Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/4WnyhfjykOj621CQlufCcZHBuCg.roa
File: 4WnyhfjykOj621CQlufCcZHBuCg.roa (raw, json)
Hash identifier: oGnM3NvhaZihCXjTzb6AD84igoQDNAjj1nD4yrt1/jE=
Subject key identifier: E1:69:F2:85:F8:F2:90:E8:FA:DB:50:90:96:E7:C2:71:91:C1:B8:28
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018F2330BA3150DF1ED24F445C5BBE5CECCF
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/4WnyhfjykOj621CQlufCcZHBuCg.roa
Signing time: Sun 28 Apr 2024 05:32:26 +0000
ROA not before: Sun 28 Apr 2024 05:32:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 62.72.188.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 May 2024 08:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:23:30:ba:31:50:df:1e:d2:4f:44:5c:5b:be:5c:ec:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 28 05:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e169f285f8f290e8fadb509096e7c27191c1b828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:5a:37:32:d8:ce:1f:50:35:1a:9c:11:93:
9a:21:e5:a7:4f:1a:8f:ad:c2:93:f6:4e:9e:9e:3e:
89:0d:24:0a:da:6a:b3:d7:62:ee:f2:a7:55:5b:4e:
f0:24:49:47:fd:a7:76:c5:20:bb:92:56:25:e3:ff:
0f:e4:a9:39:8f:c1:99:42:a5:94:7b:eb:39:38:4e:
b0:21:ea:9f:75:1d:f4:72:a2:a0:ee:c8:04:f5:1a:
d3:ff:79:5e:20:cc:86:b2:15:54:db:92:79:65:f3:
41:c1:5e:f7:16:3d:eb:1a:5c:6b:a6:b7:06:d8:70:
ba:85:c6:c4:73:d0:e7:4f:2c:88:a3:21:8e:c2:2a:
ff:01:2b:63:6b:78:90:24:da:86:e3:95:f4:ae:00:
c6:cb:ba:a5:2b:23:b0:a1:bb:e1:6a:c6:f6:ba:28:
c9:58:02:bd:27:7f:14:96:cd:5e:6c:f8:e4:f4:c5:
ae:7d:8e:c1:c4:2f:24:5f:38:5a:65:4e:66:3c:08:
4d:f5:18:e6:63:76:98:04:bc:88:13:aa:6e:78:73:
26:7b:e0:9a:1a:8c:4a:05:2b:21:f5:80:67:9b:14:
e1:c0:77:db:fc:30:00:b7:76:43:26:d3:bf:60:98:
14:7b:e0:3f:a1:64:6a:1b:10:e4:95:62:29:e4:9d:
8d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:69:F2:85:F8:F2:90:E8:FA:DB:50:90:96:E7:C2:71:91:C1:B8:28
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/4WnyhfjykOj621CQlufCcZHBuCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.188.0/24
176.57.53.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f1:b4:31:aa:1d:a0:be:9b:cb:66:4d:65:90:64:8f:0f:81:
dc:3b:5c:09:8f:4d:b7:77:bc:57:64:dd:f3:5c:f8:4b:9b:26:
40:41:a1:03:d1:c4:8c:79:1c:99:af:ef:e4:77:36:7a:24:26:
7f:1c:ab:2f:47:a8:1b:0e:f7:f4:46:7a:df:70:9b:ac:89:47:
b3:30:16:3e:29:35:7d:1f:9c:9c:e6:80:b4:15:02:ec:35:51:
c4:1c:9c:d8:41:a1:f9:48:4e:f1:fb:5d:30:df:cf:3b:65:50:
50:32:50:c3:7f:64:b7:0b:42:60:af:b8:9b:1b:67:39:62:ed:
d5:89:cd:90:2b:33:94:55:e6:3b:c4:c9:9a:a1:9d:d6:a4:8a:
7e:5a:4d:5e:66:d9:75:e2:10:ef:20:72:16:72:11:5c:3b:99:
a6:95:12:d3:03:2f:2e:03:5d:76:95:c7:67:4e:c4:f5:5b:9b:
48:09:d4:7d:08:95:ea:9a:ef:0f:84:fe:32:cb:f7:72:24:b2:
74:e7:d5:1f:fe:7a:1d:6a:86:b6:49:40:26:f2:ba:38:18:86:
eb:4a:76:6d:a2:18:b6:30:18:7d:d7:67:f0:91:e2:59:26:11:
e1:c1:0f:2d:ae:7a:a8:fe:40:4b:97:94:cb:bf:5b:b4:54:a0:
7f:04:30:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 09:55:25 2024 by rpki-client on console-fra.rpki-client.org