Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-s36dP1zjbSTe1oW6jLZ4B0q0ps.roa
File: 1-s36dP1zjbSTe1oW6jLZ4B0q0ps.roa (raw, json)
Hash identifier: QgwzVGuKYwKuKqtLmZmQOUvk3VYzoB97XH0dAjoIgMM=
Subject key identifier: FA:CD:FA:74:FD:73:8D:B4:93:7B:5A:16:EA:32:D9:E0:1D:2A:D2:9B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01914169497F92934012F4EE487BC70A95AB
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-s36dP1zjbSTe1oW6jLZ4B0q0ps.roa
Signing time: Sun 11 Aug 2024 12:28:24 +0000
ROA not before: Sun 11 Aug 2024 12:28:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 62.72.183.0/24 maxlen: 24
81.21.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 07:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:41:69:49:7f:92:93:40:12:f4:ee:48:7b:c7:0a:95:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 11 12:28:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=facdfa74fd738db4937b5a16ea32d9e01d2ad29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:bc:b7:15:dd:d1:6d:e4:21:aa:44:c3:ec:
4e:4a:77:b0:84:4b:67:59:11:ab:85:e1:2c:72:c0:
bb:d3:4c:ea:b1:b7:0e:30:88:0f:1b:b2:08:c8:4a:
c6:57:ff:27:be:e5:3d:0f:ff:b5:99:29:30:d8:2d:
1f:74:a8:3d:eb:04:be:ce:7e:86:fb:39:97:ca:4e:
53:3a:34:e3:53:88:b0:6a:37:b9:8e:bb:b2:9a:c1:
8c:13:45:4f:8d:17:81:78:82:53:d7:9f:66:5d:02:
47:de:3d:04:3c:fb:7d:3b:80:ca:a3:c7:78:17:d5:
07:49:46:79:30:45:82:1d:49:4b:d5:15:09:1f:9c:
d1:51:0e:47:e3:c2:8c:84:bd:74:47:75:f6:56:d0:
e5:38:46:5b:9a:16:f6:32:e6:d4:3d:65:df:9b:9c:
3e:2d:f7:8a:af:c0:d8:de:6e:45:ba:cf:05:98:7a:
52:f0:12:20:3b:29:f6:1d:37:72:54:cc:b3:14:36:
5b:ab:1f:4c:7d:d0:3b:a3:a6:e3:9a:8e:58:c1:8a:
ac:a6:f6:60:d2:eb:c0:42:93:ff:a7:46:30:d6:3f:
9c:fb:a3:d8:0d:88:86:47:26:95:3c:b8:48:74:8c:
9d:4d:20:34:f3:03:0f:cf:a9:e5:92:f9:91:ca:5d:
4d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CD:FA:74:FD:73:8D:B4:93:7B:5A:16:EA:32:D9:E0:1D:2A:D2:9B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-s36dP1zjbSTe1oW6jLZ4B0q0ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.183.0/24
81.21.6.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8d:0c:30:37:5d:3d:20:70:b8:2b:fb:08:25:6c:b5:02:2f:
c2:c6:09:1e:9f:6d:93:10:03:d4:37:11:48:06:31:86:95:f9:
d1:a1:65:71:25:3c:17:20:a7:c7:a8:46:67:60:ad:4d:a2:29:
91:b5:c1:78:68:a8:88:7d:fe:55:4a:5b:5f:b2:98:d4:80:52:
22:c8:51:82:e4:05:47:cb:50:bd:c8:37:d6:0e:43:37:5e:d9:
a8:48:82:ca:80:75:56:6c:e9:80:60:06:7d:60:80:ab:40:62:
27:71:ad:c6:14:2b:b1:d3:58:c1:29:40:bb:51:05:1b:b5:28:
d6:d8:32:98:1d:25:52:43:48:ff:9a:d1:ba:89:4c:91:19:d5:
0c:1f:19:69:ee:c9:1b:00:ba:70:65:6d:e5:bb:97:b0:65:11:
e0:61:1e:c4:9a:5c:1f:06:ee:5f:c2:a7:a3:8d:af:88:c5:7a:
35:42:1c:ee:c5:f9:a1:70:c0:02:57:09:c0:2b:69:90:87:51:
3f:2c:21:50:d6:fb:92:13:b9:6d:f9:31:9d:54:e6:51:59:8a:
d0:ad:da:17:f5:e5:e5:b7:1e:60:53:0f:42:bb:80:09:96:30:
7f:73:7b:7e:dc:3c:1d:61:cc:cf:46:f7:9c:45:77:f5:a4:cd:
2d:07:fb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 10:21:00 2024 by rpki-client on console-fra.rpki-client.org