Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1oVk_sYB0uRsMyG2t7TvdFZqICA.roa
File: 1oVk_sYB0uRsMyG2t7TvdFZqICA.roa (raw, json)
Hash identifier: XHk/CFnNjKhHZfouPxSb3sFi0QMsHjY1QTYC+xnyxBI=
Subject key identifier: D6:85:64:FE:C6:01:D2:E4:6C:33:21:B6:B7:B4:EF:74:56:6A:20:20
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01889AFE3A0833E5AA931ACF1725338F2FD0
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1oVk_sYB0uRsMyG2t7TvdFZqICA.roa
Signing time: Thu 08 Jun 2023 12:32:12 +0000
ROA not before: Thu 08 Jun 2023 12:32:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 62.72.175.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.3.0/24 maxlen: 24
81.21.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jul 2023 06:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:fe:3a:08:33:e5:aa:93:1a:cf:17:25:33:8f:2f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 8 12:32:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d68564fec601d2e46c3321b6b7b4ef74566a2020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f2:03:7c:70:0d:ac:5c:cb:89:c9:b4:72:b8:
3d:1b:56:38:19:fe:9b:72:85:9f:33:a7:a3:cd:4a:
6a:68:96:db:19:7d:0d:a3:15:90:21:43:72:47:a8:
04:b5:fb:8b:53:ff:61:8f:a2:a4:a5:30:f2:74:44:
8f:1f:67:f7:09:40:a3:60:c3:a2:a3:ed:8e:7e:26:
c3:1f:a8:69:fb:31:23:f6:b5:25:7f:62:8b:bb:26:
26:c2:2e:fa:07:80:96:e7:84:7b:e5:1d:34:ff:c7:
c6:df:92:a3:a4:d6:a9:00:76:af:2a:e4:43:fd:12:
ed:c0:e0:71:82:3c:59:e2:a3:56:30:8f:19:70:95:
c7:99:56:ab:06:6a:bb:a8:89:51:37:63:63:86:1e:
b4:61:19:a3:69:7c:2b:07:da:29:b8:17:fc:35:1e:
54:02:61:85:7c:62:fe:f8:b2:ea:8c:5a:44:20:27:
1a:d0:45:fa:b8:76:63:bd:53:66:fa:ac:ab:c0:c4:
9b:25:d2:59:78:dc:b6:b8:7a:63:95:69:46:9d:e2:
f1:cc:12:00:2f:51:aa:6c:8b:47:3f:a0:6d:26:6f:
68:66:0e:84:0f:40:3c:1d:2a:6d:05:29:2d:7a:65:
7b:93:1f:c3:02:65:1e:3b:37:2d:e7:47:3f:61:c1:
08:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:85:64:FE:C6:01:D2:E4:6C:33:21:B6:B7:B4:EF:74:56:6A:20:20
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1oVk_sYB0uRsMyG2t7TvdFZqICA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.175.0/24
81.21.2.0-81.21.7.255
Signature Algorithm: sha256WithRSAEncryption
34:dc:e2:f3:de:56:ca:e9:fa:6c:18:ca:83:8a:51:bb:af:77:
b7:28:22:26:c7:91:d1:a2:23:3f:bf:53:1f:23:6f:a3:27:0d:
a2:57:f7:91:c9:eb:a8:fb:27:87:bc:c7:48:81:8e:f2:94:cb:
17:1a:de:83:ac:78:7e:c2:d3:1c:9f:92:f7:49:a0:9f:b9:13:
52:7d:cf:c0:b4:30:2f:1f:48:c9:54:d8:e7:48:c5:2a:ed:be:
cb:20:f3:df:56:9b:d8:cb:cb:e2:72:44:a9:68:d4:c4:6a:50:
18:4f:4f:60:29:03:c1:78:88:65:51:7d:30:95:6d:b6:a6:cf:
5f:f4:49:95:d5:7a:82:f6:0b:ef:cb:ae:68:f1:7b:db:78:d8:
44:66:04:bb:aa:dd:76:4c:49:57:d6:75:d5:fb:fb:17:ed:db:
42:64:82:5f:7a:28:04:f7:5f:d3:d8:78:e1:8c:d4:5e:a0:ad:
6f:c2:ad:0f:26:6a:22:5e:83:33:ae:08:9c:f6:45:c1:07:03:
d4:5c:9b:83:b6:5d:38:4e:be:1a:fe:a2:11:e8:99:77:3e:02:
2a:8e:97:af:65:2b:6f:79:9c:c3:af:7e:fd:6e:a7:32:8d:2e:
b1:20:f7:f0:63:bc:bb:a1:74:99:ad:f9:5d:d7:92:f2:cf:38:
99:03:cc:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org