Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OqF-O93sRsHyIFOlmhDxoS9t2i0.roa
File: OqF-O93sRsHyIFOlmhDxoS9t2i0.roa (raw, json)
Hash identifier: RXDVp+XTnPV9cw/OlPcJs6bKs+mrdGibt542xV2nkwk=
Subject key identifier: 3A:A1:7E:3B:DD:EC:46:C1:F2:20:53:A5:9A:10:F1:A1:2F:6D:DA:2D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01877969AF83504BC9B60A6320C0F153C6BF
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OqF-O93sRsHyIFOlmhDxoS9t2i0.roa
Signing time: Thu 13 Apr 2023 06:59:41 +0000
ROA not before: Thu 13 Apr 2023 06:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 May 2023 21:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:69:af:83:50:4b:c9:b6:0a:63:20:c0:f1:53:c6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 13 06:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aa17e3bddec46c1f22053a59a10f1a12f6dda2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:db:0f:32:44:ee:0c:15:7b:a9:26:a2:6f:1b:
16:97:06:23:8b:f5:c5:01:ed:61:84:99:ec:52:b4:
42:3b:f3:cb:a7:13:77:09:01:6b:99:98:e7:23:89:
a2:d4:52:f4:8b:10:36:8d:c3:89:43:9b:09:5c:a7:
b6:e7:cd:d5:ef:0b:67:12:60:66:83:9f:d4:f8:9f:
5f:9d:5a:24:39:6a:26:ee:c6:0d:9e:33:57:9d:db:
93:33:bd:5a:24:ed:53:cd:6d:c7:cb:98:17:ce:9a:
66:16:ee:22:93:d5:ab:52:73:39:8e:f4:71:b5:b7:
61:45:53:06:d4:56:54:84:35:9a:db:0c:30:35:ba:
23:fd:a8:f4:bc:87:93:3e:33:3b:b1:a5:e3:c4:e4:
c8:8e:06:5d:62:f7:55:f9:2c:d2:4e:0f:27:62:aa:
80:12:c3:48:b6:9c:a0:ad:4a:ff:24:d1:7b:76:21:
35:1f:93:1e:2d:ff:be:85:63:61:cd:20:d9:cd:f4:
48:e2:7c:61:9c:f4:b5:88:fc:24:99:6b:4c:23:f2:
78:87:18:03:4c:29:26:a8:16:1b:48:5e:d5:49:9d:
1b:1d:e9:ec:36:5e:dd:3b:dd:f0:dd:3f:f4:1f:19:
f5:ae:92:5d:7e:c5:7c:79:6e:a1:32:07:d2:8f:55:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A1:7E:3B:DD:EC:46:C1:F2:20:53:A5:9A:10:F1:A1:2F:6D:DA:2D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OqF-O93sRsHyIFOlmhDxoS9t2i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0/24
62.72.170.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:68:4f:ba:bb:9a:03:da:a7:c1:d6:06:a2:4b:1d:b5:cb:bc:
f1:ab:c6:a2:11:4f:40:65:e7:13:8e:72:12:bf:ab:e8:e1:b1:
6a:11:66:a5:75:06:3c:45:01:49:88:94:90:23:ee:4a:97:d5:
2c:a3:d9:6b:e3:89:ad:f5:e5:ea:1a:c4:ad:60:8a:21:a3:ad:
04:9c:1f:cd:32:74:7f:a9:ad:06:4b:9c:57:70:f7:1f:20:f1:
47:5c:dd:cc:99:bd:e4:84:68:dc:f8:dc:7d:9d:c2:5e:ab:7e:
d9:bb:a9:ed:ba:53:88:38:ec:b0:a3:26:01:1d:48:93:22:25:
19:e3:03:d0:7a:5e:ec:19:48:0c:5e:e6:24:22:63:b4:c4:5b:
8c:3d:d5:b2:f9:1c:c4:01:f5:8d:55:6d:11:cb:1f:fa:f3:3c:
4c:8b:eb:d8:ab:6d:43:14:0e:74:01:8e:93:39:b9:70:a3:4c:
fb:d3:4b:03:f5:bd:68:33:dc:4f:4b:2c:0f:ff:b5:ea:98:d7:
20:6b:5d:4d:85:87:46:df:ff:ca:84:97:ee:16:54:c1:b8:a4:
44:90:f1:74:0b:cf:06:68:91:94:58:52:f0:e9:01:00:32:27:
11:69:76:ee:11:3a:3d:81:92:81:69:06:5d:7c:92:e2:33:b7:
fc:79:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org