Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1Az6k1EGZAAnKXJ_ZwrE3jPT5Z8.roa
File: 1Az6k1EGZAAnKXJ_ZwrE3jPT5Z8.roa (raw, json)
Hash identifier: jrtScyt0FlVpmKjdz6PSxPtRIZBWXK2XUyP16KX9gkI=
Subject key identifier: D4:0C:FA:93:51:06:64:00:27:29:72:7F:67:0A:C4:DE:33:D3:E5:9F
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0190A17CE23EA5A0BD94EC1783706961E183
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1Az6k1EGZAAnKXJ_ZwrE3jPT5Z8.roa
Signing time: Thu 11 Jul 2024 11:10:34 +0000
ROA not before: Thu 11 Jul 2024 11:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 62.72.173.0/24 maxlen: 24
62.72.180.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 13:32:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:7c:e2:3e:a5:a0:bd:94:ec:17:83:70:69:61:e1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jul 11 11:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d40cfa93510664002729727f670ac4de33d3e59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:8c:b2:ee:24:42:87:21:92:25:18:43:57:
ee:7b:8e:34:6e:e6:45:72:db:73:c2:72:09:2a:cb:
f8:f1:a4:e6:1a:62:b4:a7:ba:0e:3e:cd:12:92:1d:
d7:6c:09:b4:75:68:5f:66:56:e2:ae:b1:4b:59:ae:
fe:17:56:21:63:c2:49:6b:e7:ae:1a:97:81:85:fb:
c6:34:eb:a7:2b:12:11:40:1c:60:92:5f:ef:97:7d:
fa:b9:9f:9e:1e:7e:3d:7d:59:f9:c5:67:0e:38:7e:
97:6f:6a:32:92:83:53:67:d0:e2:ab:76:ce:17:3a:
0e:83:85:aa:e9:5d:2d:ac:3d:a0:ea:49:3c:f9:0e:
03:58:78:c7:46:8d:88:85:ac:51:4a:14:3d:62:a3:
09:22:eb:5a:34:19:c4:68:35:54:80:f0:8b:59:f6:
41:fb:c5:36:36:30:35:ba:da:5d:d2:b4:a8:ad:ef:
e3:5b:a9:4d:78:09:20:c7:78:cc:28:33:22:2b:e0:
89:ab:0b:61:40:d3:c7:8f:ec:f9:fa:96:42:1c:3b:
76:33:ce:c9:e5:ae:9d:df:ed:b8:75:a0:9d:38:88:
c0:ed:a2:c3:22:b8:35:1e:b5:c8:7e:9c:80:77:3e:
fb:63:69:fe:ff:39:83:7b:d9:b3:d6:1d:42:6c:39:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0C:FA:93:51:06:64:00:27:29:72:7F:67:0A:C4:DE:33:D3:E5:9F
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1Az6k1EGZAAnKXJ_ZwrE3jPT5Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.173.0/24
62.72.180.0/24
62.72.184.0/23
176.57.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:76:40:35:c0:31:77:cd:77:5d:12:e1:d3:5b:be:32:89:d0:
ed:e8:15:d8:ad:2a:45:96:cd:5a:99:87:c2:7e:1c:f6:62:47:
af:39:a3:7f:9c:15:8f:4c:15:e4:9c:8f:11:2c:b8:52:ef:ca:
d0:bc:3a:9f:11:7f:c2:97:1b:df:08:88:ca:d3:16:78:c3:03:
45:03:cf:4a:40:23:d6:c7:81:39:1f:cd:d1:85:0f:de:15:d4:
b5:4c:f1:6e:db:3d:46:37:25:2e:2c:6c:f2:d3:02:08:3b:2d:
e6:b0:8a:4a:21:11:da:ab:0d:d4:d1:c2:1a:00:e9:87:d9:15:
fc:70:61:de:2b:61:76:0d:6e:19:ff:f5:b4:2d:bd:1d:1d:5b:
8e:20:2d:4a:ba:c3:1d:6a:9c:39:ad:c6:2a:f1:fa:9f:ca:2e:
9d:ce:d7:98:42:85:9a:82:34:e2:65:2c:4f:6d:74:29:9d:aa:
22:b8:ee:2b:90:bb:0a:e6:a9:46:62:b7:19:b3:20:3a:ca:35:
22:9d:8e:21:ea:00:33:54:22:4d:d7:48:1e:de:ee:d1:4d:e2:
d0:5e:e1:4d:14:57:e1:ba:87:a0:02:83:d5:ef:dc:5d:fe:ab:
d5:2c:00:6e:35:62:45:10:25:2c:ae:9d:dd:b6:7b:dd:fa:65:
ea:4b:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 18:22:43 2024 by rpki-client on console-ams.rpki-client.org