Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/9_OezrQfsOyPACbwKbamnamzUjs.roa
File: 9_OezrQfsOyPACbwKbamnamzUjs.roa (raw, json)
Hash identifier: PYqf+flnB79eeSN/kByRrsaVSnRkt1qsPrKcgEIo+f0=
Subject key identifier: F7:F3:9E:CE:B4:1F:B0:EC:8F:00:26:F0:29:B6:A6:9D:A9:B3:52:3B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0189D0212003B00788BE373CE6A7AB6D33AC
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/9_OezrQfsOyPACbwKbamnamzUjs.roa
Signing time: Mon 07 Aug 2023 13:12:59 +0000
ROA not before: Mon 07 Aug 2023 13:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 62.72.175.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Aug 2023 07:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:21:20:03:b0:07:88:be:37:3c:e6:a7:ab:6d:33:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 7 13:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7f39eceb41fb0ec8f0026f029b6a69da9b3523b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:e2:35:26:23:13:2a:dc:09:ed:38:44:e0:
38:6d:04:ce:37:b4:a5:b2:a0:ac:dd:17:b9:07:d2:
ae:86:b3:58:94:8a:f0:e0:25:df:e7:f2:07:3f:16:
5c:b7:38:35:47:23:3a:e5:1a:be:e9:f8:18:0b:37:
b7:91:51:06:fa:e3:3d:0a:60:a4:ca:73:a5:0e:6d:
41:ff:a1:fd:59:86:7c:9d:b3:12:20:b0:cb:e8:93:
14:49:6d:96:c5:5f:4e:fc:8b:e9:19:8b:c8:aa:a1:
78:f9:f6:68:41:ea:ba:06:f3:9d:b5:e5:73:55:8e:
51:91:2e:ce:b3:d5:93:ce:9a:7e:71:f3:49:1c:e3:
e6:89:16:c9:d9:cb:bb:1b:6f:44:25:26:91:b7:7d:
6e:43:b2:9a:a8:d6:10:e6:a8:9d:8d:79:8e:d4:99:
94:fe:cf:3c:04:06:fd:74:b6:5a:8d:fe:ce:c1:d9:
27:a6:87:f7:63:23:c1:d9:1a:82:78:a2:8d:69:f4:
1e:6d:1f:d5:36:1f:a2:40:81:8f:74:4b:8e:3f:5e:
1b:ca:1e:63:a7:31:de:66:6c:4d:ff:a1:e6:7e:b5:
4e:44:46:95:13:d0:df:0d:3e:b1:8f:4a:e0:6b:7c:
12:0b:14:b4:60:48:3f:c0:13:9f:d5:4b:85:44:84:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F3:9E:CE:B4:1F:B0:EC:8F:00:26:F0:29:B6:A6:9D:A9:B3:52:3B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/9_OezrQfsOyPACbwKbamnamzUjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.175.0/24
81.21.4.0/22
81.21.9.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9c:92:85:40:51:ea:42:87:00:43:0a:8f:f0:3b:63:d7:0f:
0b:5c:d1:c1:a1:27:34:ba:7b:bd:bf:a7:2f:70:41:27:87:99:
9b:4d:f1:26:dd:b4:b6:3c:aa:ab:5e:d6:c9:d0:64:d3:7d:1c:
21:81:10:ee:80:7f:8d:c7:28:b4:ea:6b:40:17:76:e5:94:ec:
8c:f7:3c:69:c8:32:1d:50:90:3e:b7:b5:10:2a:27:b2:7b:ae:
8a:98:e1:84:fc:c6:46:a1:3a:c0:98:f2:6c:a4:96:04:3f:8d:
85:bd:78:a7:01:45:e7:cd:06:cb:53:b7:06:57:d6:a2:03:9a:
83:31:90:2d:2f:6b:b4:9f:ed:8b:6d:1d:9b:f5:12:b2:0e:d3:
c2:86:5a:8a:40:de:a4:3b:b2:4f:3e:ac:3d:04:e3:b0:30:a5:
26:d7:8e:40:1d:27:17:d4:e8:95:61:0d:a8:f6:82:c3:0a:f1:
ca:92:f8:bd:eb:93:b9:da:9a:69:60:50:09:38:e2:4d:e5:7a:
b0:eb:71:69:cc:f5:c8:22:7f:90:3b:af:12:5c:48:bf:3d:b5:
27:91:db:62:a0:c1:0b:25:34:40:a3:25:1e:94:3c:bb:3a:99:
4c:8b:f5:53:c3:3a:7b:0c:db:bf:73:d6:83:ba:d2:70:fb:b6:
bc:88:3d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org