Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/4AP8kcaq1oEwpdwoi1nDElEmwCs.roa
File: 4AP8kcaq1oEwpdwoi1nDElEmwCs.roa (raw, json)
Hash identifier: fEEQHHMpu5zcu+xN07TfMZ9SZSizxTYUyT8ZrezR6KI=
Subject key identifier: E0:03:FC:91:C6:AA:D6:81:30:A5:DC:28:8B:59:C3:12:51:26:C0:2B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0186634C69B43980EF4CAE47B8897FE0F0F3
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/4AP8kcaq1oEwpdwoi1nDElEmwCs.roa
Signing time: Sat 18 Feb 2023 06:53:17 +0000
ROA not before: Sat 18 Feb 2023 06:53:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 62.72.180.0/24 maxlen: 24
176.57.48.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Apr 2023 11:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:63:4c:69:b4:39:80:ef:4c:ae:47:b8:89:7f:e0:f0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 18 06:53:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e003fc91c6aad68130a5dc288b59c3125126c02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:73:77:db:d6:db:2b:24:ad:24:db:6b:60:
20:9d:99:5a:62:ab:92:a3:5a:55:23:4d:f0:2b:3c:
7c:dc:db:56:e7:40:88:52:8d:9f:34:73:3f:69:97:
2f:48:82:70:11:d4:65:a0:d1:5f:35:dc:ec:a2:5a:
15:d5:d6:78:de:df:62:3b:10:e5:1a:c3:5e:52:7a:
ff:bb:a8:50:0e:0c:28:fe:c8:56:5a:53:51:4a:93:
3e:84:51:f2:2f:55:af:92:a9:e5:b1:8c:29:41:77:
7a:91:20:e5:d4:d9:b0:31:04:32:8a:0e:27:5d:2f:
ac:17:ac:a8:d1:2a:71:b2:4e:23:47:ff:a2:76:85:
b0:12:53:56:54:6d:71:35:27:4d:bf:3f:7b:1d:2c:
c2:76:39:1f:ac:d9:17:f3:22:88:f2:15:fb:c8:8b:
9e:3d:39:e3:0c:4d:15:cc:4e:77:89:3f:0d:ca:3c:
61:da:db:9d:9a:ad:ab:03:fc:6c:ce:29:36:67:b5:
a3:f8:ba:e7:ce:7d:4f:91:98:54:9f:05:6f:5e:d7:
8f:d1:14:eb:71:0f:f1:76:51:e4:ab:b5:6c:75:76:
b9:f4:ed:68:d9:2f:16:2e:23:53:dd:e9:69:f3:ec:
f1:a0:71:cd:ed:3e:c3:fe:fb:a1:28:6b:6c:2f:95:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:03:FC:91:C6:AA:D6:81:30:A5:DC:28:8B:59:C3:12:51:26:C0:2B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/4AP8kcaq1oEwpdwoi1nDElEmwCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.180.0/24
176.57.48.0/24
176.57.54.0/24
176.57.56.0/23
Signature Algorithm: sha256WithRSAEncryption
33:15:33:c6:bc:1c:2f:79:14:08:2d:83:4b:47:e8:fd:0b:ea:
4e:c7:22:85:6b:c5:00:7b:6a:70:b0:83:1a:57:a6:63:55:9a:
54:67:12:e4:61:92:e4:0f:db:fe:8e:64:22:68:02:d6:b0:3b:
c7:b2:8d:71:0d:32:fc:ba:62:9b:09:2f:b9:fa:d2:c6:a1:dd:
e8:66:53:f0:df:03:3e:48:88:7b:69:c6:0d:5b:c8:b4:7d:11:
14:c0:6b:c1:1f:de:91:31:b8:9f:42:7e:6b:96:9c:12:7f:1c:
e3:d5:41:01:79:ed:2d:bd:82:86:c2:8c:f9:78:61:0f:1f:5a:
79:d9:b5:c2:ba:8b:79:43:ad:b8:85:29:9b:c0:6a:68:6c:f9:
7d:fc:be:97:9e:1a:16:a3:98:22:7c:9d:69:7a:a3:0b:c2:6b:
90:88:a2:fd:ad:31:64:d5:f6:a2:14:fe:f9:dc:57:f5:91:7e:
e1:75:62:2d:3c:a5:33:0c:e5:18:15:45:5b:8d:a1:f1:dd:81:
93:95:ef:82:bd:b3:61:83:4c:ed:50:f9:90:b3:72:a6:b1:ed:
d6:c7:f4:ee:36:74:99:65:dd:01:af:d6:17:82:79:26:77:2e:
5a:a6:af:f9:fa:e2:fe:ec:14:8d:1d:c5:ba:8e:bb:68:98:66:
24:35:9a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org