Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LgoHA8Tbo1_ZQxnYl83i3XTJTwc.roa
File: LgoHA8Tbo1_ZQxnYl83i3XTJTwc.roa (raw, json)
Hash identifier: lV3LksaSTMqA4QMPgdCIfwQ8DAsGRb/CMj8yKNFHG9s=
Subject key identifier: 2E:0A:07:03:C4:DB:A3:5F:D9:43:19:D8:97:CD:E2:DD:74:C9:4F:07
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018B96A1ED586B22D1434596617293260DA9
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LgoHA8Tbo1_ZQxnYl83i3XTJTwc.roa
Signing time: Fri 03 Nov 2023 19:21:16 +0000
ROA not before: Fri 03 Nov 2023 19:21:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216072
IP address blocks: 2a12:bec0:e30::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:a1:ed:58:6b:22:d1:43:45:96:61:72:93:26:0d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Nov 3 19:21:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e0a0703c4dba35fd94319d897cde2dd74c94f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:e0:59:1a:59:7b:cd:3a:12:37:cd:0b:ad:
76:26:b9:df:f7:c0:c7:80:20:7c:88:9b:7b:aa:a6:
e6:95:45:13:8e:55:7b:ac:d0:13:f8:7f:7e:75:68:
0c:e4:aa:79:1f:b2:7d:20:ad:e5:38:48:5e:c4:08:
b5:43:ec:66:19:8e:f6:ca:4d:f7:64:96:f3:a3:88:
2f:a7:11:e3:55:8d:8b:46:93:bd:33:95:8a:1b:62:
c3:61:29:ec:14:21:65:03:d0:31:85:f0:72:79:31:
b7:52:96:67:d4:a4:1e:31:00:75:ed:bf:11:a0:ef:
1e:57:4f:d4:45:ba:3d:0f:e4:da:f4:bb:08:03:30:
f3:b0:74:54:02:15:fa:34:05:d5:93:f1:43:13:02:
64:1c:da:54:c9:5f:9a:85:18:72:c4:ed:4e:ea:39:
47:f0:80:53:a7:c0:42:4d:6d:e3:aa:44:a2:37:23:
87:69:8d:7f:e0:04:38:64:20:dd:77:0e:55:b6:12:
7f:62:73:c7:9e:c1:02:52:6b:53:28:1a:bc:c3:80:
d2:a0:c6:8d:83:07:01:77:74:52:4e:a4:a6:3c:8f:
07:8d:25:c6:08:76:83:e8:e7:70:c5:90:7a:8b:14:
79:f0:86:de:09:98:b9:b6:66:00:d5:90:59:e1:3e:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0A:07:03:C4:DB:A3:5F:D9:43:19:D8:97:CD:E2:DD:74:C9:4F:07
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LgoHA8Tbo1_ZQxnYl83i3XTJTwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:e30::/44
Signature Algorithm: sha256WithRSAEncryption
80:65:98:27:ff:eb:bf:ea:cf:4d:7d:ab:df:b4:12:f2:f7:79:
66:f7:ec:ae:68:76:41:67:7e:a5:80:ab:df:5f:62:84:98:b1:
2d:b7:76:e8:e5:09:38:de:69:e3:05:b1:ea:49:ec:1d:23:8b:
06:e3:25:fe:37:a7:35:cb:e5:37:1b:7b:82:9e:4f:67:89:4e:
fb:44:7f:d7:2c:89:b0:bd:22:d9:3e:31:96:41:0f:51:a5:b3:
6e:b9:14:ff:4c:13:66:fc:6f:c9:61:6f:60:ec:7e:01:f5:f5:
b1:c8:6c:b4:48:73:4b:ea:6c:4d:1e:85:91:c0:09:5c:95:fa:
12:28:3b:54:22:26:b5:cd:4e:86:e3:13:c0:29:0a:1c:c2:ab:
22:00:ee:6f:d2:ae:da:73:f5:92:6d:9a:40:5b:16:03:7d:a1:
f5:ff:c8:03:25:6a:96:0b:84:a6:e7:a2:c9:58:c7:c0:7a:86:
fb:21:d0:ef:a4:4d:1d:41:d9:37:55:1f:4b:aa:9a:78:ce:c1:
fe:e4:a7:6f:85:c8:83:92:f6:36:a5:68:c3:3b:e8:ea:05:0e:
bf:c8:91:d8:31:54:fe:41:b8:0a:5c:aa:b9:03:ee:da:66:57:
06:ff:fa:d4:e3:fa:c7:40:3a:fe:78:b7:a4:ff:6f:70:a6:69:
2b:20:64:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org