Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BqZEMYeHleCkluO-DQtjtPCB50A.roa
File: BqZEMYeHleCkluO-DQtjtPCB50A.roa (raw, json)
Hash identifier: e9zqK39Tlzms6UTL1jAUmpQ/GWvs/hxsXJNV8uZ7gzQ=
Subject key identifier: 06:A6:44:31:87:87:95:E0:A4:96:E3:BE:0D:0B:63:B4:F0:81:E7:40
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0188CD8CEDFC4EA7BE27E79366E2DA3008AA
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BqZEMYeHleCkluO-DQtjtPCB50A.roa
Signing time: Sun 18 Jun 2023 08:09:04 +0000
ROA not before: Sun 18 Jun 2023 08:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 62.72.160.0/24 maxlen: 24
62.72.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Jun 2023 10:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cd:8c:ed:fc:4e:a7:be:27:e7:93:66:e2:da:30:08:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 18 08:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06a64431878795e0a496e3be0d0b63b4f081e740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1c:ce:da:0e:dd:9c:7a:ef:da:d1:b6:7f:61:
1c:54:1f:5c:3f:ae:29:97:36:12:4e:84:9b:55:d3:
af:bd:df:d4:d2:b9:f3:c2:8c:73:3c:d4:fe:ad:b3:
8c:ae:5b:60:58:31:0a:6a:f4:91:90:69:b8:88:36:
8a:5d:71:53:95:a6:c1:c3:54:65:20:89:67:e0:d7:
c7:ca:b3:b2:9c:fc:c6:13:39:7b:48:48:a5:70:c3:
5e:71:e9:70:27:91:a4:04:65:aa:c8:76:a9:ab:7c:
fd:eb:ed:3b:5a:36:31:0d:4f:b0:cc:14:70:7c:8b:
a0:03:9b:b7:d3:8e:56:01:08:15:cc:0f:3a:51:3b:
09:8f:0a:d2:c9:5b:a7:45:90:d7:ba:94:8d:2b:a5:
e6:39:91:29:57:f1:b4:a8:5c:10:bd:af:2a:34:b4:
94:73:15:83:fc:7d:b9:a5:ac:c3:20:5a:f6:2c:bb:
8d:f0:02:b0:97:8e:18:91:29:9e:37:5b:3c:3d:23:
28:c0:ad:f9:2c:42:de:b8:8b:69:2e:2a:f0:0e:2f:
ec:34:84:3c:29:87:5c:f5:1d:91:3b:bb:f9:23:bb:
b5:b0:23:07:93:54:73:f9:a6:03:84:b0:a1:89:bd:
c5:cd:c8:2c:d3:c9:7b:5c:ea:96:2a:94:4f:bd:87:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A6:44:31:87:87:95:E0:A4:96:E3:BE:0D:0B:63:B4:F0:81:E7:40
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/BqZEMYeHleCkluO-DQtjtPCB50A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0/24
62.72.188.0/22
Signature Algorithm: sha256WithRSAEncryption
41:06:45:c8:30:15:f7:c5:12:c8:fd:7f:57:10:6b:ba:9c:1d:
73:cd:47:ff:8b:d9:5f:f9:05:26:d0:13:33:98:4f:db:6f:6a:
2e:7b:22:55:ea:b3:24:c9:c5:e8:19:12:9b:64:d8:af:1c:65:
0c:c4:ec:e2:79:a3:88:cd:14:d4:c5:b6:9b:a2:eb:69:21:b6:
c7:b1:8f:ec:63:7f:8c:ee:ce:91:db:70:b8:52:ef:4c:78:db:
84:6e:c5:0a:a9:74:76:ca:fc:6b:c4:3e:f8:68:a9:39:5a:e7:
d0:a2:ab:32:2d:ca:77:ae:26:b5:78:72:08:0c:96:09:b2:c8:
e9:d8:2b:fa:28:6e:a1:f2:64:88:57:ca:39:14:77:b6:c9:80:
f4:fc:cd:2e:aa:5f:17:37:f6:f9:e1:72:4b:8d:04:53:a4:a5:
b3:20:3e:10:b7:10:a1:37:de:0c:f8:db:52:87:6a:70:f5:c6:
01:e0:22:34:6b:74:d5:b7:46:52:16:3b:e1:28:fc:b4:1a:08:
4c:34:cf:17:da:57:d7:1b:6c:ce:31:45:e8:c1:6d:83:e2:94:
72:4d:1b:0d:92:7d:f0:82:cf:75:58:e2:14:bf:a0:23:bc:b2:
79:10:b6:0f:a6:4b:33:1f:6d:a4:46:fc:1b:f6:9d:46:5a:54:
12:5d:8f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org