Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/lLteicvDwJbrO3Un1yFbpfQKIKY.roa
File: lLteicvDwJbrO3Un1yFbpfQKIKY.roa (raw, json)
Hash identifier: czAvMAyDRpxxhsL/x09jC3xxMeVZzxiShbWFEVo8uRs=
Subject key identifier: 94:BB:5E:89:CB:C3:C0:96:EB:3B:75:27:D7:21:5B:A5:F4:0A:20:A6
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01856C6F001D27F41E29D0CB5A3B5AD4902F
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/lLteicvDwJbrO3Un1yFbpfQKIKY.roa
Signing time: Sun 01 Jan 2023 08:24:51 +0000
ROA not before: Sun 01 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38230
IP address blocks: 2a0e:46c4:200::/48 maxlen: 48
2a0e:46c4:110::/48 maxlen: 48
2a0e:46c4:101::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:00:1d:27:f4:1e:29:d0:cb:5a:3b:5a:d4:90:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94bb5e89cbc3c096eb3b7527d7215ba5f40a20a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:1f:19:12:08:81:44:23:fc:0f:61:0d:48:
0d:1e:09:85:fe:18:03:6d:12:36:e9:84:2c:4b:81:
c5:0b:e4:93:ae:6b:b2:3f:80:6d:1a:38:4d:c2:e0:
13:66:1e:79:b3:03:2e:c6:eb:55:77:61:f4:b1:c0:
9c:a9:2a:40:a2:5f:dc:83:44:49:9b:a7:c2:cb:31:
f2:21:6d:b6:ba:40:a9:b2:4c:38:b3:94:a8:32:ac:
b1:d6:36:0d:ec:d5:9f:3b:b2:79:de:31:64:94:19:
e2:47:90:aa:89:d3:09:c3:1d:83:1a:ea:55:5e:b8:
ae:ae:6a:32:5b:18:83:ec:5f:b8:46:91:36:4d:4a:
cf:99:ef:93:1a:74:8d:ed:d1:84:36:db:14:f9:a6:
be:ca:21:74:6c:34:3c:1d:55:70:31:60:15:9e:0b:
3e:c8:ea:4f:24:f9:94:4b:1d:f3:7f:f4:c6:1b:b1:
4a:80:b8:bc:d3:57:b5:3c:7b:e9:f4:fc:23:25:dd:
ca:97:06:96:55:37:f7:c0:2b:77:6e:99:fc:e2:cc:
b3:d6:fb:6d:7d:2d:8e:44:8e:89:ab:7c:e5:91:66:
38:ea:58:64:e2:ef:0d:ac:28:28:65:98:7c:49:52:
f6:4c:70:36:1b:2c:e0:05:61:58:db:20:b6:c9:65:
80:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BB:5E:89:CB:C3:C0:96:EB:3B:75:27:D7:21:5B:A5:F4:0A:20:A6
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/lLteicvDwJbrO3Un1yFbpfQKIKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:101::/48
2a0e:46c4:110::/48
2a0e:46c4:200::/48
Signature Algorithm: sha256WithRSAEncryption
63:c2:f2:6f:a5:7f:40:cc:97:c1:cf:af:8e:da:ee:36:02:26:
e2:d3:f2:eb:ac:5a:f2:62:e0:8f:e9:65:6b:7e:7f:0a:73:42:
99:38:8c:39:e7:54:b6:f6:bd:b4:58:5a:3a:1a:4f:0a:fc:8a:
22:6d:d1:99:db:18:82:b1:4e:e7:cb:aa:66:d6:40:3f:d1:89:
09:8e:b6:da:41:f1:6f:2f:a4:96:59:c6:35:3f:e9:ed:65:f0:
8c:2e:03:d0:a5:4e:84:0b:05:6c:4e:36:2f:92:fd:a0:48:89:
09:01:8d:db:db:4a:7b:ac:27:f0:24:e7:96:04:9d:94:7c:ed:
3b:a7:07:80:99:f5:3d:2e:76:a9:4a:4f:b4:98:5a:fa:33:1d:
ed:c0:5d:f9:9d:b9:fb:b1:49:e1:0b:69:00:3b:77:4d:da:99:
47:e0:64:17:a6:61:d2:d4:e7:33:90:a6:01:b1:36:03:38:9a:
b3:03:79:39:6c:f9:84:16:cf:6d:cc:19:32:c9:d2:a9:fe:d3:
14:83:7c:6a:60:08:a1:c0:32:e9:87:7f:40:6f:92:d8:66:c7:
58:f6:6b:f7:d0:49:c0:08:5b:33:de:89:3c:5c:35:ed:27:31:
f4:41:fe:d5:94:e2:36:71:e3:3c:68:b7:2d:b0:97:76:9f:39:
c4:d0:15:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:00 2024 by rpki-client on console-fra.rpki-client.org