Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BL0lQmn7H5Dc7RvGkKtRe6fvHZI.roa
File: BL0lQmn7H5Dc7RvGkKtRe6fvHZI.roa (raw, json)
Hash identifier: ouPlV6nGbDCr3IJO0w2HhDLIh8Qxpl+4+ABp6FFnVrg=
Subject key identifier: 04:BD:25:42:69:FB:1F:90:DC:ED:1B:C6:90:AB:51:7B:A7:EF:1D:92
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0188615BC9190FB09B8E334B324EE5094C96
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BL0lQmn7H5Dc7RvGkKtRe6fvHZI.roa
Signing time: Sun 28 May 2023 07:56:25 +0000
ROA not before: Sun 28 May 2023 07:56:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 62.72.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 06:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:61:5b:c9:19:0f:b0:9b:8e:33:4b:32:4e:e5:09:4c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 28 07:56:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04bd254269fb1f90dced1bc690ab517ba7ef1d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:85:88:40:e4:a8:42:a3:e2:97:c9:a4:74:3e:
95:2e:e9:ee:15:13:a7:a0:66:4e:48:6e:66:c8:d8:
fd:9b:48:c2:79:25:d3:36:0d:d9:bc:ae:a6:7e:9d:
54:19:8a:3f:83:84:66:b4:1a:fd:1c:73:13:7a:12:
a8:23:b8:e3:29:49:0c:c8:ee:97:e0:92:5f:b3:97:
22:85:b3:24:e1:15:07:b1:d1:09:95:5a:7a:e9:81:
8f:73:e5:b2:14:bc:63:82:63:dc:bb:59:30:4d:18:
47:ef:e8:57:f3:dd:9b:86:02:0e:53:9f:fd:f9:23:
91:a6:0d:7b:d5:d2:60:fc:62:98:ea:aa:62:72:03:
4a:67:21:5b:b5:88:61:19:98:f8:32:93:3d:f3:9d:
3c:b2:d9:6a:6c:8e:08:20:c0:47:dc:dc:e0:1b:ca:
07:92:73:45:b1:81:94:1d:72:f1:74:f7:bf:72:2f:
cf:0b:1e:82:4f:d2:af:10:18:19:a4:6a:74:19:82:
9b:8d:87:ff:b4:b7:65:fc:63:7f:7e:cd:09:38:92:
91:da:82:11:00:64:b8:b9:c4:e0:2a:4e:76:2e:61:
eb:98:bb:d5:54:2b:0e:68:18:a1:1c:79:50:c5:a8:
bd:14:11:cf:0b:e6:5a:8a:95:16:34:2b:05:aa:9b:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BD:25:42:69:FB:1F:90:DC:ED:1B:C6:90:AB:51:7B:A7:EF:1D:92
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BL0lQmn7H5Dc7RvGkKtRe6fvHZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f3:50:d5:db:40:ae:6a:85:01:bb:15:a5:e8:44:29:61:a4:
f8:9b:ce:cb:6d:03:7f:26:a0:ca:d6:37:b0:c5:b7:8a:38:38:
b8:86:60:30:bb:13:c9:f8:e2:ae:8b:8f:84:76:fc:bd:55:c7:
eb:e0:0e:ac:72:43:43:a2:c1:8d:9d:f2:cd:3e:81:07:c9:04:
9d:2e:19:23:a9:de:00:3c:96:a9:aa:a8:55:52:3a:45:75:7e:
26:0b:f5:e3:21:df:0b:14:dd:cb:67:74:70:e6:c2:58:dc:84:
ea:20:30:65:39:1b:de:16:1e:88:1c:4a:b6:c5:0a:d5:0b:08:
36:12:f9:03:b4:89:62:17:c0:69:f5:a8:37:7f:92:67:a9:6e:
3a:60:af:13:8a:d6:67:af:96:e3:91:eb:46:14:c5:20:16:9f:
7b:b1:7f:8b:07:6b:a4:84:d5:24:87:b3:a1:fc:27:d6:72:58:
95:27:48:9b:16:5e:a9:ce:5e:78:e5:2e:0c:93:b7:8d:7f:64:
8b:10:cc:5a:c0:63:69:42:eb:5d:59:be:04:56:bd:1f:e6:f4:
37:20:29:ac:d8:0a:02:73:d1:45:55:44:4f:e4:5e:e2:d2:a9:
37:7a:be:00:e3:f4:fd:56:22:26:35:c8:92:8d:24:4e:31:95:
b5:a4:0c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org