Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/91vdrx0-c08VaKTANvD3v5hqmRQ.roa
File: 91vdrx0-c08VaKTANvD3v5hqmRQ.roa (raw, json)
Hash identifier: RztjnKHixLlS6GyZ0Gb71WUAeaGG2ll1rjJUSpyr/j8=
Subject key identifier: F7:5B:DD:AF:1D:3E:73:4F:15:68:A4:C0:36:F0:F7:BF:98:6A:99:14
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01856F4B83B1E56BE44DE01A480FA8621212
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/91vdrx0-c08VaKTANvD3v5hqmRQ.roa
Signing time: Sun 01 Jan 2023 21:44:57 +0000
ROA not before: Sun 01 Jan 2023 21:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200710
IP address blocks: 62.72.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Feb 2023 07:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:83:b1:e5:6b:e4:4d:e0:1a:48:0f:a8:62:12:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 21:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f75bddaf1d3e734f1568a4c036f0f7bf986a9914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:e1:11:1b:5f:a3:2d:09:d3:5e:d4:9c:b1:
a3:73:74:41:b4:d9:00:e2:67:d7:56:f2:27:57:54:
87:86:03:78:ec:17:2f:5c:61:3e:db:af:82:0c:d6:
ea:73:16:14:f7:65:15:1d:ed:a7:f1:58:a3:76:84:
2a:a5:6e:ea:49:5c:95:d7:1a:3b:a0:7d:fa:e9:c9:
c6:2d:06:ea:9f:46:e9:c9:33:1a:92:b4:58:e9:d8:
df:2c:79:21:2f:dd:66:63:0f:45:4f:d5:b2:ae:b4:
ad:4a:7f:71:2f:44:43:09:8d:9f:6f:27:4f:5a:f5:
93:97:8f:a3:af:c2:f4:fd:63:fa:35:44:2a:fe:06:
05:16:1e:b8:48:b6:85:93:81:4c:91:5b:be:4f:6e:
86:d2:99:55:f7:7f:5e:f3:ce:ca:71:5f:74:a5:cc:
b6:21:61:5e:9c:bb:5a:5c:33:2a:b9:d6:04:4a:5a:
9c:72:b3:ca:72:e3:77:0a:ca:52:13:b7:09:31:0e:
0c:d8:d8:c0:63:64:d2:7f:12:1e:11:d8:e1:71:2c:
95:aa:06:c8:46:ed:90:2a:c3:12:84:c3:b2:fd:14:
bf:1e:05:ee:31:4c:8a:3c:75:ec:eb:75:bd:1e:1d:
7d:8f:c9:b0:69:83:91:30:24:dc:84:56:93:bd:51:
94:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5B:DD:AF:1D:3E:73:4F:15:68:A4:C0:36:F0:F7:BF:98:6A:99:14
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/91vdrx0-c08VaKTANvD3v5hqmRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.180.0/24
Signature Algorithm: sha256WithRSAEncryption
82:9b:29:95:d7:a2:6d:7f:d7:08:ea:60:1f:ba:35:5a:74:7a:
48:f0:02:1a:cd:21:48:70:f0:0d:16:b7:53:c3:9b:db:73:06:
16:f7:31:c4:0c:63:c5:19:ae:9b:0d:8a:f1:57:75:90:e9:65:
cf:3d:04:63:5b:85:5f:3d:c1:84:eb:a5:62:f6:2e:13:f4:0d:
ec:79:b7:3e:35:c1:d0:bf:ab:57:f4:0f:38:2d:25:fb:b5:b1:
09:83:56:71:28:6b:29:fd:78:be:2e:45:7f:a2:41:86:d8:fd:
12:be:dd:97:15:c6:05:dc:b2:22:a1:8d:e4:d7:3f:c1:70:5d:
ab:fd:4f:0a:51:9d:c1:23:d5:52:5a:0e:72:b2:1e:36:39:f1:
d6:9c:aa:b5:ce:c4:eb:66:d2:cb:3a:d8:1c:8e:31:ae:2c:50:
4d:ac:37:8b:d4:2b:f3:bf:41:90:1d:f6:b3:66:ca:e1:f7:d9:
e8:0a:25:cf:0f:76:bf:3f:c0:32:6f:f4:a1:66:01:08:87:73:
71:0f:44:c9:6e:4a:2a:cc:dc:6b:7c:81:d9:b3:3d:39:0a:f2:
73:67:bb:a1:14:e5:2f:e6:c0:79:01:a8:39:16:d2:db:0b:3f:
f5:bc:02:12:e2:f9:a2:8b:f5:7e:bc:39:a3:5d:dd:ed:72:87:
06:6d:6a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org