Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/GvCFpAxX0tJgbsqnQCab41BzWG0.roa
File: GvCFpAxX0tJgbsqnQCab41BzWG0.roa (raw, json)
Hash identifier: qxxrxKwiWog6+lyKHxqH1BRDf2qpo5ufCXx7r7l4qyg=
Subject key identifier: 1A:F0:85:A4:0C:57:D2:D2:60:6E:CA:A7:40:26:9B:E3:50:73:58:6D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0192CCA4ADC285918B29B18A4BACBB2B7B4C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/GvCFpAxX0tJgbsqnQCab41BzWG0.roa
Signing time: Sun 27 Oct 2024 06:23:17 +0000
ROA not before: Sun 27 Oct 2024 06:23:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 265867
IP address blocks: 62.72.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cc:a4:ad:c2:85:91:8b:29:b1:8a:4b:ac:bb:2b:7b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 27 06:23:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1af085a40c57d2d2606ecaa740269be35073586d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:77:6e:f8:b9:77:ba:47:c7:cb:08:38:0a:
a3:6d:90:9e:9b:a0:d6:c6:50:f0:2f:2e:d6:54:01:
08:52:9a:8c:e4:3c:da:e6:41:66:d9:fd:c2:6e:c9:
26:3c:1c:1b:d4:e4:4a:5b:6a:58:fc:81:4d:dd:7a:
55:79:83:45:de:de:f6:fd:6b:f4:5d:fd:34:07:7d:
38:24:1b:a9:33:59:26:4b:3d:9f:ef:22:5d:ff:16:
cb:89:ea:f5:a8:ec:f8:5c:04:b5:8f:2d:83:5b:09:
3c:f0:8f:b7:1d:0b:f8:86:a7:24:5d:cd:35:9d:a3:
b0:78:a3:d6:c5:67:69:5c:36:fe:9b:5c:c0:b9:7d:
ef:0a:34:5d:41:07:5e:c5:bb:d4:19:c6:5e:25:dc:
aa:d8:27:3f:16:f0:89:c6:d1:d1:d8:40:70:37:84:
75:0a:4b:0a:71:cf:77:2f:6a:0c:86:f9:f5:b6:68:
61:4d:2d:e5:a0:05:3d:34:1e:fc:ba:72:52:71:23:
20:aa:3b:a5:f4:15:6a:c7:ec:28:0b:17:1d:8f:55:
1e:8a:e6:57:6e:0e:ff:3a:fb:57:4d:95:ca:db:31:
ce:10:57:e6:d3:fe:d3:68:ee:91:34:d9:74:95:ed:
34:2e:ae:f8:1b:d6:8b:e7:68:c1:70:4d:c0:6e:8b:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F0:85:A4:0C:57:D2:D2:60:6E:CA:A7:40:26:9B:E3:50:73:58:6D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/GvCFpAxX0tJgbsqnQCab41BzWG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.189.0/24
Signature Algorithm: sha256WithRSAEncryption
34:3a:b6:90:b4:ce:57:91:80:13:61:9c:a5:ef:98:05:7c:7b:
2a:76:28:c2:16:bd:a2:9a:57:a3:ee:e5:40:02:be:05:fb:cb:
4f:46:7e:0d:ef:1c:a9:ba:07:81:58:2c:67:6d:97:63:07:b1:
eb:d7:27:84:3f:c4:96:9e:df:97:5f:0e:33:28:99:00:03:95:
a0:1a:99:39:d4:ba:c1:22:cd:c7:af:82:d8:64:24:12:ad:7a:
4f:8c:1f:b9:36:8c:20:fb:46:d1:de:8e:e5:90:67:6e:c4:2d:
d4:29:07:d3:f9:82:05:6b:02:40:36:ac:85:ca:b7:8b:4f:ed:
57:a8:2c:a4:f5:7e:e4:f6:de:0d:4e:91:c6:df:f1:5f:f5:79:
14:da:f7:62:8a:43:26:82:bb:4c:51:93:10:11:d6:be:6e:e0:
6b:53:43:98:0c:c5:76:b1:91:7e:48:6d:23:2a:c4:d9:94:ce:
4f:cc:26:c4:a1:9f:0e:62:6e:c2:06:6e:df:f5:08:3f:8d:8e:
41:18:82:7a:ac:ab:75:16:ab:a7:58:34:b3:a1:50:5e:a6:c8:
66:2c:09:c7:69:d4:da:a9:0b:5c:a2:12:65:35:66:70:3d:45:
49:89:5a:f0:ce:7f:81:90:19:09:fc:22:09:b8:1a:fb:4d:f7:
79:cc:83:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:34 2025 by rpki-client