Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/DZcHR_ovILLK7t_B2nL0HcqgcB0.roa
File: DZcHR_ovILLK7t_B2nL0HcqgcB0.roa (raw, json)
Hash identifier: jsMCQeQrsD0VJH4G/SH9YmD7xuaakdJj88NXrdtgqdU=
Subject key identifier: 0D:97:07:47:FA:2F:20:B2:CA:EE:DF:C1:DA:72:F4:1D:CA:A0:70:1D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018BCD53B664D7BAA20B9945A28A3A9BFBBF
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/DZcHR_ovILLK7t_B2nL0HcqgcB0.roa
Signing time: Tue 14 Nov 2023 10:14:57 +0000
ROA not before: Tue 14 Nov 2023 10:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60849
IP address blocks: 62.72.165.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:53:b6:64:d7:ba:a2:0b:99:45:a2:8a:3a:9b:fb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 14 10:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d970747fa2f20b2caeedfc1da72f41dcaa0701d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b1:11:0f:98:b8:2a:e9:b4:20:fc:33:d0:c5:
eb:4d:f2:99:bb:3f:f1:6d:6e:0c:10:6c:9c:77:a9:
3d:32:52:db:32:59:be:ad:12:b2:ac:3a:a6:37:b9:
44:62:99:cf:f1:a7:35:0b:08:54:44:d2:f3:62:df:
8e:66:9f:81:e9:0e:30:c8:bc:5b:a9:e8:84:82:b1:
92:fb:39:85:e8:5b:97:d0:18:5e:f6:0c:20:03:d4:
36:7f:00:99:44:06:14:25:fc:0b:f6:d8:95:f9:e2:
11:c5:3c:fd:08:0d:5c:13:99:5b:f7:20:e9:52:a7:
61:34:4c:eb:67:00:9e:b3:96:02:0a:b4:ef:a6:75:
bd:f9:92:15:ab:2f:ba:53:b4:23:91:8c:d8:5b:d4:
a7:5f:35:f3:5e:5d:4d:26:9a:a2:d4:f7:80:3a:7f:
05:7c:f6:aa:1f:e1:bb:eb:a1:c3:41:4a:d3:c8:fc:
d6:5f:91:23:94:ce:9c:89:2b:f5:e5:0a:e7:a9:49:
18:b1:8b:d3:6e:b6:bc:84:90:15:ab:d3:26:12:43:
e4:09:4b:39:93:f7:49:6a:1b:98:39:94:fc:37:4d:
ff:b9:c9:1a:ae:55:cc:38:94:ed:c3:e5:50:05:2b:
5b:75:5c:f2:e0:79:0a:02:8f:96:75:18:ec:81:2e:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:97:07:47:FA:2F:20:B2:CA:EE:DF:C1:DA:72:F4:1D:CA:A0:70:1D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/DZcHR_ovILLK7t_B2nL0HcqgcB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.165.0/24
62.72.169.0/24
62.72.179.0/24
Signature Algorithm: sha256WithRSAEncryption
33:e9:39:7a:03:fa:d6:90:c7:0a:f2:8f:d4:27:bd:21:53:45:
77:a1:9c:f4:b8:c0:81:ee:45:0f:bd:ed:9d:39:5a:39:1f:4c:
3d:f8:ba:f0:70:fb:fa:69:7f:f3:05:9d:66:93:99:63:8d:39:
54:d2:5e:e4:d7:23:ab:a9:ee:84:6c:b6:43:31:6f:dc:02:cd:
1d:34:e7:52:f5:ae:99:6d:c9:b7:4e:b4:15:fc:24:0d:24:2f:
f7:01:ff:a2:86:a0:54:a7:47:a8:51:4d:d1:70:54:60:e6:2a:
aa:bb:65:0e:10:c3:39:9f:00:4f:3c:9e:16:0d:7d:00:b7:30:
e9:ec:4d:75:81:37:01:ea:75:e1:93:10:49:79:14:c3:94:58:
d2:ab:03:4f:48:e9:a9:c3:b4:d4:fb:3a:34:d4:17:50:e2:29:
76:39:27:67:79:77:c7:3b:59:9a:9d:89:13:88:07:0a:ae:47:
e6:7a:51:64:bb:46:be:23:16:88:b2:c8:5f:13:ba:f9:5e:97:
8a:f6:82:0c:14:1f:a0:a9:60:a1:38:43:88:02:8a:dc:8a:f3:
1c:7c:d8:f9:09:8a:f0:2b:ca:bd:e4:d7:c7:2f:86:23:67:e2:
4c:e9:0a:e0:3c:63:0c:03:c0:9e:34:ac:14:99:50:ef:85:7e:
c6:6e:8a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org