Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7NqKKI-LUAfjAyTkd_M56xsnFCA.roa
File: 7NqKKI-LUAfjAyTkd_M56xsnFCA.roa (raw, json)
Hash identifier: yxc9nz+Ub/5Niwg6SyAA9MzeKw3wEggk0reQ9CknubM=
Subject key identifier: EC:DA:8A:28:8F:8B:50:07:E3:03:24:E4:77:F3:39:EB:1B:27:14:20
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C6EADB4A57CE983D8F8AD4CD84B10C2F9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7NqKKI-LUAfjAyTkd_M56xsnFCA.roa
Signing time: Fri 15 Dec 2023 18:12:06 +0000
ROA not before: Fri 15 Dec 2023 18:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142111
IP address blocks: 62.72.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6e:ad:b4:a5:7c:e9:83:d8:f8:ad:4c:d8:4b:10:c2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 15 18:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecda8a288f8b5007e30324e477f339eb1b271420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:62:cd:1f:47:5c:fa:59:1c:3a:4e:a2:af:17:
8a:2d:42:ef:99:48:51:60:47:30:39:02:17:5e:07:
82:33:7c:54:36:9b:97:49:ac:81:43:e6:60:99:1b:
6e:3a:8e:dd:14:e7:ed:52:53:94:56:96:23:15:99:
ed:09:01:57:f8:d0:0a:a5:f8:70:c0:f2:15:5d:3a:
c5:2b:c5:6e:42:df:57:db:44:e8:16:8f:4d:b1:78:
13:c8:d7:57:5a:d9:11:54:51:21:9b:a4:ae:38:73:
2f:da:f2:38:ee:8b:29:b3:27:8b:e1:86:32:56:ad:
b4:26:76:79:91:fc:1d:bf:60:ae:fc:a6:26:aa:ef:
e6:13:cd:7d:62:e4:3d:53:6e:98:95:6a:85:7e:b6:
ea:35:e4:a9:21:da:7f:b9:b3:b9:8f:75:b1:ce:cc:
ab:ba:90:33:db:fa:1b:ea:aa:d1:10:10:38:93:35:
2c:8d:45:dd:89:35:2f:1c:7f:5b:4f:67:56:68:54:
0b:53:be:53:34:eb:bd:f6:76:73:35:d9:5b:b4:5a:
b8:b0:63:dd:1b:9d:25:66:a5:dc:0b:7a:68:21:5d:
52:45:34:13:45:e1:7b:a9:51:80:1d:5c:8c:a9:96:
78:d3:79:58:5f:8b:60:d0:63:9f:cc:fd:de:29:5e:
52:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DA:8A:28:8F:8B:50:07:E3:03:24:E4:77:F3:39:EB:1B:27:14:20
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7NqKKI-LUAfjAyTkd_M56xsnFCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.171.0/24
Signature Algorithm: sha256WithRSAEncryption
14:68:ca:70:7a:86:54:6a:9a:51:2b:c5:0e:1e:b3:3d:da:5b:
8b:20:18:9f:19:93:f3:8f:d4:47:1f:88:b3:15:c2:50:2f:7c:
17:65:bd:8f:3d:b5:79:37:f3:04:c5:2a:18:4b:1a:6a:6c:36:
29:08:c2:d8:ad:65:35:ab:c3:b2:9d:10:7d:ac:9f:aa:2b:63:
9c:a5:72:93:b4:eb:6b:58:c0:da:8f:0e:68:5b:90:14:38:50:
c8:1c:c5:14:19:5f:c8:91:bc:3e:e4:92:52:91:f6:82:f3:e9:
96:25:20:7e:25:9e:97:2e:48:61:1e:f0:62:51:4a:1a:ff:00:
70:35:b4:bc:c5:21:99:9e:80:5d:e6:68:43:24:86:e1:77:8c:
f2:f6:51:f4:71:c6:35:1f:88:13:3f:34:18:7d:24:9a:d0:3f:
1c:da:1c:db:3f:ec:49:05:8c:b8:b3:c4:23:4a:7e:bc:11:f6:
32:97:07:e0:f6:03:9b:92:dd:bc:70:a3:36:12:5f:36:c1:82:
8e:c5:87:bc:cb:6b:db:62:0d:86:80:dc:3f:af:44:b1:40:d6:
59:bf:69:b2:7b:6d:2d:fb:b1:8e:60:21:3c:ef:01:df:99:b2:
3a:da:a3:90:21:ec:e2:32:37:26:0d:d6:dd:4e:3e:a8:4e:18:
29:86:bc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org