Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Pkw5i9SFfvKuoBk8bVtpqme5ttQ.roa
File: Pkw5i9SFfvKuoBk8bVtpqme5ttQ.roa (raw, json)
Hash identifier: tmtDAGdAvTGoCSirS8jY7XDHr9blPo+eGIEE+Un4I7E=
Subject key identifier: 3E:4C:39:8B:D4:85:7E:F2:AE:A0:19:3C:6D:5B:69:AA:67:B9:B6:D4
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C7695037AE671074362018D6D418B75E4
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Pkw5i9SFfvKuoBk8bVtpqme5ttQ.roa
Signing time: Sun 17 Dec 2023 07:02:06 +0000
ROA not before: Sun 17 Dec 2023 07:02:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.72.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:76:95:03:7a:e6:71:07:43:62:01:8d:6d:41:8b:75:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 17 07:02:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e4c398bd4857ef2aea0193c6d5b69aa67b9b6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:91:71:b5:cf:72:d7:a0:3c:e0:8d:f1:19:cb:
5f:60:84:a1:a9:1f:60:76:73:a7:ae:65:ae:b4:2e:
df:30:07:73:60:be:de:d8:5d:c5:b4:28:68:ff:c1:
b2:6d:f6:c9:11:3b:80:a0:a4:ba:89:77:19:53:ec:
37:57:53:09:51:fe:42:53:a5:d9:f3:64:78:2e:37:
8e:53:9b:72:30:73:60:c8:6d:2a:89:65:17:ac:8d:
e2:63:84:cb:6d:e4:f2:00:d2:d9:f3:98:06:0f:6c:
35:9b:cc:b1:66:15:69:2f:76:e7:67:b9:5b:7a:eb:
d0:3e:26:9e:80:bc:16:14:5c:2e:5a:44:c3:fd:f2:
a2:c7:df:63:f9:50:ed:23:81:b9:54:3f:bd:06:15:
6a:d0:18:eb:a5:f8:11:41:d2:0f:35:14:05:d0:c0:
a3:30:f4:04:71:c8:3a:56:37:b4:d1:9d:32:75:46:
71:24:34:a5:d0:77:76:51:9b:f8:27:88:d4:ff:35:
1a:99:ab:2c:91:71:1c:52:8e:16:37:67:6a:22:32:
3d:17:ad:e6:0b:8d:9e:40:1c:48:6a:13:b2:c1:9c:
7d:cd:0e:e8:85:57:1c:60:b0:f1:d9:b0:4a:4a:ad:
13:be:37:ad:01:0f:97:ba:fb:e5:aa:c9:df:bb:4d:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4C:39:8B:D4:85:7E:F2:AE:A0:19:3C:6D:5B:69:AA:67:B9:B6:D4
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Pkw5i9SFfvKuoBk8bVtpqme5ttQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.175.0/24
Signature Algorithm: sha256WithRSAEncryption
55:75:49:a9:81:9c:34:57:62:b5:57:87:14:6f:4d:d0:60:fb:
b2:51:d8:76:96:fa:e4:cd:77:8a:18:13:65:cd:fd:8e:8a:8e:
82:7a:b6:59:1c:7f:0e:6d:70:5c:1f:1a:00:2b:e2:69:36:cd:
d7:31:2f:29:9c:2d:cf:43:e0:be:d6:c9:42:51:38:60:29:9b:
be:c6:4e:e1:e9:3b:1f:b5:d8:c3:be:22:3a:ef:cf:0d:86:7e:
31:d2:be:fd:d3:d5:2d:33:89:d3:4a:96:4f:c1:26:53:6f:a5:
f2:85:a0:38:40:90:42:5c:23:7e:a0:c6:a8:4a:d2:a6:7f:c7:
00:da:21:e6:f0:7b:05:d9:34:14:2d:56:fb:00:fe:92:03:a5:
77:92:96:92:0b:3d:81:c7:72:81:f5:e3:0d:ea:b9:5e:ba:2a:
1e:04:b0:2c:39:79:f4:52:4b:bd:7e:7b:41:cf:7e:2b:70:a1:
40:50:e4:8b:e3:36:7f:3b:1e:56:f5:b2:63:5e:46:61:05:c5:
b2:e6:41:08:ea:1e:e7:bd:b3:41:32:94:81:ab:9b:28:e5:15:
1e:4b:70:28:ea:5c:61:99:58:01:df:0c:3f:55:c4:67:4d:60:
29:d6:8f:35:14:f2:b8:43:92:46:49:7c:45:e8:d5:b4:94:b1:
39:9d:39:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org