Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/9AuF4jfkFF138Y7idKJLOPHegNY.roa
File: 9AuF4jfkFF138Y7idKJLOPHegNY.roa (raw, json)
Hash identifier: pop2eIGExd/oT61seKBBIHZPq8zPiLF71VIq3xRb3zA=
Subject key identifier: F4:0B:85:E2:37:E4:14:5D:77:F1:8E:E2:74:A2:4B:38:F1:DE:80:D6
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7AA4D51E8EF4B3316E4871927F283
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/9AuF4jfkFF138Y7idKJLOPHegNY.roa
Signing time: Mon 01 Jan 2024 20:29:34 +0000
ROA not before: Mon 01 Jan 2024 20:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209186
IP address blocks: 62.72.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 May 2024 05:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:aa:4d:51:e8:ef:4b:33:16:e4:87:19:27:f2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f40b85e237e4145d77f18ee274a24b38f1de80d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:d8:e9:79:87:33:86:02:f1:c5:6a:cf:59:
9b:1c:ea:c1:e3:bc:62:25:4f:29:98:11:ba:05:b2:
8b:b5:5e:2b:73:3f:c2:2d:22:c8:19:e1:3c:4b:31:
af:e6:59:6a:1b:00:3e:ce:6c:0e:e1:5e:06:9f:80:
19:c6:8e:0e:c1:f7:7d:c4:47:3b:99:22:74:52:8b:
5e:4a:65:65:ea:5e:75:16:f0:d4:f1:1c:6f:f2:bc:
71:cd:42:be:9d:bb:5d:53:0a:72:a2:24:66:e4:0c:
9d:44:f6:c3:c6:49:55:cf:1b:35:92:b7:2b:a8:f2:
25:bb:11:2d:eb:92:8e:06:54:9c:27:0f:c3:e1:60:
7a:7a:b5:9f:25:85:39:6b:19:e3:34:08:3e:5a:40:
70:c9:3a:53:2d:4e:a7:24:ee:34:30:d0:98:b0:b2:
6f:ac:41:fd:e7:c0:29:43:51:b0:e7:b9:fc:da:f5:
03:7d:98:19:06:23:8f:3f:62:67:ae:37:83:8f:17:
be:8c:92:61:30:7f:ab:9b:c0:01:0c:d4:e8:40:54:
0c:2d:73:7b:48:9f:ec:05:7a:23:ef:be:68:40:37:
92:5d:dd:74:ff:c5:7e:65:a6:27:2d:e2:ad:cf:c1:
f8:a3:ca:14:33:ce:36:52:a7:fa:25:59:c9:d6:d6:
2e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0B:85:E2:37:E4:14:5D:77:F1:8E:E2:74:A2:4B:38:F1:DE:80:D6
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/9AuF4jfkFF138Y7idKJLOPHegNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.172.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:96:9c:82:15:11:f7:50:99:d6:c1:9f:f2:14:59:48:ab:28:
b4:0c:09:72:10:78:88:97:53:b7:f3:0e:9a:e9:53:2e:ce:d4:
e8:a5:f8:92:e3:e6:75:6f:44:40:8c:0e:fa:91:01:f2:a6:7c:
29:d7:8a:6c:8d:b3:e3:e3:f5:6e:f2:0c:d6:aa:56:39:5b:c4:
c8:32:22:9d:03:4d:88:2d:1f:1b:ac:1c:05:10:5b:24:d2:83:
da:87:c8:5a:2b:44:d9:d5:05:37:12:c8:8b:64:5f:61:8c:e6:
ec:7e:21:f6:be:7d:6a:85:2d:7b:9b:c1:18:ff:33:c4:7a:15:
82:00:db:c3:ad:cd:cd:e5:99:91:b8:e0:d1:05:8a:f7:6d:1f:
c1:89:8c:de:6f:b9:0a:a3:16:44:7c:c7:39:2d:90:60:8f:ce:
80:8f:b0:a7:f8:65:ae:79:6c:5c:04:d2:ce:eb:ed:9a:63:2b:
d1:09:4a:59:81:ac:10:0d:21:d0:4c:22:f9:87:2c:c0:63:ec:
ab:7d:b3:55:ae:9c:1f:d6:61:f1:70:a4:62:68:97:7d:ca:4b:
5d:15:c0:d8:dc:09:d8:1c:e6:77:2a:50:a9:b6:0a:c7:7d:aa:
67:84:36:56:e7:03:7c:1d:d2:81:c4:d9:88:41:cd:02:8f:0e:
81:2a:27:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:11:37 2024 by rpki-client on console-fra.rpki-client.org