Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/2zupa8CUYcpt3x3SamSQU8zS7bI.roa
File: 2zupa8CUYcpt3x3SamSQU8zS7bI.roa (raw, json)
Hash identifier: cYnBn/IPQ0VZ95RwNbl2PjXI04QmL0isqUec2IYUYbI=
Subject key identifier: DB:3B:A9:6B:C0:94:61:CA:6D:DF:1D:D2:6A:64:90:53:CC:D2:ED:B2
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018878272947B69D1A0155F798FF272D5113
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/2zupa8CUYcpt3x3SamSQU8zS7bI.roa
Signing time: Thu 01 Jun 2023 18:10:12 +0000
ROA not before: Thu 01 Jun 2023 18:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.72.160.0/24 maxlen: 24
62.72.163.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 12:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:78:27:29:47:b6:9d:1a:01:55:f7:98:ff:27:2d:51:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 1 18:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db3ba96bc09461ca6ddf1dd26a649053ccd2edb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:5f:c5:a9:12:1a:65:60:0d:1c:12:81:55:
ed:39:e2:f9:06:f7:9c:73:36:a1:84:bd:e0:ad:af:
e1:62:62:4f:be:dc:f8:88:49:a2:9f:2e:5d:cc:12:
d7:fa:a6:d4:f3:80:9c:d4:51:0d:9b:4b:ea:24:f5:
6c:89:81:52:0a:c5:99:c2:ec:dc:9b:7d:20:19:b4:
75:ad:b3:dd:40:98:90:65:5e:dd:26:83:ed:29:e1:
1e:13:61:2f:a3:dd:52:c7:d0:58:b4:7d:13:11:a0:
1e:e6:0e:e8:6e:7f:93:1a:aa:0b:0b:7c:f3:86:54:
a4:fb:7c:26:10:9f:8b:54:90:73:92:ea:c0:e2:58:
9c:94:4f:39:60:0b:e0:92:be:80:05:3e:0f:00:e0:
83:3e:38:c2:06:73:5a:cf:9c:0d:b4:10:99:4f:d9:
3f:16:5f:67:da:d5:35:fe:7c:12:cf:8f:78:ba:b4:
fb:aa:9b:ec:e4:bf:fb:08:69:20:74:6c:cb:8b:0c:
f0:cd:90:0a:3a:99:f0:5a:a5:13:bd:4f:e5:20:7f:
32:b9:f3:3d:7e:1d:d5:f3:af:ed:c4:19:cb:22:dc:
ba:ce:86:a2:05:2c:8e:c3:ff:ec:4d:4a:30:a4:0e:
b6:cf:bc:81:97:a9:25:31:22:03:5e:7b:ec:67:14:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3B:A9:6B:C0:94:61:CA:6D:DF:1D:D2:6A:64:90:53:CC:D2:ED:B2
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/2zupa8CUYcpt3x3SamSQU8zS7bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0/24
62.72.163.0/24
62.72.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:3d:11:58:e0:64:86:37:4d:0b:9f:c5:0d:db:5c:c6:38:e6:
5f:2e:a5:02:37:3f:9b:e9:00:78:87:d0:b4:2b:cb:0d:e9:9a:
b8:71:fe:af:57:e6:db:5b:23:d9:da:8f:12:a7:61:3a:37:54:
a1:ec:68:dc:e1:63:a1:9c:62:c8:08:74:b9:de:1b:e0:12:4c:
d9:96:72:43:a6:cd:c6:5b:f8:21:d5:b9:0e:94:b8:50:40:f1:
d3:c0:7c:6a:bc:44:ac:66:f7:ea:c1:d6:53:af:ff:91:ba:61:
52:49:ca:3b:73:de:42:78:a1:a3:12:e5:b4:b3:b1:bf:53:f9:
0a:a1:68:4a:29:73:c8:6d:bb:dc:87:12:d3:15:8b:69:38:4e:
f9:d5:e6:66:14:b7:91:f8:84:cb:ca:1f:99:33:15:3a:60:7b:
d8:e5:9f:ac:b6:f2:cf:85:ec:3e:a4:d4:92:68:36:58:67:58:
e1:ef:8b:58:0e:d3:c5:68:aa:8b:91:75:bc:33:b6:c1:21:57:
97:43:37:19:b3:fe:1a:72:a6:7a:7e:4f:16:11:fb:40:a0:27:
c4:33:5d:33:82:ff:14:2e:d5:d3:c6:df:cc:5c:7c:29:e5:69:
3e:04:5f:9e:c1:b1:df:88:c9:c4:6c:fb:a2:8b:47:44:35:07:
2b:96:24:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org