Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/73WhEwhXS3mTnLxCVOL6Vu-1bro.roa
File: 73WhEwhXS3mTnLxCVOL6Vu-1bro.roa (raw, json)
Hash identifier: CRjwC7tqxmCNycxuSiKH9gIu8FfvV/gK3GndrhL0Gb0=
Subject key identifier: EF:75:A1:13:08:57:4B:79:93:9C:BC:42:54:E2:FA:56:EF:B5:6E:BA
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018D16EEF039E643F6390FB054375088F70F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/73WhEwhXS3mTnLxCVOL6Vu-1bro.roa
Signing time: Wed 17 Jan 2024 10:19:34 +0000
ROA not before: Wed 17 Jan 2024 10:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 62.72.167.0/24 maxlen: 24
81.21.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Feb 2024 09:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:16:ee:f0:39:e6:43:f6:39:0f:b0:54:37:50:88:f7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 17 10:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef75a11308574b79939cbc4254e2fa56efb56eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:87:f9:af:2b:f1:24:66:1c:b6:f2:1c:d3:
ac:a8:7f:76:cd:2b:33:79:7a:f4:6c:6a:55:c4:3d:
fe:6a:aa:22:2c:71:cd:07:0d:4a:88:01:96:84:8b:
ba:9a:67:65:b9:1f:40:6a:dd:f1:7f:f5:f4:ad:64:
d0:e3:85:49:10:3b:5d:48:cc:2b:87:c6:7f:45:05:
3b:df:97:51:ad:d1:4b:c7:94:d7:15:20:31:2c:6d:
f4:5b:a3:d6:ab:91:07:ef:90:81:38:70:cd:64:35:
01:b5:c8:ef:fe:59:1c:c7:d9:73:68:64:64:2c:55:
99:ee:6b:60:22:11:08:fe:f5:74:7b:b8:19:d9:b8:
08:14:f5:27:71:5b:9c:b3:f6:ce:ae:2d:16:5b:22:
9d:89:eb:d5:da:f2:88:62:8b:b1:42:2a:b0:28:63:
c1:f3:71:7b:a8:0a:18:21:0e:9f:c9:d1:d3:58:bf:
68:42:a2:db:2e:37:1a:a3:de:40:a4:bb:b2:ee:1a:
ab:05:76:a3:33:1f:c1:6b:dd:39:48:e5:07:ee:c1:
33:de:79:6a:a5:b1:ed:4e:ec:51:ab:1c:9d:c3:23:
8e:7a:52:b7:18:4e:db:ee:a2:c0:03:90:4f:14:4a:
89:13:be:d7:b6:f3:fc:fc:f1:84:e2:ac:32:8e:d8:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:75:A1:13:08:57:4B:79:93:9C:BC:42:54:E2:FA:56:EF:B5:6E:BA
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/73WhEwhXS3mTnLxCVOL6Vu-1bro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.167.0/24
81.21.12.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:86:3b:eb:d0:b9:a6:87:98:20:ae:ae:62:e9:05:fd:74:c7:
b4:63:21:76:0d:10:83:01:c5:73:bc:78:a6:77:15:18:be:0a:
39:d4:22:1b:d2:c1:eb:31:a1:2a:23:9f:d7:08:ab:7d:8d:68:
11:be:5b:72:d9:6c:61:6b:15:4c:ff:b3:c4:c0:b1:fa:00:ae:
f0:bc:60:b3:ef:57:66:38:a5:ba:18:7d:e1:f3:18:df:60:81:
0b:08:de:7c:f7:e9:9e:b7:95:88:db:99:bf:74:b4:9e:39:33:
9c:93:04:12:a7:ad:6e:44:fe:a0:30:c6:e3:ee:f8:99:09:cd:
87:6f:4f:d5:39:76:0a:a7:89:4c:af:de:94:c8:cb:9b:75:dc:
7a:8d:96:e5:68:67:b6:20:9b:4a:c0:e9:1b:c9:92:87:65:e6:
97:b0:8c:1c:19:0c:a5:4c:e6:2d:d7:4c:68:40:7f:e5:d5:ac:
09:57:2d:d1:05:d3:ab:fd:97:68:a5:95:2e:9e:bb:1a:14:38:
13:c0:fd:a9:d8:7b:50:a9:18:97:70:34:25:e7:2c:f6:20:2d:
9e:87:96:7f:e3:ef:af:d0:ff:26:af:26:1c:c5:b0:eb:12:97:
b7:42:b0:45:28:96:0e:3d:cf:d7:c4:0b:04:89:c3:c8:7e:0a:
61:d0:5d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org