Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Hjyl7icNvJXiFHnhO4EAd68Bx8Y.roa
File: Hjyl7icNvJXiFHnhO4EAd68Bx8Y.roa (raw, json)
Hash identifier: +YNpYvwLZWG3svMU0aSbwIoSsOz6RYjes2QV8Ec4Nyg=
Subject key identifier: 1E:3C:A5:EE:27:0D:BC:95:E2:14:79:E1:3B:81:00:77:AF:01:C7:C6
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0187C7B0D45EDE8B346921923D01B2744810
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Hjyl7icNvJXiFHnhO4EAd68Bx8Y.roa
Signing time: Fri 28 Apr 2023 11:47:47 +0000
ROA not before: Fri 28 Apr 2023 11:47:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 62.72.180.0/24 maxlen: 24
176.57.48.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
81.21.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 28 Apr 2023 12:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:b0:d4:5e:de:8b:34:69:21:92:3d:01:b2:74:48:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 28 11:47:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e3ca5ee270dbc95e21479e13b810077af01c7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:0f:97:7a:1e:62:61:3e:dc:b2:ea:a7:c0:
9d:b6:60:1f:c6:eb:97:90:1f:e5:97:ad:97:f9:08:
04:23:81:66:c8:f7:b6:ce:07:a7:76:db:f7:b6:f2:
0e:aa:a1:da:01:9b:d4:50:ca:e5:77:d7:b6:40:18:
c1:9d:ac:94:d6:bf:66:0d:7d:d7:a3:d7:d1:19:41:
79:31:76:91:da:e7:48:a7:de:f4:d7:17:71:ac:a8:
dc:7d:72:c1:71:41:f4:3f:b8:eb:44:92:61:36:95:
7d:36:50:a9:6d:55:8e:16:7b:cd:a8:93:b9:a6:6e:
06:9b:21:19:31:5f:82:49:40:a0:de:88:f6:cc:d1:
e9:a5:05:32:14:90:94:99:52:a3:50:94:eb:21:17:
ed:e5:15:96:71:0c:18:87:b5:1e:60:cb:bf:f4:cd:
88:a7:66:23:ed:c6:e3:8d:f0:e7:48:46:80:0d:dc:
88:da:42:dc:5d:b7:57:85:d6:db:f3:24:0f:2f:1f:
86:17:1f:35:ce:12:63:ae:25:4e:9a:20:35:6c:43:
ab:3f:60:d6:4a:c8:5a:64:67:fa:64:88:42:9d:2f:
df:1b:c8:e6:a0:a6:2a:9f:e4:1b:18:bb:55:ed:a1:
a4:31:40:d5:40:0a:88:ce:7e:cf:51:6f:6d:34:d5:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3C:A5:EE:27:0D:BC:95:E2:14:79:E1:3B:81:00:77:AF:01:C7:C6
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Hjyl7icNvJXiFHnhO4EAd68Bx8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.180.0/24
81.21.12.0/22
176.57.48.0/24
176.57.54.0/24
176.57.56.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:a3:0d:2c:0b:6f:24:4d:9d:28:60:14:2f:58:63:20:1d:9f:
52:ab:52:33:88:3b:d7:55:65:a7:17:f4:3e:2c:24:de:e8:41:
b2:91:bf:8d:de:a4:b5:b5:26:eb:de:85:c2:52:50:d3:35:8a:
30:a1:e2:9c:71:5d:90:07:96:85:5e:98:74:a6:f8:2e:f7:14:
90:16:bc:79:ec:01:f7:2a:e8:28:91:99:a4:48:87:a3:bf:42:
d5:34:6e:46:2e:2d:92:b4:62:9e:ec:7e:63:ec:95:f2:a1:e4:
79:dd:28:9c:ea:b3:ec:05:b8:25:ff:91:52:cd:3d:74:af:9a:
0a:36:39:68:5d:48:90:93:dd:12:ac:c0:93:38:b9:03:84:4d:
6c:3f:92:42:dc:a8:03:98:e5:3f:90:77:b6:00:ac:20:0f:c3:
b8:5e:1f:19:54:2f:87:98:43:d7:ce:c6:90:b9:4d:2a:7f:95:
61:ab:d2:ec:06:9a:09:ea:79:5c:18:03:54:7f:47:67:89:c1:
a7:b3:1d:6a:09:48:e1:58:81:89:dc:01:5c:21:b5:00:fa:7d:
09:b2:9d:7c:41:4d:82:49:4d:74:c2:3b:dd:66:c2:3f:c2:67:
a3:98:c2:0c:5b:f8:79:2c:35:b2:a4:ad:ba:be:13:67:92:e3:
03:96:03:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org