Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BnbipfSVbJxDr08d63sK_JJWRjM.roa
File: BnbipfSVbJxDr08d63sK_JJWRjM.roa (raw, json)
Hash identifier: BysCwjGSCpeiXT0gfDl8a8SXFVtGsB+J7PaHrEQLydA=
Subject key identifier: 06:76:E2:A5:F4:95:6C:9C:43:AF:4F:1D:EB:7B:0A:FC:92:56:46:33
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019127E3C7E5705AF1B5F7E9FEB2F5E36675
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BnbipfSVbJxDr08d63sK_JJWRjM.roa
Signing time: Tue 06 Aug 2024 13:32:04 +0000
ROA not before: Tue 06 Aug 2024 13:32:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 62.72.173.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 07:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:e3:c7:e5:70:5a:f1:b5:f7:e9:fe:b2:f5:e3:66:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 6 13:32:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0676e2a5f4956c9c43af4f1deb7b0afc92564633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:9e:b7:59:83:84:f8:49:2c:96:91:47:4e:
56:28:14:1d:21:4d:fb:e7:f2:62:e2:d9:c6:a6:c0:
a1:d8:98:53:bc:95:80:4a:28:3e:bf:e8:12:dd:b3:
39:af:9b:0e:75:64:a3:b5:a1:6c:78:d7:ac:11:18:
d0:a6:6d:aa:ca:fd:46:07:ed:27:82:65:7c:9f:c0:
ef:43:4f:00:9b:b0:01:04:e1:c8:55:e2:78:c8:35:
f3:7b:8c:d0:d3:ca:b1:ba:36:bd:b4:f9:f1:c9:a3:
49:e8:44:45:a3:19:58:44:a4:df:48:3f:14:37:f8:
16:e3:a6:c0:fd:18:b1:9e:d5:28:21:ea:6f:36:c9:
d4:b0:bd:42:4a:9d:87:0c:84:87:8f:32:4c:67:3c:
5f:b4:2f:9c:10:0b:a6:ea:ab:ef:71:30:90:7b:54:
ae:db:e4:2f:6a:27:81:66:0e:16:d2:7f:40:b7:5e:
57:48:30:60:bd:49:3c:68:01:31:7b:a8:25:e8:5f:
a9:92:5e:26:7d:bf:34:16:b3:6e:85:e3:e1:02:04:
c9:6e:e6:5f:2b:56:8b:9a:c6:8c:82:bc:6f:df:fc:
dc:05:69:3d:6b:e1:71:8c:98:e4:8a:b1:3c:84:5e:
12:e6:74:90:d8:a8:d6:75:97:c6:7b:e9:66:ff:15:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:76:E2:A5:F4:95:6C:9C:43:AF:4F:1D:EB:7B:0A:FC:92:56:46:33
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BnbipfSVbJxDr08d63sK_JJWRjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.173.0/24
62.72.184.0/23
176.57.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:dc:de:94:98:b4:ce:50:30:1e:2f:75:7c:45:4c:87:5b:10:
55:72:cc:81:f1:80:c9:8f:89:f6:3a:2f:c3:35:e6:d2:fe:44:
6a:00:39:4f:74:f1:cc:f1:35:58:15:b1:c5:ad:6a:6b:ad:25:
da:7e:9f:9b:68:02:0b:f8:ca:31:c2:be:8c:e5:0c:fc:27:26:
b4:7b:f2:1d:87:3d:33:f2:67:ea:bf:82:2c:24:fa:d6:16:f4:
05:fa:86:06:29:06:5a:23:1f:8f:1d:63:b8:7f:45:5f:60:49:
9c:37:ca:39:5c:5b:8c:38:8b:7b:a2:9f:5f:12:87:43:3d:02:
37:e0:6e:84:4b:0b:f7:c2:46:f7:26:39:dd:7f:52:47:71:7a:
12:f2:b4:75:28:7e:60:cc:66:c6:e8:df:be:30:f8:6c:f8:58:
3b:80:e0:d0:14:a9:30:33:d0:c7:59:5b:36:93:dc:01:be:5b:
46:20:8d:b2:5f:b1:ab:db:db:70:3c:72:86:79:f6:54:6a:63:
88:63:3e:33:92:a2:60:99:54:7c:5a:d1:52:44:2b:3f:02:0a:
86:8c:12:f0:89:5a:3a:8a:b6:08:71:7c:dd:71:15:d0:de:86:
31:1f:bb:f1:50:38:4c:1a:83:2c:e4:c7:27:98:b7:dd:4e:78:
f6:40:d4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 09:11:23 2024 by rpki-client on console-fra.rpki-client.org