Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/LiRS3WzMvXVKrmJfn99oqcsfdME.roa
File: LiRS3WzMvXVKrmJfn99oqcsfdME.roa (raw, json)
Hash identifier: TSFEXgK3y1AH09cSrkc582ueutL4JmGBK/r0bU/Y+LU=
Subject key identifier: 2E:24:52:DD:6C:CC:BD:75:4A:AE:62:5F:9F:DF:68:A9:CB:1F:74:C1
Certificate issuer: /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial: 018D44A308D5CCA148C0EA1064A5ADEF240F
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/LiRS3WzMvXVKrmJfn99oqcsfdME.roa
Signing time: Fri 26 Jan 2024 07:19:11 +0000
ROA not before: Fri 26 Jan 2024 07:19:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60504
IP address blocks: 2a13:82c0::/32 maxlen: 32
2a13:82c1::/32 maxlen: 32
2a13:82c2::/32 maxlen: 32
2a13:82c4:1::/48 maxlen: 48
2a13:82c4:2::/48 maxlen: 48
2a13:82c5:1000::/36 maxlen: 36
2a13:82c5:1100::/40 maxlen: 40
2a13:82c5:1200::/40 maxlen: 40
2a13:82c5:1300::/40 maxlen: 40
2a13:82c5:1400::/40 maxlen: 40
2a13:82c5:1500::/40 maxlen: 40
2a13:82c5:1600::/40 maxlen: 40
2a13:82c5:1700::/40 maxlen: 40
2a13:82c5:1800::/40 maxlen: 40
2a13:82c5:1900::/40 maxlen: 40
2a13:82c5:1a00::/40 maxlen: 40
2a13:82c5:1b00::/40 maxlen: 40
2a13:82c5:1c00::/40 maxlen: 40
2a13:82c5:1d00::/40 maxlen: 40
2a13:82c5:1e00::/40 maxlen: 40
2a13:82c5:2000::/36 maxlen: 36
2a13:82c5:2100::/40 maxlen: 40
2a13:82c5:2200::/40 maxlen: 40
2a13:82c5:2300::/40 maxlen: 40
2a13:82c5:2400::/40 maxlen: 40
2a13:82c5:2500::/40 maxlen: 40
2a13:82c5:2600::/40 maxlen: 40
2a13:82c5:2700::/40 maxlen: 40
2a13:82c5:2800::/40 maxlen: 40
2a13:82c5:2900::/40 maxlen: 40
2a13:82c5:2a00::/40 maxlen: 40
2a13:82c5:2b00::/40 maxlen: 40
2a13:82c5:2c00::/40 maxlen: 40
2a13:82c5:2d00::/40 maxlen: 40
2a13:82c5:2e00::/40 maxlen: 40
2a13:82c5:3000::/36 maxlen: 36
2a13:82c5:4000::/36 maxlen: 36
2a13:82c5:5000::/36 maxlen: 36
2a13:82c5:6000::/36 maxlen: 36
2a13:82c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 21 Mar 2024 14:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:44:a3:08:d5:cc:a1:48:c0:ea:10:64:a5:ad:ef:24:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Validity
Not Before: Jan 26 07:19:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e2452dd6cccbd754aae625f9fdf68a9cb1f74c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:42:26:09:0a:4e:71:49:94:2a:c4:a5:c1:
e4:17:e5:26:1f:d4:06:dc:e0:48:95:66:31:5a:0d:
3e:57:f7:28:10:9b:d7:09:d8:2f:e0:dd:b6:6c:8b:
16:f9:cc:f4:57:01:84:7f:89:ae:9b:4f:b2:22:7a:
51:67:0c:5b:29:1a:f2:7e:d4:05:ba:33:2d:da:d1:
b0:7c:01:6a:33:ba:1a:3d:a1:44:af:94:07:f8:e0:
8f:e6:6b:7a:f7:c6:4e:7b:98:90:c7:54:81:d9:3e:
54:fc:ca:99:01:7a:c7:7b:c5:b3:b4:33:e6:58:98:
fd:ac:f7:7a:40:8f:4e:d0:d5:84:8a:54:f0:1c:d5:
df:b1:a9:fa:f4:15:ff:29:ab:96:18:d2:e5:e3:2f:
5f:ed:9b:a3:43:0a:9e:34:5c:aa:85:2d:b8:2d:29:
87:13:8f:75:51:97:de:ae:cf:34:10:c4:89:0f:6b:
58:5e:b1:ab:33:b5:c1:4d:ce:6f:a2:ab:34:50:e5:
09:97:43:c2:5c:8e:92:35:57:03:ab:fa:ff:19:f8:
5d:51:e4:44:95:12:b9:87:4e:4f:57:27:55:e6:84:
53:4d:37:04:e6:67:10:8f:06:83:fb:bd:2f:8f:d3:
a6:1c:37:9e:a8:7e:d6:d1:96:55:16:b1:b9:10:a2:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:24:52:DD:6C:CC:BD:75:4A:AE:62:5F:9F:DF:68:A9:CB:1F:74:C1
X509v3 Authority Key Identifier:
keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/LiRS3WzMvXVKrmJfn99oqcsfdME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:82c0::-2a13:82c2:ffff:ffff:ffff:ffff:ffff:ffff
2a13:82c4:1::-2a13:82c4:2:ffff:ffff:ffff:ffff:ffff
2a13:82c5:1000::-2a13:82c5:6fff:ffff:ffff:ffff:ffff:ffff
2a13:82c7::/32
Signature Algorithm: sha256WithRSAEncryption
64:ef:45:06:06:da:22:c6:2e:9f:f0:e2:08:3a:b1:74:a3:c0:
5e:7a:cc:bf:02:f6:a1:c8:26:0e:e8:67:bf:c6:4e:83:51:22:
d2:2c:a7:f2:71:79:8c:b1:a5:ac:66:ca:19:c5:47:51:0d:a9:
3c:4f:15:6b:30:72:44:84:a7:2d:2b:e0:10:ea:75:4f:a3:b5:
03:3b:38:ac:e1:a0:33:d0:90:47:10:c1:6a:70:b2:5f:93:ba:
0a:83:c3:88:f0:af:58:b2:d1:67:4a:7e:af:a7:2e:44:40:d7:
a7:b9:6c:6a:bf:cf:0a:1f:95:d2:dc:be:a0:51:5c:54:11:ed:
32:f5:99:06:60:04:cd:cd:ee:43:d3:cf:a2:5f:84:67:a7:df:
da:b4:d4:2d:6c:ec:62:3d:a3:8d:bf:30:c2:73:41:4e:09:a4:
00:76:cf:fd:c3:a3:b1:06:d9:0f:a3:8e:09:55:b6:cc:15:d1:
2e:e5:f1:0e:63:b5:67:b1:6e:c6:d5:59:35:53:ce:86:ec:84:
06:06:cc:47:b1:78:95:f8:59:ee:ee:64:81:a5:d7:e2:8f:12:
e7:5c:9f:20:b9:36:0b:47:f4:1d:db:b0:d3:07:dc:84:71:05:
77:ee:3a:e2:fd:8a:c3:e8:00:e5:6f:0d:ad:05:28:12:04:f8:
b7:47:1a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org