Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1U9EFn1EzQOdxxHmTKcOJ6s6Drc.roa
File: 1U9EFn1EzQOdxxHmTKcOJ6s6Drc.roa (raw, json)
Hash identifier: 2UunbKRKc4r5mIUaT2bcCzvJQZgCp8b1cfUFjaczXKw=
Subject key identifier: D5:4F:44:16:7D:44:CD:03:9D:C7:11:E6:4C:A7:0E:27:AB:3A:0E:B7
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018829BFC8362D677695F812340D193F8DC3
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1U9EFn1EzQOdxxHmTKcOJ6s6Drc.roa
Signing time: Wed 17 May 2023 12:46:54 +0000
ROA not before: Wed 17 May 2023 12:46:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 62.72.176.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 18:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:bf:c8:36:2d:67:76:95:f8:12:34:0d:19:3f:8d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 17 12:46:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d54f44167d44cd039dc711e64ca70e27ab3a0eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:f6:cf:fd:d2:7c:83:70:ae:dd:8c:d1:b8:
3f:5f:38:a0:92:71:d0:07:56:8c:9e:24:1a:b1:bc:
1a:bd:92:ee:71:3d:2d:77:46:14:9a:8d:a7:76:12:
d1:5d:0a:85:28:02:e3:cf:92:fb:7a:85:56:16:d3:
5a:14:18:19:99:4c:47:b1:3b:39:e8:68:c6:91:a4:
46:bb:15:f1:63:91:db:6d:5c:67:d1:22:08:5a:0e:
b5:5d:40:1f:ba:e5:22:6d:5d:9f:ee:37:bc:4b:91:
c9:17:2e:b0:06:51:35:b6:b9:07:51:47:c5:db:27:
27:65:f8:1b:77:60:02:3d:74:7a:d7:75:b0:34:a7:
d9:50:cc:a5:ce:c7:e6:a5:2b:a7:a6:73:39:ea:23:
b3:2a:08:36:83:37:00:1d:e1:c6:60:9c:c4:4c:4a:
4d:a1:de:08:f7:a6:57:91:c7:78:3e:d7:d1:3c:1e:
cb:67:3b:ee:76:32:91:5d:23:af:87:9b:80:e8:9c:
e5:c6:4f:8d:a1:56:0a:19:75:7a:5b:d9:f3:5f:84:
13:8c:98:f1:c7:ca:3d:7b:e2:fa:fb:6c:75:3a:72:
1d:a7:11:9a:f3:c2:76:aa:b7:e7:3e:1f:6d:0a:5c:
82:ee:82:23:7f:7a:0c:69:24:92:0d:f0:e5:93:23:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4F:44:16:7D:44:CD:03:9D:C7:11:E6:4C:A7:0E:27:AB:3A:0E:B7
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1U9EFn1EzQOdxxHmTKcOJ6s6Drc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/24
62.72.190.0/24
176.57.62.0/24
Signature Algorithm: sha256WithRSAEncryption
12:74:8b:4c:1b:00:e9:92:f1:fa:52:64:cb:b3:29:36:f1:36:
a0:c8:1c:c1:26:f0:e0:ff:68:8b:15:9a:f9:06:d8:d7:be:23:
6e:83:a0:09:5e:ac:60:b4:f0:96:09:bb:da:ac:14:d6:6f:d0:
f7:96:b0:99:8d:25:75:d3:55:b1:d0:21:93:0e:18:4c:2b:9b:
05:b8:88:cf:d1:e7:38:29:0f:1c:3b:5d:0a:2a:e5:97:bd:72:
b6:09:b1:b4:cf:e5:e1:63:e6:d2:63:ae:f1:0e:86:ff:92:18:
90:0a:a7:8c:cc:f2:8d:aa:63:5d:7d:d3:d5:24:43:d0:7d:ea:
fb:0a:a6:d4:9e:6c:57:89:e1:83:9e:5a:db:7b:82:d9:58:18:
58:71:17:30:7b:b7:b8:21:d5:ef:0f:b9:08:16:c6:2e:13:dd:
73:34:ab:af:ce:83:2b:e8:7b:3c:97:88:64:7c:58:b6:78:76:
a6:01:8c:79:de:ce:24:9a:6b:57:c6:e3:6e:90:00:5c:99:3c:
0e:a4:b2:6f:0a:6b:72:28:53:c2:11:aa:d6:2d:07:eb:37:ec:
9e:0c:f6:22:17:93:bb:20:f3:a1:a7:84:06:29:44:e6:4e:f1:
e7:2e:97:d2:37:45:1b:13:a4:2b:c8:4d:f7:79:5d:38:94:25:
54:2c:ff:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org