Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/15ju99UrIQVWoZfW-TSeIwmkNsw.roa
File: 15ju99UrIQVWoZfW-TSeIwmkNsw.roa (raw, json)
Hash identifier: lbTa+3MU+HkdhZlnCYgf6tO2kfqFW32wmuBpMqRkl2M=
Subject key identifier: D7:98:EE:F7:D5:2B:21:05:56:A1:97:D6:F9:34:9E:23:09:A4:36:CC
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01867D4FF549F73F7296B917244E4B1B2232
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/15ju99UrIQVWoZfW-TSeIwmkNsw.roa
Signing time: Thu 23 Feb 2023 08:07:17 +0000
ROA not before: Thu 23 Feb 2023 08:07:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 62.72.184.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Feb 2023 07:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:4f:f5:49:f7:3f:72:96:b9:17:24:4e:4b:1b:22:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 23 08:07:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d798eef7d52b210556a197d6f9349e2309a436cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:f9:94:71:e3:73:50:c7:0f:19:0f:d5:b1:
f8:38:8c:cb:21:ce:df:58:01:de:b9:06:de:c6:e4:
ce:96:f3:fd:ad:34:3a:23:6c:9f:80:eb:34:ab:08:
43:8b:9d:35:aa:a1:f1:40:e3:e7:1d:01:db:da:4f:
8e:ac:07:6e:27:ae:62:49:4f:0b:95:eb:1e:93:7f:
b3:5d:e6:c0:99:46:30:f6:3a:74:b1:67:5e:86:2b:
ff:8c:28:76:d0:de:43:c3:f9:7a:fb:b8:0b:40:fd:
fa:d5:21:cf:19:b4:b1:06:4c:ef:0f:e6:20:7e:8d:
c0:b0:95:31:e0:b3:21:f0:26:69:dd:aa:f5:38:9f:
9f:ba:57:4a:09:27:91:76:51:e7:12:8d:6b:3d:44:
85:c2:c1:cf:d9:a4:d4:a9:59:6f:a8:fc:23:90:a3:
f8:c2:fc:da:08:c3:b9:be:52:cb:a6:e2:69:cc:14:
30:88:c8:8f:1f:a4:56:88:00:3b:84:f2:a0:32:fb:
d0:9f:45:01:b7:db:a3:ed:0b:61:5f:4f:2a:1a:e0:
42:df:09:3b:df:d4:ba:41:62:12:36:55:80:7b:dc:
10:f0:e6:0f:94:5c:07:b8:5b:1c:bd:3e:b1:ee:37:
f7:84:86:b4:1b:49:01:9b:34:ed:b9:66:3f:1b:d6:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:98:EE:F7:D5:2B:21:05:56:A1:97:D6:F9:34:9E:23:09:A4:36:CC
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/15ju99UrIQVWoZfW-TSeIwmkNsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.183.0-62.72.184.255
62.72.187.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:26:e6:a5:2e:63:1c:22:c3:f2:08:d0:1c:66:6d:33:44:ab:
84:4b:41:f6:a2:52:b5:82:ae:f8:97:cc:5a:3c:95:ee:54:e3:
3d:8e:58:fa:5c:74:56:c5:f0:7c:9e:a2:63:cc:36:55:a8:82:
25:91:06:57:85:ec:ff:03:0c:f6:36:98:73:6f:aa:ad:be:d6:
14:53:e0:6d:db:c5:eb:f0:24:64:e2:c1:e8:93:40:56:5e:73:
1d:ae:94:cb:48:a9:5a:7d:f9:78:ee:6e:60:27:f7:03:17:cc:
75:c1:2e:eb:4a:dd:89:f0:44:ba:0d:92:ee:26:8e:c1:9d:0b:
d6:fd:22:bd:d6:3d:97:1a:3c:35:a5:3c:1d:6a:5f:23:a7:0d:
0a:a0:6d:6b:b6:a3:23:2c:9d:e0:10:2a:3e:ea:41:ad:1c:4c:
8b:45:9a:65:16:c8:6f:61:de:26:a1:46:8f:1e:35:89:f6:64:
25:fc:9f:c1:1c:46:2f:9a:f9:19:9c:22:a7:aa:eb:79:e6:d2:
1f:35:42:d9:29:20:b2:28:53:d1:34:c4:24:27:52:b2:66:57:
a1:be:7c:e1:ca:1d:78:1e:b5:91:72:97:9c:0a:8e:59:cb:8f:
3a:f6:99:ef:98:3b:9e:e1:ef:f1:93:b1:66:82:6d:00:04:2c:
09:4d:ec:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org