Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ARH-ddcFq-WUBMSEnT650STRWCI.roa
File: ARH-ddcFq-WUBMSEnT650STRWCI.roa (raw, json)
Hash identifier: xoExJneGKDqr5lPVODfHnxAyNd8rntVABUW54YNk/VA=
Subject key identifier: 01:11:FE:75:D7:05:AB:E5:94:04:C4:84:9D:3E:B9:D1:24:D1:58:22
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01857D711953D69CCBB322C114E71A697FF2
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ARH-ddcFq-WUBMSEnT650STRWCI.roa
Signing time: Wed 04 Jan 2023 15:40:42 +0000
ROA not before: Wed 04 Jan 2023 15:40:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 62.72.165.0/24 maxlen: 24
62.72.176.0/23 maxlen: 24
176.57.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 20:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:71:19:53:d6:9c:cb:b3:22:c1:14:e7:1a:69:7f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 4 15:40:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0111fe75d705abe59404c4849d3eb9d124d15822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:23:5d:45:67:de:d0:29:ed:95:b3:e5:8a:
fd:9c:98:4d:0d:0c:8f:ae:15:2d:c1:2e:e6:f4:8d:
a6:9b:90:95:e1:da:07:eb:9a:d3:8a:42:1b:6a:bd:
c8:4b:a4:fa:7f:19:39:ac:3b:0b:08:c8:54:4b:72:
35:b5:49:e8:e4:bc:22:71:3a:61:99:af:10:45:52:
fe:55:6c:3c:be:97:20:7b:93:62:94:8d:03:0d:d1:
f7:c1:43:fe:5e:9c:38:42:44:87:f5:67:09:c6:92:
1a:61:29:02:f8:a6:e7:1e:7b:ae:55:64:74:35:f3:
ec:10:cd:88:d1:70:ee:cf:a4:07:a6:89:5b:49:1b:
d3:79:a4:a7:69:f1:8a:1d:27:ed:80:ae:47:04:37:
20:39:bb:08:37:37:4d:60:ca:0d:29:37:ba:0f:13:
c7:f5:b3:6f:88:6e:a1:e3:78:ef:6b:95:58:4a:3b:
89:8b:d0:32:06:05:dc:0c:46:27:25:97:f0:00:93:
4a:98:a4:a5:a0:e6:53:b3:6e:31:ec:cd:59:00:4a:
82:b8:4e:4e:0e:7b:c6:b0:f6:ac:7e:31:7f:97:d2:
38:da:38:a2:72:08:b8:4d:f2:77:4d:17:40:da:dd:
82:45:06:17:8b:b5:f4:f5:57:90:5b:dc:51:fa:b5:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:11:FE:75:D7:05:AB:E5:94:04:C4:84:9D:3E:B9:D1:24:D1:58:22
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ARH-ddcFq-WUBMSEnT650STRWCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.165.0/24
62.72.176.0/23
176.57.51.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:f5:ec:f6:1e:99:cf:65:59:2f:cd:dd:17:15:ce:14:b6:2a:
74:a6:c0:9d:54:2a:cd:7c:9a:14:5d:e6:c2:59:3f:e2:99:f3:
e7:44:22:b3:7e:c5:ce:ef:60:17:a1:5d:b1:1e:f6:07:18:1d:
0c:94:22:f6:55:38:07:40:6f:37:c4:b7:ab:75:13:b4:c9:42:
2b:13:a9:ab:9f:14:46:67:31:d1:69:18:c8:ce:db:cc:36:c7:
2d:cb:3d:bb:1c:0a:5e:35:c0:16:53:41:d1:67:3d:55:a9:75:
67:2a:75:c0:db:a2:73:6f:3a:d2:07:fd:28:18:ec:06:a6:01:
9b:40:44:d2:d8:2d:c0:2f:a8:90:97:93:7e:a4:d0:89:59:b8:
b4:dc:d8:f3:07:ae:b0:4f:97:56:23:4a:5e:4f:35:24:51:cf:
d1:b7:0b:54:ee:29:36:ea:ac:75:41:04:e0:9c:4d:4f:22:5b:
1b:ec:a9:da:87:4a:7c:5d:59:45:42:ed:d6:77:5b:8c:7a:29:
ad:58:da:8f:28:7e:82:5d:d4:48:94:3a:28:8b:e7:68:b6:3f:
14:f0:b8:92:d4:66:cc:0d:9d:c6:9f:15:cc:f8:a6:81:4d:3e:
d8:7c:56:27:ec:c0:da:96:1b:05:8f:96:db:fe:fc:57:af:c6:
76:f1:89:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org