Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/3O2Tva2AUMRnZNUhsq_zOdyFONA.roa
File: 3O2Tva2AUMRnZNUhsq_zOdyFONA.roa (raw, json)
Hash identifier: zFiVNQWiCRp+M4aHSczn6ltZ1jCgBMVfnftp7nJGUWQ=
Subject key identifier: DC:ED:93:BD:AD:80:50:C4:67:64:D5:21:B2:AF:F3:39:DC:85:38:D0
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0189FEAD7AE3EC6FAB7AE363F9EA88DB2427
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/3O2Tva2AUMRnZNUhsq_zOdyFONA.roa
Signing time: Wed 16 Aug 2023 14:08:49 +0000
ROA not before: Wed 16 Aug 2023 14:08:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 62.72.164.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Sep 2023 06:45:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:ad:7a:e3:ec:6f:ab:7a:e3:63:f9:ea:88:db:24:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 16 14:08:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dced93bdad8050c46764d521b2aff339dc8538d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:c1:04:b5:25:d6:05:b0:23:02:e7:e9:ed:
c8:28:54:3e:92:b4:db:2e:f3:73:e3:1c:9c:c9:eb:
4f:3d:d2:30:d2:80:d7:34:4f:7e:c4:f4:b6:b4:92:
0a:e6:e1:5f:2c:57:d8:4c:fd:3a:ad:68:d4:e0:c2:
c7:4e:78:52:f5:46:77:b0:95:f6:96:8d:b5:eb:17:
68:e7:c2:08:aa:f9:c8:8b:77:c3:a3:85:b0:3b:91:
46:5b:77:ae:1b:1e:2f:68:a9:0a:ac:3b:54:04:be:
4c:4c:30:33:70:20:80:a0:59:f9:43:91:61:9d:2d:
db:d2:f0:02:5c:29:6e:1e:ed:d0:94:e7:dd:a7:9c:
6e:5c:e6:61:b3:97:c7:7f:cd:34:03:c2:7b:f7:28:
21:16:b2:e3:da:f5:0e:eb:ac:12:12:25:e9:13:55:
88:92:ff:5c:da:80:f7:82:0a:56:aa:fe:6d:b2:3f:
fb:b8:4b:59:f3:b9:2e:b3:26:71:9b:dc:ec:cd:aa:
29:a7:a7:53:79:13:1a:25:bf:9d:a3:5a:b3:01:87:
24:85:81:f3:44:0a:b9:70:8f:1d:b8:70:ff:f1:ba:
49:da:71:c3:76:8c:14:77:74:bc:55:42:d5:c6:f7:
22:81:53:c2:a2:14:4f:bf:25:31:f4:55:b3:b4:c8:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:ED:93:BD:AD:80:50:C4:67:64:D5:21:B2:AF:F3:39:DC:85:38:D0
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/3O2Tva2AUMRnZNUhsq_zOdyFONA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.164.0/24
62.72.168.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e2:38:d4:d4:49:d1:58:ba:a7:78:13:0d:a1:6f:98:9e:78:
78:18:9e:b2:2d:ca:d0:ed:52:82:4e:33:11:7f:a1:10:98:13:
6e:4b:7f:35:31:e0:d4:45:6f:fd:1b:b1:17:0e:d2:29:dc:f5:
9a:15:62:ba:99:a6:d9:fe:3c:ae:6a:3b:68:d9:c5:f0:6b:99:
ce:a5:70:ad:9c:c7:58:95:b8:c2:66:64:81:b2:a9:0e:4a:bb:
85:e4:db:84:63:e3:28:15:e8:96:7a:a5:0a:4c:2b:39:66:a1:
21:a1:89:c2:ca:af:4e:2f:25:0c:75:4a:f0:b5:ce:4f:e8:88:
e6:9a:73:0b:fe:da:67:3f:36:0a:0b:9e:5b:21:b9:5a:bc:e3:
82:a5:f2:22:06:97:64:d8:d5:3a:c2:40:e0:35:ca:b6:0a:5a:
4d:40:4b:82:07:3b:c2:7a:68:ed:c8:cc:39:e0:b0:d1:78:13:
58:b3:1c:a3:12:a3:c8:3a:b6:6c:42:74:d7:f3:46:fb:ee:97:
6f:81:52:cf:4f:8a:49:33:14:64:d6:f8:5b:81:27:84:fe:ec:
fe:b6:c1:be:0d:75:b7:58:eb:49:23:d7:c4:50:57:19:06:97:
b8:c2:3f:f8:4d:4f:ec:d4:0d:08:93:9b:dc:c9:28:03:fd:c7:
95:c4:66:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org