Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IipL0XM1Jxk451D0x_hK6erUgVU.roa
File: IipL0XM1Jxk451D0x_hK6erUgVU.roa (raw, json)
Hash identifier: CY8RvbtK/S5vmDnhCvonupgB1nzxDIiY+d8O2t4loFw=
Subject key identifier: 22:2A:4B:D1:73:35:27:19:38:E7:50:F4:C7:F8:4A:E9:EA:D4:81:55
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0188245E585609EA221E009D660CEB1FDDBD
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IipL0XM1Jxk451D0x_hK6erUgVU.roa
Signing time: Tue 16 May 2023 11:42:22 +0000
ROA not before: Tue 16 May 2023 11:42:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 62.72.164.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Jun 2023 21:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:5e:58:56:09:ea:22:1e:00:9d:66:0c:eb:1f:dd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 16 11:42:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=222a4bd17335271938e750f4c7f84ae9ead48155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4c:ce:3a:40:52:b5:24:f7:0b:59:1f:08:77:
16:39:12:12:79:91:7c:76:17:ee:e3:eb:fc:ee:e5:
3a:08:c3:ff:3c:04:5b:f0:1a:75:c9:07:48:74:3d:
a7:3c:f2:c0:2d:a7:bf:e8:dc:0a:69:f6:bf:f8:f4:
bd:2f:cb:d6:bc:bd:3f:e5:e4:89:49:4b:88:94:29:
12:55:53:d0:59:f4:74:e8:b6:b1:0c:10:d1:f2:99:
91:e4:27:0a:f6:81:41:8a:19:9e:01:73:b4:4a:87:
21:08:76:49:76:ee:9a:6c:f1:49:d5:a9:a9:c8:0c:
77:9b:e6:71:88:2c:6e:73:d3:77:d3:12:c5:80:56:
ad:f7:f6:cb:c0:60:14:7e:50:b7:8c:95:69:db:e1:
35:ad:d8:f6:35:c7:f6:a5:d9:92:38:17:84:86:3d:
7f:fd:37:02:e5:de:43:82:32:09:2c:1b:02:bb:4b:
89:31:54:11:2b:35:30:36:ba:9a:62:c1:64:42:04:
f1:93:41:d1:c7:5c:7b:e1:9f:86:85:24:3e:dd:d1:
09:20:25:a8:ab:46:91:c4:11:96:64:07:2e:e1:cb:
a4:21:d0:6a:4b:08:77:97:ee:93:f3:08:f9:f2:49:
9e:22:3c:39:22:d3:b3:b2:18:9e:31:4b:d9:00:d5:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:4B:D1:73:35:27:19:38:E7:50:F4:C7:F8:4A:E9:EA:D4:81:55
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IipL0XM1Jxk451D0x_hK6erUgVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.164.0/24
62.72.168.0/24
62.72.173.0-62.72.174.255
Signature Algorithm: sha256WithRSAEncryption
55:26:38:56:9d:6d:51:2b:1a:a6:d6:0f:1c:d3:50:db:f3:be:
93:8e:ff:c3:fd:1e:3a:ca:f0:33:70:49:d2:3c:08:37:2d:8c:
10:16:b0:7a:d9:ef:17:e7:25:84:2c:4c:4e:2e:1d:26:d4:6b:
ff:b3:1c:59:db:f5:f7:59:66:51:d1:73:6e:35:a6:be:6a:24:
af:4d:08:e9:ed:87:67:71:ec:9c:b1:c1:45:ef:40:86:c5:08:
d4:2b:42:cd:ab:e7:06:bc:56:b4:e8:17:e5:de:47:80:87:ed:
10:e8:ae:4d:94:b6:14:40:fc:4f:19:2f:3f:d9:05:e5:64:89:
00:86:e7:9f:b6:f7:ed:98:2a:cc:aa:ef:6a:c8:34:8f:35:8f:
1f:19:f1:9c:b8:ea:6b:ff:f5:d0:73:75:84:e1:c0:e0:5b:29:
20:95:08:ce:ba:27:f9:25:cc:bf:12:f7:c4:96:d4:d6:96:9c:
f3:35:e9:c6:28:5d:42:9a:af:cc:9f:ad:b4:6b:19:f7:e0:13:
16:8d:f7:3c:22:d3:c1:e4:6a:60:bb:83:40:d4:7a:52:a5:df:
b1:68:07:96:87:ed:1e:24:51:fb:71:8f:9c:5d:c1:5e:db:85:
83:58:4a:f7:ec:8e:c1:35:4f:f8:02:65:2b:a2:fa:76:c9:a3:
78:89:71:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org