Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/tLCs4175-zDpLq_7KZY5UH787dU.roa
File: tLCs4175-zDpLq_7KZY5UH787dU.roa (raw, json)
Hash identifier: EIiy4OOiClj6Oc66AhfW5AUDIEf2VjS1o5Bey/Mzy3w=
Subject key identifier: B4:B0:AC:E3:5E:F9:FB:30:E9:2E:AF:FB:29:96:39:50:7E:FC:ED:D5
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CFBCDD8F8A557CBF62A13764C57364E88
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/tLCs4175-zDpLq_7KZY5UH787dU.roa
Signing time: Fri 12 Jan 2024 03:53:40 +0000
ROA not before: Fri 12 Jan 2024 03:53:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215842
IP address blocks: 2a12:bec0:5d0::/45 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Feb 2024 16:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fb:cd:d8:f8:a5:57:cb:f6:2a:13:76:4c:57:36:4e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 12 03:53:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4b0ace35ef9fb30e92eaffb299639507efcedd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:58:28:9b:82:3d:40:9f:36:53:ae:5a:54:
d9:62:ee:80:3e:92:ed:fd:18:94:b8:92:3c:d7:9b:
be:25:f3:80:e8:15:1b:5d:57:ef:2e:5a:a5:2b:ec:
23:a4:5c:79:98:0f:fc:02:1d:8d:e4:a8:03:00:1c:
a1:8e:0a:1c:aa:85:aa:54:3d:7d:2f:00:84:18:c5:
65:2c:33:b6:4b:43:a7:4e:44:96:5e:31:14:68:2a:
65:ca:12:89:2f:ed:76:b1:37:24:50:0f:cb:02:e4:
40:47:e0:75:c2:ab:44:28:06:51:1e:6d:78:c2:dc:
13:df:47:7a:33:0c:0f:b4:91:ff:4e:e2:ff:2f:6e:
e8:10:53:76:ed:a8:38:81:18:7f:a9:d9:5b:79:f3:
55:d1:9a:70:9a:c1:9e:7a:ec:8b:39:0d:f8:d3:cb:
17:e6:dc:fe:1f:e3:39:37:1d:b4:4b:41:7b:80:8a:
b3:2e:c2:36:57:3a:cc:3c:ed:1e:06:3e:2b:0d:5a:
94:c3:dc:9a:ec:ae:27:09:43:2d:6c:6e:3a:ac:4d:
29:02:df:88:f3:08:da:98:c4:f2:a0:b5:d4:c8:e4:
78:d9:e3:fc:77:ff:47:f4:af:20:46:4a:66:d0:3d:
55:97:ad:54:fd:a7:3f:a0:a6:33:19:db:96:e0:7b:
69:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B0:AC:E3:5E:F9:FB:30:E9:2E:AF:FB:29:96:39:50:7E:FC:ED:D5
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/tLCs4175-zDpLq_7KZY5UH787dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:5d0::/45
Signature Algorithm: sha256WithRSAEncryption
7e:c7:14:39:32:17:52:a5:0f:20:9f:95:c4:83:52:ab:6b:e2:
59:04:14:b5:ee:d7:87:77:0a:fe:1a:32:cb:c3:70:a2:9e:50:
bc:40:8c:ec:9f:c0:0c:33:f8:2c:54:f6:39:4b:7b:62:76:a9:
c2:ab:13:a8:41:bf:04:29:da:04:fd:df:38:98:3b:8d:10:07:
f2:75:1c:62:49:3e:3d:d3:a5:51:15:71:9c:27:a2:7f:e6:67:
24:10:b3:13:76:8f:7e:00:a0:0c:c6:4b:b7:f2:e6:b4:95:ce:
85:6e:8a:14:68:5b:a1:ce:6e:68:5f:8b:8b:2d:66:36:61:5c:
84:00:be:4c:92:69:46:1e:86:ee:7a:90:ab:e9:7f:49:15:a3:
eb:4c:9b:e7:2a:f3:00:f6:8b:53:6c:37:cf:a6:1d:60:73:fa:
00:97:d3:54:50:8c:32:45:4e:b4:90:73:7e:69:c0:76:56:44:
a0:41:68:cb:46:f4:1c:ed:89:ee:0f:57:26:58:97:2f:49:7f:
23:1a:4a:c3:84:42:f9:a3:ec:f2:b2:11:ea:ee:41:36:13:3f:
fe:37:7b:aa:b8:40:bd:b5:1e:66:a2:e8:72:06:70:db:bc:88:
99:f7:1d:06:d0:e6:2c:b8:29:b1:73:49:27:09:65:0f:46:7a:
9c:44:aa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org