Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7ReZXYb7kzfrBRMPnlND_HdRmaM.roa
File: 7ReZXYb7kzfrBRMPnlND_HdRmaM.roa (raw, json)
Hash identifier: fLBvXUYv2H5Kh2KUsCaY1wEdbeEjlevOzqxo71MmmF4=
Subject key identifier: ED:17:99:5D:86:FB:93:37:EB:05:13:0F:9E:53:43:FC:77:51:99:A3
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019130F763A87B1896AB4BBC00EF388F0244
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7ReZXYb7kzfrBRMPnlND_HdRmaM.roa
Signing time: Thu 08 Aug 2024 07:50:04 +0000
ROA not before: Thu 08 Aug 2024 07:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 62.72.173.0/24 maxlen: 24
62.72.180.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 12:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:30:f7:63:a8:7b:18:96:ab:4b:bc:00:ef:38:8f:02:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 8 07:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed17995d86fb9337eb05130f9e5343fc775199a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2b:33:ae:0e:b1:9b:54:63:40:02:c4:c6:aa:
43:6c:f5:d5:78:32:ea:0b:49:71:fd:89:48:ed:35:
9d:38:61:42:82:fa:79:88:19:cc:39:19:28:8b:18:
db:bf:6d:f5:cd:90:02:eb:ab:db:a8:cb:06:d3:05:
82:5e:2e:78:a8:54:a7:bc:42:ce:36:ce:40:8e:6f:
23:ec:62:eb:36:29:0b:2f:19:af:95:f6:b7:0b:c3:
fc:25:a3:59:94:e1:0f:a4:35:03:bb:e3:f1:70:14:
5b:3c:21:19:85:3b:4c:14:1f:74:73:88:01:3a:a5:
ae:58:73:69:aa:21:20:bd:16:85:a0:ed:d4:cf:a4:
b0:03:72:78:77:5b:cf:a1:b4:77:9d:00:1b:84:bb:
2b:46:ce:2c:f0:10:ff:43:28:a5:90:38:83:4f:28:
b6:bf:85:c9:e3:a2:c3:63:3d:07:ae:3b:d5:94:8a:
ed:28:4a:a9:57:c6:75:c8:3d:37:b1:2a:9f:f9:f5:
35:f6:05:f9:7c:be:50:20:47:e9:bd:fa:c9:f4:49:
df:3b:2f:40:89:51:e4:ab:bb:2b:f8:66:2f:07:d2:
f9:8f:ed:9e:e9:5d:e6:93:10:60:3b:b5:58:f6:86:
96:2d:54:d3:5a:23:ee:6c:40:12:15:29:6e:71:6f:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:17:99:5D:86:FB:93:37:EB:05:13:0F:9E:53:43:FC:77:51:99:A3
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7ReZXYb7kzfrBRMPnlND_HdRmaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.173.0/24
62.72.180.0/24
62.72.184.0/23
176.57.53.0/24
Signature Algorithm: sha256WithRSAEncryption
88:61:50:29:c5:82:9b:60:f0:b7:aa:4a:72:73:24:fe:2f:a6:
9a:52:e2:00:d7:af:57:60:2a:b4:d6:3c:68:b1:34:5e:c0:fb:
35:48:60:69:05:a3:10:6e:7c:7c:53:c6:4c:53:10:99:bb:73:
92:5b:8b:c5:2e:cd:bc:35:14:11:35:22:bd:6c:0b:98:2f:85:
0e:66:4f:db:c5:02:1f:86:52:48:21:de:21:b7:72:c9:f9:de:
bd:5a:33:2f:de:a3:a6:36:8d:65:84:ea:44:d5:20:a6:e2:78:
26:ea:5d:24:f5:62:e2:ba:df:f1:1a:13:91:09:bd:78:60:c9:
0c:16:5d:ec:ef:18:41:d2:7c:f3:0b:c2:62:8d:f8:46:62:5d:
da:29:ab:44:5b:a7:a0:fc:12:5b:e2:0a:71:12:68:46:15:6c:
cf:12:2e:62:f2:63:e4:39:66:6b:f9:3d:ed:f6:1c:71:34:5a:
fd:c8:3d:2d:25:52:d2:13:4e:4d:a9:67:c1:7a:6c:fd:d6:d5:
f8:90:23:7d:ac:8c:e3:87:ae:34:67:e0:1a:19:4b:ad:2e:ff:
95:4e:f0:36:7a:5b:b8:7f:9d:bb:0a:23:4a:a2:93:d9:f7:62:
50:4a:71:25:50:b2:1a:c1:98:19:b9:f7:27:72:1a:04:db:af:
59:7b:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 15:05:08 2024 by rpki-client on console-fra.rpki-client.org