:c4:b1:aa:b7:64:
a1:c9:42:67:0a:94:c7:5a:5b:56:12:e8:aa:43:8e:
d5:38:1e:53:97:5d:67:67:3c:f1:6d:f6:be:66:c3:
21:e8:21:9a:02:c0:c4:a7:85:1c:38:f8:2f:96:75:
4f:95:d9:07:a6:1f:ed:1b:2c:78:b4:af:22:a5:d0:
f1:13:3a:ff:36:f9:7a:10:85:fd:58:38:fa:e1:ab:
06:94:9b:44:17:f8:74:a6:d0:cc:ec:3b:1e:b1:a1:
ce:67:3c:6b:81:0f:22:59:91:4d:c8:38:76:c1:93:
64:ff:c2:c6:87:27:74:8d:2a:64:6d:56:2d:80:17:
23:87:33:9d:e0:69:1d:bc:d6:0c:db:20:a7:a1:48:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F9:18:84:99:36:92:73:A6:76:50:03:D2:D4:02:54:C9:7D:6B:EB
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/lfkYhJk2knOmdlAD0tQCVMl9a-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f185::/32
Signature Algorithm: sha256WithRSAEncryption
35:e3:3b:85:9f:a0:e0:57:a2:5d:41:1b:69:96:04:8d:4e:03:
f7:6e:eb:b6:78:34:3c:f9:72:59:f6:31:70:1a:07:09:a3:7a:
0e:fa:23:0b:b5:c3:1c:57:8d:f2:2f:3c:d1:c6:4c:2c:09:4b:
05:33:c5:a3:86:01:89:f9:dc:63:46:2e:bb:22:8a:59:1e:5c:
ff:9e:aa:7a:22:c7:02:c0:dd:a4:3d:73:0c:44:75:a4:5a:bd:
33:f5:b1:ae:d7:d6:8f:da:ee:f3:26:90:c5:a1:44:33:e4:05:
46:19:cf:e9:c0:9b:20:e0:73:ab:35:c1:9c:a6:eb:97:a1:79:
7f:7d:80:e3:53:e7:56:4a:e5:b7:9d:8d:93:56:b2:a8:7c:de:
7a:3d:82:a5:46:ea:1a:54:dd:42:cb:ab:f5:2c:32:5e:5f:e0:
4d:49:b9:18:5b:6a:c5:f7:30:34:ac:8c:fd:3f:3d:46:96:af:
44:a6:87:cb:90:2f:14:80:f6:43:4e:4c:07:d3:71:46:48:0a:
0a:ad:b0:f5:24:45:27:3b:37:52:6b:d2:7c:3c:da:7e:64:2d:
14:a5:43:46:11:e2:22:d6:b1:58:a6:07:29:c4:88:b2:1e:0b:
01:65:5b:ab:6c:a6:1b:24:33:81:6a:7a:2c:f9:21:5e:a8:ca:
e4:b8:5c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:18 2024 by rpki-client on console-ams.rpki-client.org