Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/LiZiLU_xIYFJxaMpZjsdZqwbc4k.roa
File: LiZiLU_xIYFJxaMpZjsdZqwbc4k.roa (raw, json)
Hash identifier: nDC7rtdQcrflJo4heuI/t0dz/6N/eQ3PC0MIdIXGe4I=
Subject key identifier: 2E:26:62:2D:4F:F1:21:81:49:C5:A3:29:66:3B:1D:66:AC:1B:73:89
Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial: 01899DF85E5F604C45AC477D03937F86CE9C
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/LiZiLU_xIYFJxaMpZjsdZqwbc4k.roa
Signing time: Fri 28 Jul 2023 19:27:27 +0000
ROA not before: Fri 28 Jul 2023 19:27:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1152
IP address blocks: 2a0f:d980::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9d:f8:5e:5f:60:4c:45:ac:47:7d:03:93:7f:86:ce:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Validity
Not Before: Jul 28 19:27:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e26622d4ff1218149c5a329663b1d66ac1b7389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:da:98:38:16:69:33:ee:f1:2e:d3:09:29:
48:c0:53:d7:bf:08:c2:4f:91:4d:c0:28:b1:c7:26:
f4:c5:73:bb:d8:15:f8:1c:49:b0:40:4c:de:a1:94:
eb:0e:29:7e:b2:96:62:e9:2a:99:a4:5a:ed:ee:63:
57:d9:1d:bc:e8:24:d0:36:6d:4e:44:1a:4a:7b:aa:
58:32:75:ba:53:5b:30:67:bb:20:23:8f:dd:e8:25:
c2:15:03:7f:60:c1:cf:3d:44:36:18:ed:c5:d5:63:
6c:e4:42:95:aa:0d:e2:1d:01:96:d2:52:bc:4b:7d:
23:ad:19:10:0f:97:b1:10:6d:40:c0:44:b8:0d:69:
1b:b7:ac:be:e7:4d:3d:ea:ad:e9:6b:7c:28:a4:38:
17:99:00:13:a5:bc:05:29:0b:57:36:4a:f4:75:63:
e1:ee:03:36:1d:f5:63:e7:d6:84:43:68:94:a5:99:
15:1c:49:6a:6d:e4:ad:ed:f3:94:2f:55:d3:c2:d7:
d5:c9:65:0c:c3:dc:ae:00:a0:8a:20:09:8c:75:40:
2c:f8:5c:50:87:0b:f2:9d:38:32:e6:48:c2:28:18:
94:0c:98:44:f7:57:81:10:ec:01:6e:d4:96:e1:ce:
f2:71:7a:74:7e:c7:6e:75:71:f5:f0:eb:0e:23:12:
6f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:26:62:2D:4F:F1:21:81:49:C5:A3:29:66:3B:1D:66:AC:1B:73:89
X509v3 Authority Key Identifier:
keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/LiZiLU_xIYFJxaMpZjsdZqwbc4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:d980::/32
Signature Algorithm: sha256WithRSAEncryption
0c:73:09:ba:ac:01:f9:e5:be:f0:58:a6:66:ce:75:1e:2b:81:
17:b6:ca:ae:e3:99:68:b7:8c:4f:23:be:10:88:fe:97:90:54:
a2:84:f4:48:c2:3d:4f:b9:f9:f6:9d:cc:c8:e7:ea:56:22:1d:
c8:c8:3f:b8:b5:23:b9:03:7e:4e:34:4f:4b:c8:51:21:17:5b:
c0:00:c6:5d:30:41:11:f3:cf:e1:29:ac:ad:a9:d7:7f:4d:17:
84:49:3b:e1:b3:3a:ae:95:9f:70:18:c6:1f:d9:ec:28:9d:5b:
5e:4c:84:64:c1:e0:17:01:91:ba:6e:33:fc:a0:2f:2f:92:b7:
a8:e9:4c:a4:c0:07:db:ac:9e:ca:77:96:ec:4a:c3:83:26:66:
f6:45:79:eb:c7:32:4f:3a:ad:a1:f0:7d:9f:31:04:38:9f:d8:
71:26:bb:9c:1a:9d:67:92:54:84:ec:30:8e:8b:29:08:2a:22:
a9:ce:17:8f:b3:66:8a:9f:8b:f6:3b:94:ce:06:1b:34:72:11:
03:58:16:ce:61:18:a1:27:b4:2d:41:a7:db:b3:7e:a8:98:e1:
60:2b:d8:80:49:f9:70:af:29:26:b3:79:eb:8b:b5:24:74:c2:
ab:4c:0c:d2:d6:9b:5e:ec:39:dc:b3:6d:fd:4d:16:a7:37:a8:
2c:f6:c3:e9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYmd+F5fYExFrEd9A5N/hs6cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjc2MzIxYzhkNDY5ZWUzYmEwMjM5MjBiMzcyY2NkYTVk
ZTllMGYwHhcNMjMwNzI4MTkyNzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTI2NjIyZDRmZjEyMTgxNDljNWEzMjk2NjNiMWQ2NmFjMWI3Mzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlznamDgWaTPu8S7TCSlIwFPXvwjC
T5FNwCixxyb0xXO72BX4HEmwQEzeoZTrDil+spZi6SqZpFrt7mNX2R286CTQNm1O
RBpKe6pYMnW6U1swZ7sgI4/d6CXCFQN/YMHPPUQ2GO3F1WNs5EKVqg3iHQGW0lK8
S30jrRkQD5exEG1AwES4DWkbt6y+50096q3pa3wopDgXmQATpbwFKQtXNkr0dWPh
7gM2HfVj59aEQ2iUpZkVHElqbeSt7fOUL1XTwtfVyWUMw9yuAKCKIAmMdUAs+FxQ
hwvynTgy5kjCKBiUDJhE91eBEOwBbtSW4c7ycXp0fsdudXH18OsOIxJvSQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFC4mYi1P8SGBScWjKWY7HWasG3OJMB8GA1UdIwQY
MBaAFK63YyHI1GnuO6Ajkgs3LM2l3p4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAt
YzdkY2MyMzkxY2M5LzEvTGlaaUxVX3hJWUZKeGFNcFpqc2RacXdiYzRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAtYzdkY2MyMzkxY2M5
LzEvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg/ZgDAN
BgkqhkiG9w0BAQsFAAOCAQEADHMJuqwB+eW+8FimZs51HiuBF7bKruOZaLeMTyO+
EIj+l5BUooT0SMI9T7n59p3MyOfqViIdyMg/uLUjuQN+TjRPS8hRIRdbwADGXTBB
EfPP4SmsranXf00XhEk74bM6rpWfcBjGH9nsKJ1bXkyEZMHgFwGRum4z/KAvL5K3
qOlMpMAH26yeyneW7ErDgyZm9kV568cyTzqtofB9nzEEOJ/YcSa7nBqdZ5JUhOww
jospCCoiqc4Xj7Nmip+L9juUzgYbNHIRA1gWzmEYoSe0LUGn27N+qJjhYCvYgEn5
cK8pJrN564u1JHTCq0wM0tabXuw53LNt/U0WpzeoLPbD6Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:29 2024 by rpki-client on console-ams.rpki-client.org