Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/LHA_x6jBSDzrPWIAj7j-MejGVRE.roa
File: LHA_x6jBSDzrPWIAj7j-MejGVRE.roa (raw, json)
Hash identifier: X7U3qcUMEuIj3Ngmb1Z5vHQBN3KraKtlfFJXvQjitgo=
Subject key identifier: 2C:70:3F:C7:A8:C1:48:3C:EB:3D:62:00:8F:B8:FE:31:E8:C6:55:11
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 019301E3B89E5420FA0FB7C8304312731EA1
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/LHA_x6jBSDzrPWIAj7j-MejGVRE.roa
Signing time: Wed 06 Nov 2024 14:32:01 +0000
ROA not before: Wed 06 Nov 2024 14:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 92.60.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:e3:b8:9e:54:20:fa:0f:b7:c8:30:43:12:73:1e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Nov 6 14:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c703fc7a8c1483ceb3d62008fb8fe31e8c65511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:fa:83:c0:2a:08:09:02:d9:67:4d:ac:71:
be:fb:d1:59:8c:0a:ab:69:4c:f6:10:28:22:ee:48:
a4:37:c8:79:04:fe:31:be:18:5b:74:6e:1f:cb:00:
68:6e:0a:f7:29:56:87:60:d1:e2:ba:e2:a3:f1:a8:
45:44:e3:19:10:da:0f:59:cc:c3:1b:8a:30:05:88:
f3:de:5b:6e:2d:10:2b:17:b3:a8:53:cb:23:db:28:
9f:1b:85:11:9f:de:46:6b:b2:79:af:b8:10:6e:4b:
f4:e9:03:5d:b1:7f:44:8a:8b:45:80:0e:fe:d5:59:
2f:0a:21:49:43:fc:5d:f4:cf:98:69:55:85:11:71:
39:e6:4c:ac:7d:ea:a8:33:8c:55:6b:02:d7:22:b5:
df:99:c1:b3:b7:6b:c6:58:09:fa:de:e3:44:3a:1c:
16:3e:9c:ef:ec:1c:3f:7c:d6:90:8c:b2:49:06:2b:
e7:26:a6:67:1c:5e:a5:94:4b:2d:94:47:5c:a4:ce:
b4:9e:30:30:ca:a2:b3:2c:eb:9c:86:2a:30:8f:3c:
f7:b4:43:0a:c1:07:42:51:af:8e:22:4c:11:43:19:
54:ce:21:b6:bf:7f:5a:22:66:9d:f1:09:7b:d0:31:
7b:81:18:85:53:fc:67:c9:b8:09:43:dd:8b:8d:b8:
04:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:70:3F:C7:A8:C1:48:3C:EB:3D:62:00:8F:B8:FE:31:E8:C6:55:11
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/LHA_x6jBSDzrPWIAj7j-MejGVRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ab:f5:f0:c1:bf:da:44:66:99:ce:9e:9c:58:1e:5d:a6:62:
7f:1c:a1:d3:9d:61:0d:2d:33:6b:d8:c6:67:e3:1e:97:93:5a:
d0:14:69:56:97:09:f8:cf:71:49:9c:94:22:bb:32:fe:59:38:
48:97:57:36:58:a4:15:ed:b0:9e:bb:4e:3e:16:8f:84:6e:4f:
87:fe:0f:08:08:a9:a7:c6:08:3f:28:ad:c3:d4:a2:f9:a5:b8:
b6:16:05:1e:05:4a:00:ca:9f:8f:dc:4f:4a:14:f4:db:40:61:
87:5c:1b:94:ec:87:78:4a:1b:d6:37:86:d0:6a:27:a4:eb:c0:
63:ef:95:5d:2c:d3:02:27:20:7c:06:2f:68:a3:5b:76:10:e7:
fe:6a:82:d3:a4:44:9b:f7:e0:f3:4d:12:a5:55:ab:4c:2a:66:
7b:0a:82:69:a8:f9:cb:72:98:39:35:82:14:56:46:7c:1b:dd:
3b:3d:b8:94:72:a9:3d:a1:dc:3c:cb:ef:05:bd:41:74:84:07:
9b:d3:f5:98:b8:d1:18:fb:8e:36:4d:df:01:d8:40:e8:72:29:
0e:4d:f7:74:23:45:af:2f:c8:15:36:16:69:02:d4:e0:5d:cd:
51:a7:98:f2:54:71:10:19:0f:9b:1a:80:22:98:b2:92:73:40:
7e:39:d4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 18:29:14 2024 by rpki-client on console-fra.rpki-client.org