Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Jj8SFGz-YETHaM8SfgEr9GdX3As.roa
File: Jj8SFGz-YETHaM8SfgEr9GdX3As.roa (raw, json)
Hash identifier: zwsDlXO0xVPTf8lNWfGyxC2i4BnsC9f2G8TP/Z/9fU4=
Subject key identifier: 26:3F:12:14:6C:FE:60:44:C7:68:CF:12:7E:01:2B:F4:67:57:DC:0B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CF74321352C158B4CA1C754E7D7CB936E
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Jj8SFGz-YETHaM8SfgEr9GdX3As.roa
Signing time: Thu 11 Jan 2024 06:43:40 +0000
ROA not before: Thu 11 Jan 2024 06:43:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201106
IP address blocks: 62.72.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 08:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:43:21:35:2c:15:8b:4c:a1:c7:54:e7:d7:cb:93:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 11 06:43:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=263f12146cfe6044c768cf127e012bf46757dc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:9a:cf:05:6c:b3:47:ce:40:a8:14:62:cb:
02:68:b1:4c:85:46:7e:26:db:50:54:af:4c:49:26:
b9:b8:3f:db:be:1d:39:f7:f5:90:83:2b:6c:d9:a8:
2e:77:5e:b0:53:85:1d:78:a6:38:5a:9a:86:bb:35:
8f:c5:7c:80:75:4c:59:6b:d5:ca:8a:f9:e9:38:a9:
ca:62:24:30:37:18:83:b0:78:37:59:1d:e2:e2:05:
bc:a4:e9:e1:15:b5:e7:b6:d3:cd:57:14:e7:cb:54:
bc:12:d9:61:fb:e4:b1:be:12:35:4f:d5:9f:ca:ed:
0d:43:b7:cd:5b:0f:2e:2f:49:ee:11:30:8b:f2:d1:
c2:e5:f0:fd:de:90:64:4f:7b:62:6b:0a:30:f7:ee:
f4:23:8b:12:0c:ea:f5:2b:a5:84:ea:9d:f4:da:87:
37:85:fb:f4:63:72:cc:d3:3d:15:87:84:2c:45:0a:
6b:b0:1c:6b:9a:da:9f:00:1d:6f:a2:74:a3:5d:79:
d5:3e:dc:07:68:51:08:b2:f9:89:06:a2:b5:69:ae:
3d:50:de:3d:8d:d9:5e:08:b7:72:f5:97:ab:d8:a0:
4f:ad:dd:31:fe:aa:77:ad:ca:53:29:0c:19:b7:b6:
3b:ee:8e:7a:7a:32:4e:b6:3e:a6:4d:af:96:fc:93:
78:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3F:12:14:6C:FE:60:44:C7:68:CF:12:7E:01:2B:F4:67:57:DC:0B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Jj8SFGz-YETHaM8SfgEr9GdX3As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.189.0/24
Signature Algorithm: sha256WithRSAEncryption
22:98:95:ab:d8:61:a4:fe:c3:b2:7a:14:74:3a:fb:6d:99:ca:
03:b1:dc:25:8f:10:e5:6d:84:9f:d9:84:99:09:2f:ed:6b:06:
10:af:03:7b:83:23:f7:1a:52:e5:a9:6c:e6:d1:07:00:e4:bd:
e3:d9:52:52:09:85:4d:ba:6d:79:6c:3c:8d:8e:e0:33:d3:f8:
a7:2e:36:f3:49:29:0a:d7:8f:5c:62:d2:34:c8:5b:be:f4:49:
99:05:26:8e:4b:48:fe:3b:df:43:b5:ab:3c:96:7a:0f:d8:bc:
92:50:b6:c5:6e:c3:6f:0c:b4:39:12:e9:f2:77:34:08:0c:49:
96:b1:01:ec:3c:81:09:49:ea:53:f5:e4:90:98:de:32:19:93:
ad:b7:9d:91:5d:a1:c5:24:26:06:86:96:76:63:00:e9:df:61:
df:98:d8:ae:f5:70:29:44:aa:19:c5:91:8a:3c:49:f7:e4:43:
79:55:30:43:7a:95:dc:f0:3b:63:b3:dc:1f:91:24:f0:67:42:
4b:5b:38:3a:39:82:7e:3e:42:02:5f:7d:fd:49:91:ea:6a:7b:
45:b5:0c:dd:b7:95:6e:69:19:82:81:2d:6d:76:28:29:a9:7b:
96:4a:45:0d:6e:fc:07:90:b1:c5:c8:3f:a5:e5:53:d8:47:dc:
62:09:92:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org