Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5CKERAeVOr2_MGdWrglFRmbMW6g.roa
File: 5CKERAeVOr2_MGdWrglFRmbMW6g.roa (raw, json)
Hash identifier: 8DbDsuovO5Jc09+rqSQIWdBdr0jDVihCYkkwyHxSHOk=
Subject key identifier: E4:22:84:44:07:95:3A:BD:BF:30:67:56:AE:09:45:46:66:CC:5B:A8
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018B9E32448049E8DA7B2FC0BCBACDC3741A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5CKERAeVOr2_MGdWrglFRmbMW6g.roa
Signing time: Sun 05 Nov 2023 06:36:16 +0000
ROA not before: Sun 05 Nov 2023 06:36:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207994
IP address blocks: 62.72.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9e:32:44:80:49:e8:da:7b:2f:c0:bc:ba:cd:c3:74:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 5 06:36:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e422844407953abdbf306756ae09454666cc5ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:31:5c:d8:7b:e4:39:6b:f1:d0:80:97:8e:
06:df:e9:68:0f:66:a7:ed:bc:a5:4a:0c:40:49:2b:
63:08:21:f8:a6:28:dd:a2:49:ed:6b:65:c3:6b:6a:
30:7b:57:b3:60:04:97:49:76:30:83:bc:10:f4:fc:
36:40:d9:5c:d8:ac:ca:8f:50:e7:79:da:f6:06:55:
0a:a4:b7:3b:3e:d0:67:ed:50:02:cb:3c:5b:98:bb:
5a:2f:26:43:5e:1b:1d:30:f7:26:8d:21:c1:7a:e5:
47:73:91:7e:e3:94:9f:96:ad:ab:02:cf:78:99:ad:
3d:13:4f:7b:5c:19:67:5d:78:57:6b:be:88:e5:b0:
7e:e1:16:65:56:be:7a:28:b5:81:49:1c:4f:41:26:
f3:f6:02:6c:b7:ab:5d:d4:69:9f:8a:c2:98:d9:79:
be:1d:ef:6d:a0:4f:c6:83:bb:f3:a8:ea:f3:7c:fe:
d4:aa:d9:e8:4e:4d:8b:45:02:1f:bb:45:fd:58:70:
67:26:c2:d1:d1:35:35:d5:a7:13:64:84:9f:7b:66:
71:06:01:52:0a:9e:13:dc:29:91:49:b1:24:1a:50:
0e:9c:76:3f:b6:6e:1c:81:95:36:fc:4b:56:4e:20:
9b:ec:5f:2c:2b:79:66:a8:a5:40:d1:c5:0b:a6:d8:
3e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:22:84:44:07:95:3A:BD:BF:30:67:56:AE:09:45:46:66:CC:5B:A8
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5CKERAeVOr2_MGdWrglFRmbMW6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.177.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d9:70:6d:11:e4:98:12:61:76:98:d7:8a:4b:9c:ec:c2:04:
a5:cc:01:9e:5b:f9:09:63:9a:5f:76:dd:00:a5:84:cb:4d:1d:
a4:cd:d0:34:e7:29:e5:d8:56:b6:af:21:b4:9d:33:55:9e:72:
a6:20:d4:03:74:1b:40:4c:47:a5:79:57:dd:98:c0:6e:c1:93:
f9:ec:2c:d4:a4:85:91:41:8f:56:e9:58:cd:6c:b1:b2:d7:c5:
55:eb:df:47:ce:13:57:8c:34:77:9b:0f:8b:c8:56:fb:a4:a7:
1c:35:66:05:86:e2:bd:48:3b:b0:9f:df:72:57:ab:f6:47:77:
fe:68:a3:ee:34:3a:89:8e:52:8f:6c:b9:7b:38:98:47:fc:56:
2d:1f:d7:84:e9:e9:41:ae:6b:14:80:f6:ca:6a:73:0d:1d:10:
50:c5:b4:78:3c:71:29:40:4e:99:90:e3:96:e1:9e:4d:22:0c:
2b:0a:92:eb:99:90:38:8b:b5:fb:f0:03:ab:47:a8:d7:2e:6b:
0b:38:a0:c5:d6:77:7d:a3:31:8b:79:10:25:0c:00:04:71:9c:
d8:65:74:44:41:00:b7:56:c6:07:35:2a:8c:7c:51:39:f8:c2:
a9:f8:bb:d1:16:e8:ab:e8:69:68:d4:5a:5c:0f:7f:9e:73:2b:
7c:8e:dd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org