Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/PJr0AvhNTfvx6y829p5p63oOrYo.roa
File: PJr0AvhNTfvx6y829p5p63oOrYo.roa (raw, json)
Hash identifier: FxzIpvxCBedzW0m9OpLpB5yLmfss+Ghmw9Oq5HQuj6M=
Subject key identifier: 3C:9A:F4:02:F8:4D:4D:FB:F1:EB:2F:36:F6:9E:69:EB:7A:0E:AD:8A
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0188F20470283BF21A2F03FCE799AA88F9BA
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/PJr0AvhNTfvx6y829p5p63oOrYo.roa
Signing time: Sun 25 Jun 2023 10:05:57 +0000
ROA not before: Sun 25 Jun 2023 10:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 62.72.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Sep 2023 06:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f2:04:70:28:3b:f2:1a:2f:03:fc:e7:99:aa:88:f9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 25 10:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c9af402f84d4dfbf1eb2f36f69e69eb7a0ead8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:6c:b5:05:65:10:7b:ff:a3:b3:1a:b6:8b:
cf:e8:e6:52:81:f6:82:b9:7a:e3:97:e9:36:16:ef:
78:14:0e:1d:c6:aa:08:87:7f:31:df:d2:4b:ab:53:
c1:cd:a6:88:d0:9a:af:7d:72:05:2f:57:7e:c5:3c:
d2:64:23:8f:8e:c4:41:7a:ef:47:e9:f8:6d:de:13:
84:ae:ce:62:49:11:16:59:34:82:b3:fc:2d:c6:1b:
b0:71:a4:a9:ad:6f:9a:d8:c8:92:c0:fc:00:d1:58:
e5:d5:4d:5b:46:d3:2f:05:0b:e8:92:4b:62:a6:09:
64:29:ed:29:72:18:a2:f0:80:27:67:07:d5:bb:e4:
ba:87:e9:7e:f7:66:7e:ba:07:95:9a:ae:fb:a0:d2:
af:63:78:b2:21:29:a1:b3:12:3c:15:d9:91:61:4b:
81:24:c3:30:78:fd:e5:6f:69:bc:02:b2:31:d2:d9:
47:4c:63:09:e5:bd:49:bd:5e:57:04:e5:ee:33:c3:
ec:f0:f0:e3:63:a6:f5:92:b9:d6:82:80:48:32:bd:
93:92:16:47:f9:b0:34:c6:0b:53:a8:a1:89:33:1e:
02:e0:36:3b:ae:7d:cd:e3:2c:db:3a:35:c5:6e:b1:
f8:b9:31:d0:1f:1f:2c:cf:61:b4:ed:59:9e:42:03:
f5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9A:F4:02:F8:4D:4D:FB:F1:EB:2F:36:F6:9E:69:EB:7A:0E:AD:8A
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/PJr0AvhNTfvx6y829p5p63oOrYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:1e:e0:e4:d9:09:51:72:9f:fd:9d:34:5e:43:99:6b:da:9e:
28:ee:cd:0a:6a:7e:6b:fe:ee:d7:80:2f:49:39:85:11:aa:50:
1e:3b:e3:a5:c0:a6:ab:ee:d9:b7:32:6d:2e:09:9e:75:a0:70:
37:40:79:d5:bd:42:87:47:80:fb:f5:1c:46:e1:04:e4:64:94:
92:db:66:44:86:58:73:be:cf:51:94:f9:0d:5c:75:af:7c:ef:
17:a7:7d:8b:49:fa:e2:9f:12:66:ec:3e:94:ff:ea:8d:a6:0b:
56:11:fe:18:87:0a:ad:0a:73:f4:e2:5f:9e:99:40:0a:ea:2e:
5c:c5:46:59:ab:20:52:7d:c8:15:ce:f0:2a:ab:2c:9b:ef:dd:
f9:cb:8f:66:5e:6f:4a:11:29:d9:b9:52:7f:15:b6:d3:41:42:
cd:40:9e:64:d3:4d:ea:aa:a5:ed:57:4c:36:7d:30:1c:44:04:
21:70:5c:eb:86:5a:14:af:7c:5e:e2:71:e5:63:61:28:6c:88:
05:4b:87:56:a5:85:c8:69:88:f4:54:3c:36:a4:31:ae:82:21:
3b:80:31:5b:6a:c4:12:e4:ad:e4:b5:39:e1:70:85:1f:ff:8c:
64:07:ea:8c:4f:88:c9:2d:26:98:cc:c6:06:fd:49:da:3f:33:
93:0a:b7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org