Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OPAnOMd0lBcchig0efCYDdWYkDk.roa
File: OPAnOMd0lBcchig0efCYDdWYkDk.roa (raw, json)
Hash identifier: hqJLkprlZxVNja1U2+2ej9QYMr9ICk/I2L/X+X8oxoo=
Subject key identifier: 38:F0:27:38:C7:74:94:17:1C:86:28:34:79:F0:98:0D:D5:98:90:39
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018B19B37F9654628E1250C181522CA3DED9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OPAnOMd0lBcchig0efCYDdWYkDk.roa
Signing time: Tue 10 Oct 2023 13:07:55 +0000
ROA not before: Tue 10 Oct 2023 13:07:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42055
IP address blocks: 62.72.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Oct 2023 13:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:b3:7f:96:54:62:8e:12:50:c1:81:52:2c:a3:de:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 10 13:07:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38f02738c77494171c86283479f0980dd5989039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:c2:23:0b:6a:84:98:13:90:90:f1:32:fb:
78:e5:5c:d4:24:5a:59:b4:1e:62:95:5c:c3:a5:56:
11:67:20:cb:94:da:26:f4:28:0e:85:d8:bd:2f:c0:
d4:e8:c1:0d:bb:04:6f:74:1f:ae:51:15:e7:27:5c:
49:b9:7c:50:ba:38:a5:96:52:92:48:00:c0:22:a5:
03:b3:e1:44:56:46:b6:28:a9:50:69:9b:3a:16:0c:
42:a1:33:c0:04:8c:b4:9f:be:83:6f:2a:ce:fc:a1:
49:2c:0b:9c:74:99:e2:fa:bc:f6:56:83:7d:a6:96:
a8:81:7a:14:7c:12:92:b9:cc:d9:e1:98:1d:41:67:
f4:c9:57:bc:19:17:b4:81:b7:ee:c5:f7:32:a1:aa:
f4:62:90:8a:b2:ca:ce:40:c6:7b:c9:21:40:b2:8f:
55:83:e5:8c:ad:e7:71:96:53:49:0c:b7:56:f4:07:
1f:8b:9a:c1:e0:b0:70:9a:3d:8c:82:65:29:89:c8:
ce:d5:ac:4d:39:d1:e9:71:4b:25:2d:d9:96:16:bb:
7f:dc:2f:16:f8:c0:2a:fc:a1:27:db:2f:cd:88:2b:
23:63:8f:8f:9e:4c:10:af:2e:3f:83:aa:eb:77:ba:
17:6f:fd:ea:e7:fd:e9:f5:bd:17:3b:eb:1e:eb:3f:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F0:27:38:C7:74:94:17:1C:86:28:34:79:F0:98:0D:D5:98:90:39
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OPAnOMd0lBcchig0efCYDdWYkDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.177.0/24
Signature Algorithm: sha256WithRSAEncryption
33:04:6d:87:cd:ed:be:5e:e7:4b:cb:c9:e3:4c:b6:09:38:ec:
a9:89:ae:b3:19:ce:d1:5b:33:93:81:73:60:52:a7:66:da:1d:
b3:1e:67:3c:53:6d:5d:12:84:1c:bd:38:62:e7:b4:2c:74:73:
41:b1:19:a5:2b:6b:3d:37:fd:95:ae:c8:46:08:e8:5f:fa:29:
9a:14:58:d9:34:1a:08:73:d5:f6:3a:40:6e:53:ff:9e:db:4d:
56:cb:15:03:a0:3b:99:0d:d7:93:3e:77:3d:cd:bd:9c:c1:e7:
52:5c:2c:0e:ac:71:dc:59:ee:77:cc:25:05:08:91:8f:d7:a5:
43:ef:d7:38:b6:95:75:49:52:41:d2:36:b6:7b:4f:37:48:69:
6e:99:07:a9:1c:34:e0:92:c4:f9:5b:2e:18:f2:4e:5e:6c:5f:
20:06:c4:29:5c:17:c6:df:47:3e:87:88:1d:f5:47:fc:36:d2:
bf:9d:00:a0:d1:d2:23:51:96:3f:61:13:1f:51:21:9f:c5:65:
64:bb:f6:f4:71:2e:ae:15:f2:cd:14:ea:27:dd:ef:43:5a:cf:
06:85:88:2e:48:fd:27:d4:50:b9:5f:86:38:e7:82:19:1b:34:
04:5a:04:ef:49:ec:3a:8c:be:7b:58:c0:a5:47:a6:ca:95:08:
1b:7f:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org