Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Az8yXgJOx45BTn-7TyKYSgg7X5g.roa
File: Az8yXgJOx45BTn-7TyKYSgg7X5g.roa (raw, json)
Hash identifier: PKPqSB6d58tU/CtdmO0yVrbQ5eo7znEvcWZXjBNaDEI=
Subject key identifier: 03:3F:32:5E:02:4E:C7:8E:41:4E:7F:BB:4F:22:98:4A:08:3B:5F:98
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0189C0695FF98C3E4BEB94327643AFA82B60
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Az8yXgJOx45BTn-7TyKYSgg7X5g.roa
Signing time: Fri 04 Aug 2023 11:57:58 +0000
ROA not before: Fri 04 Aug 2023 11:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 62.72.166.0/24 maxlen: 24
62.72.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 07:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:69:5f:f9:8c:3e:4b:eb:94:32:76:43:af:a8:2b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 4 11:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=033f325e024ec78e414e7fbb4f22984a083b5f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0c:da:e8:fa:fa:f1:ed:0c:8f:d6:5f:3e:f3:
3a:9c:33:67:0c:ea:c6:9b:df:a3:cf:d7:5b:1f:34:
fb:f3:22:b8:47:98:3d:20:b1:a5:b5:c9:cd:f2:cb:
fa:b2:b4:7c:31:e9:31:77:cd:92:f5:9f:79:78:48:
57:cc:dc:7b:bb:4d:6d:da:2d:9f:dc:4c:de:4b:4f:
bc:15:df:1d:9f:e9:bf:77:bf:2f:20:9d:8e:b1:e7:
1c:4f:e0:fc:15:f1:40:bc:02:0a:61:dc:95:1a:e2:
d7:2c:d9:85:9f:5f:ac:50:fb:f9:5c:1c:4f:0c:8f:
99:ac:e4:fc:e6:b8:cc:01:f1:72:d5:2c:1a:0d:e0:
40:9b:c1:89:41:fc:56:b3:f1:fb:69:99:e7:80:11:
c1:6d:9e:13:36:bc:94:6b:fa:50:88:d6:6d:bc:0e:
28:34:ab:44:73:e9:31:ac:aa:b8:bb:97:6e:79:cb:
bf:b5:a1:59:24:1a:16:6f:03:43:a6:4c:03:70:26:
3b:4a:62:c5:42:1e:7f:3e:e9:9a:88:0a:bb:58:79:
61:71:38:cd:c0:bc:ad:f1:47:6b:38:34:5c:09:68:
f8:96:9f:64:d9:ff:09:3e:a7:f4:03:52:33:ca:a5:
b4:5f:ff:8b:ea:f1:58:43:27:cd:a8:62:19:c1:c0:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3F:32:5E:02:4E:C7:8E:41:4E:7F:BB:4F:22:98:4A:08:3B:5F:98
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Az8yXgJOx45BTn-7TyKYSgg7X5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.166.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:ed:f3:c4:22:44:f5:73:9f:b9:cf:23:11:1f:c4:52:a2:d5:
db:80:08:42:05:1a:ff:2a:ca:67:c2:67:94:51:94:1e:45:e0:
f3:07:96:56:91:b0:83:85:66:8a:23:0c:5a:53:08:dd:18:41:
42:42:55:fd:fe:e3:4d:69:9f:f8:11:a9:70:04:80:7c:61:d0:
b2:59:59:8d:c0:41:f2:fa:58:eb:48:5c:77:02:f7:25:0b:dc:
9e:9b:51:7f:7b:5d:bd:66:ec:cc:af:76:0c:3c:48:d2:ca:bd:
a3:36:65:26:50:2c:70:fc:b5:b0:cc:e9:21:17:bd:77:d0:59:
37:a1:f7:51:bc:d5:a9:1b:44:c9:d5:92:2e:dd:7a:79:77:8b:
6f:64:fc:86:4e:b2:09:d2:69:73:db:8e:14:cb:b4:88:1c:b9:
e2:30:eb:5f:f4:c1:52:1e:70:3b:8d:f1:56:b5:1f:f8:bd:2a:
58:ed:9b:c9:b8:04:9c:27:ca:bb:78:cf:a8:04:9f:96:82:68:
fc:b1:31:17:54:ed:e1:b3:b5:2d:79:6f:62:06:d9:da:38:83:
eb:fb:6f:ff:7b:a0:2c:34:01:a4:27:1f:47:f3:cf:a6:da:b6:
5a:2d:2b:2a:ee:67:4b:c0:2e:00:f7:72:e6:0e:13:44:35:c2:
dd:86:a7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org