Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JB-aXp4Ewh7shrJMPIZqy9ePfJQ.roa
File: JB-aXp4Ewh7shrJMPIZqy9ePfJQ.roa (raw, json)
Hash identifier: A1/nZz83ZgigKlBgC0V06xnwqp1r0wW/soDaZut8Rds=
Subject key identifier: 24:1F:9A:5E:9E:04:C2:1E:EC:86:B2:4C:3C:86:6A:CB:D7:8F:7C:94
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018AAD9E18DDE2D9AA927F452ED8622359A6
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JB-aXp4Ewh7shrJMPIZqy9ePfJQ.roa
Signing time: Tue 19 Sep 2023 13:25:33 +0000
ROA not before: Tue 19 Sep 2023 13:25:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400866
IP address blocks: 62.72.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Nov 2023 06:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:9e:18:dd:e2:d9:aa:92:7f:45:2e:d8:62:23:59:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 19 13:25:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=241f9a5e9e04c21eec86b24c3c866acbd78f7c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2f:d4:b5:cf:56:26:06:36:45:a8:f9:4b:2f:
81:41:83:37:ce:49:5f:8c:50:22:d6:1b:47:6a:88:
55:16:22:3c:32:09:bd:d9:90:c5:34:98:71:ae:48:
ac:7e:98:a2:a6:10:28:35:27:7f:f2:54:3c:46:c9:
b8:c4:36:cf:fe:a7:0d:79:63:5f:42:f6:ce:b3:d1:
05:60:35:04:97:df:15:0e:b9:67:34:a9:0c:27:9b:
3f:52:d5:d5:9e:44:62:d2:7a:72:51:67:6b:3b:43:
1e:39:9d:42:bb:71:e9:74:88:5a:bb:54:8f:3b:f5:
fe:09:cd:6b:c6:b4:6b:c3:95:81:65:02:fc:58:39:
22:ca:75:e1:d3:8a:e9:c0:bb:7a:b2:4a:17:ac:d5:
b5:ea:14:c8:34:a0:83:89:bb:49:e8:fb:6b:39:01:
85:41:e4:fb:b5:9d:a3:c1:e1:fa:c9:fe:77:67:49:
6a:8e:fe:66:3f:f8:a0:c7:88:c3:d0:5f:99:f2:d5:
98:fe:5c:02:62:b4:17:f3:64:9f:8f:58:c1:da:f3:
43:a7:99:f0:4d:a5:4c:5c:78:74:1a:ab:c7:58:df:
44:5c:ba:80:f3:74:71:b3:46:dc:3f:8a:26:ec:70:
e8:35:ed:99:10:3e:af:1a:ca:71:bc:c3:5a:f2:07:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1F:9A:5E:9E:04:C2:1E:EC:86:B2:4C:3C:86:6A:CB:D7:8F:7C:94
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JB-aXp4Ewh7shrJMPIZqy9ePfJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4b:20:95:3b:ee:da:8d:f5:b8:b6:1a:2f:c2:7d:9d:f1:fd:
ae:47:9e:11:e7:98:06:bf:99:ae:d9:e5:24:f2:e8:5d:82:08:
22:6a:8c:eb:b3:44:a4:ae:97:0a:b5:bb:89:41:ac:d3:bf:38:
9c:3b:62:fc:bd:75:93:38:af:04:63:3e:d2:ec:92:c2:1d:c7:
a5:cf:f3:b2:6a:0d:0c:f9:fd:dd:06:e9:d2:30:dc:35:57:b9:
22:07:28:26:32:50:ac:43:15:58:f6:78:30:76:fc:eb:80:7f:
17:e2:99:73:eb:81:9e:9e:3d:6c:50:c8:59:e5:04:b8:37:b8:
fb:63:4d:79:7d:97:9e:03:5f:e8:f2:c1:f6:ea:83:2f:09:65:
55:d5:2a:9f:3f:0a:f7:c8:3e:bf:96:77:7a:32:3d:bd:0e:da:
b7:0e:a9:88:07:ab:c3:ab:cc:b7:77:cd:ce:38:e7:2c:aa:8d:
62:4c:76:b9:03:c5:ae:04:1e:e5:5c:d0:5e:cf:af:ed:71:09:
11:64:33:24:bd:99:c6:7e:78:53:32:3b:dc:d5:18:e4:12:46:
c7:cd:9f:4b:d0:f9:fd:25:7e:be:a1:2d:8e:f8:c1:f8:c0:78:
37:ae:d2:81:a3:9b:44:0c:c2:8c:4e:ed:f7:84:9b:49:98:45:
b0:43:79:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org