Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BjeNu1znJg6wnaezZM0L2CEHu6E.roa
File: BjeNu1znJg6wnaezZM0L2CEHu6E.roa (raw, json)
Hash identifier: g+PliLkqmeEWMBKxIK6czqyF3geOdcZvkOJhrch2hNQ=
Subject key identifier: 06:37:8D:BB:5C:E7:26:0E:B0:9D:A7:B3:64:CD:0B:D8:21:07:BB:A1
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018B84669063D6BE01996905060EA2907EFB
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BjeNu1znJg6wnaezZM0L2CEHu6E.roa
Signing time: Tue 31 Oct 2023 06:23:16 +0000
ROA not before: Tue 31 Oct 2023 06:23:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 62.72.180.0/24 maxlen: 24
176.57.48.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
81.21.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 12:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:84:66:90:63:d6:be:01:99:69:05:06:0e:a2:90:7e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 31 06:23:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06378dbb5ce7260eb09da7b364cd0bd82107bba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:f2:b9:58:f2:81:63:ff:ad:e1:8a:e0:2b:
d2:c7:cc:a1:8e:95:5a:a4:6a:ba:64:43:97:77:3c:
da:7a:f6:44:3a:aa:ec:c3:11:c3:31:f5:16:59:0d:
85:61:09:5b:c1:b7:03:1b:5d:8f:5b:46:41:73:04:
21:b8:15:d4:52:f3:27:a7:e5:ca:f2:0a:3e:dd:aa:
45:c2:64:60:71:66:10:7a:f7:22:95:8c:43:bb:07:
63:dc:20:15:df:46:d0:62:98:76:c8:7d:a3:26:e7:
a3:e9:09:a8:89:33:78:09:d0:b5:65:a6:1f:5d:93:
8e:cc:6c:9b:60:00:f5:ce:ca:92:cd:75:01:20:dc:
8a:87:8e:71:20:e8:55:8a:79:78:ff:df:5c:ff:82:
61:ab:eb:3c:7f:46:71:07:6c:c3:8b:c6:ee:27:81:
4e:87:fc:16:7d:16:37:cc:7b:df:98:13:2d:1f:b1:
da:f1:3d:8b:77:c3:07:fe:2a:11:25:52:63:1b:61:
f4:6d:2f:5b:0d:f2:26:02:51:7e:d9:0d:09:ea:57:
8b:2a:98:ac:44:5a:e7:e7:6d:4a:0d:28:9a:aa:4e:
97:9c:a1:fb:79:79:30:1e:8f:16:0e:10:70:88:13:
2f:f8:32:f8:e3:22:44:a3:58:99:9b:b9:fa:b2:34:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:37:8D:BB:5C:E7:26:0E:B0:9D:A7:B3:64:CD:0B:D8:21:07:BB:A1
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BjeNu1znJg6wnaezZM0L2CEHu6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.180.0/24
81.21.0.0/24
176.57.48.0/24
176.57.54.0/24
176.57.56.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:49:e6:84:bd:d9:ff:5c:81:53:c8:30:75:b0:a7:d1:a1:c4:
71:9d:07:73:ff:9c:be:5b:47:77:b6:ec:80:6e:0c:7b:77:3e:
96:dc:5a:d9:73:f0:0c:ae:03:eb:99:18:f3:91:79:24:65:56:
3a:0f:8a:d0:a9:c5:93:5e:ba:f3:53:ef:a3:6a:c2:dd:cc:1d:
06:50:94:fc:c0:b3:91:d1:1b:ae:2f:f5:9f:ad:3e:cf:3b:cb:
dd:2e:d3:be:12:21:6a:09:cb:00:47:13:97:75:b1:fd:9a:70:
65:97:3a:d2:ff:11:39:3c:c2:4e:f3:8a:4b:c1:93:19:7a:3f:
a1:20:1f:ca:7a:fe:7d:94:7f:5e:6a:ed:19:9c:bc:b6:b9:47:
69:c1:a6:5e:cb:17:bc:3d:c5:52:39:8f:32:de:a6:5c:42:82:
26:04:ea:c3:34:b4:73:e4:1b:04:45:50:3d:14:b0:a1:74:8d:
d5:28:7c:63:e1:17:b6:e3:1a:81:41:0b:fd:b5:6d:57:81:d8:
46:ed:20:5a:60:e9:08:57:29:c0:07:ca:c5:46:b2:aa:20:7c:
de:ed:14:9f:b5:08:cf:cb:f6:66:ef:d6:c7:e1:c2:1a:d4:09:
ab:23:df:08:63:2c:8b:e3:1f:12:63:cc:31:55:ca:7d:25:39:
95:35:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org