Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8eLPiGof2vESlyOW8WpbF8FDuZg.roa
File: 8eLPiGof2vESlyOW8WpbF8FDuZg.roa (raw, json)
Hash identifier: zjc0X2aiQSpuIXKacYhyOePxvZ5xI1DPnuJRUzW8lRs=
Subject key identifier: F1:E2:CF:88:6A:1F:DA:F1:12:97:23:96:F1:6A:5B:17:C1:43:B9:98
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018BDD2BDEC2E0EF04A8168E48A8D0D074FF
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8eLPiGof2vESlyOW8WpbF8FDuZg.roa
Signing time: Fri 17 Nov 2023 12:05:21 +0000
ROA not before: Fri 17 Nov 2023 12:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 62.72.180.0/24 maxlen: 24
176.57.48.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
81.21.0.0/24 maxlen: 24
176.57.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 19:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:2b:de:c2:e0:ef:04:a8:16:8e:48:a8:d0:d0:74:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 17 12:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1e2cf886a1fdaf112972396f16a5b17c143b998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1c:9b:1e:e7:87:79:19:ba:ea:26:52:3c:7e:
b0:d2:76:64:9f:80:5d:a2:f7:67:6e:99:b5:ba:7d:
d7:9d:a2:ea:4d:85:b9:ff:af:37:7f:a6:75:ba:f4:
aa:01:7c:59:02:72:5b:e6:72:c6:cb:25:35:5b:d8:
f0:d3:08:7b:5f:f4:42:48:e9:1e:32:1e:2d:df:6f:
e9:8d:7d:1c:51:c7:da:2e:06:4a:33:91:86:01:19:
6b:23:41:b7:f3:fe:92:1f:aa:68:ac:a3:c4:5c:0a:
73:bb:aa:ea:75:9f:0e:4b:d5:0d:21:99:ae:4c:e3:
27:5d:15:29:1b:66:e2:dc:64:ee:d5:8d:81:8f:de:
b7:46:4f:52:22:88:50:0d:1b:e3:f1:c0:5d:30:74:
83:44:2d:91:1c:29:5c:eb:91:a2:48:d6:20:54:ed:
8f:fa:b0:63:ae:bf:e3:a8:3d:4c:ac:f2:69:87:74:
9c:ca:5f:65:e9:42:59:5a:a4:bd:99:6d:e6:01:42:
a9:3c:21:12:d6:8c:73:d8:78:81:ed:ee:f3:05:23:
df:39:e4:43:87:f7:eb:72:dc:40:73:0f:62:a6:09:
7f:9f:60:07:2f:8d:30:db:70:03:49:0d:f2:fb:8c:
95:85:23:c4:a3:06:7c:df:ab:ff:ea:e3:43:c1:8b:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E2:CF:88:6A:1F:DA:F1:12:97:23:96:F1:6A:5B:17:C1:43:B9:98
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8eLPiGof2vESlyOW8WpbF8FDuZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.180.0/24
81.21.0.0/24
176.57.48.0/24
176.57.54.0/24
176.57.56.0/23
176.57.60.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e9:b7:49:68:04:4f:8a:b5:58:b9:a3:fa:ce:89:4c:68:d7:
bb:78:7b:c1:79:c4:b8:c6:60:19:10:eb:57:96:13:a1:77:00:
d2:2b:5e:07:62:d9:12:24:96:b5:c3:c0:51:13:e7:e6:b5:2f:
2f:d7:6a:53:09:68:3a:88:b6:e1:7e:9a:a3:47:66:6f:ee:f9:
62:4b:03:64:09:37:5e:5c:4d:c6:a4:8b:11:cf:fa:02:fd:2d:
2c:8a:22:98:62:6c:c7:4c:eb:a5:b7:f6:18:f4:86:84:7b:17:
fc:cb:83:5e:6d:71:d0:9e:45:46:19:fb:6a:81:a3:95:e1:6c:
79:89:12:8c:46:54:87:a8:2e:38:53:63:d5:f3:e7:ae:ea:cf:
bf:66:45:65:8a:cc:98:af:f9:ee:9c:5f:22:7b:fe:d6:6e:1a:
df:e5:a8:0f:c3:0c:22:31:5e:32:67:ee:cc:54:2e:09:71:aa:
97:0e:e5:f5:ab:b5:ee:ca:cf:af:68:83:3c:6c:e2:4a:c6:01:
7e:01:c1:2a:50:78:c8:e6:b9:ad:98:ed:2c:79:ac:fa:2c:11:
15:a3:80:af:54:0d:18:53:74:60:e1:c7:7d:8e:8e:6b:fa:9f:
9f:18:b0:c1:32:6b:89:d1:a1:4b:76:14:85:c1:94:89:4b:7e:
0d:70:90:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org