Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/QJFsc7xQNG8nXk61bZyQUwnut2I.roa
File: QJFsc7xQNG8nXk61bZyQUwnut2I.roa (raw, json)
Hash identifier: YLoqHCZGORJpDOxwVlUSnikYYD5YXtEzg9ujr0tqrlE=
Subject key identifier: 40:91:6C:73:BC:50:34:6F:27:5E:4E:B5:6D:9C:90:53:09:EE:B7:62
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01866348BEEED713FC3ED9CFA52492A72A44
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/QJFsc7xQNG8nXk61bZyQUwnut2I.roa
Signing time: Sat 18 Feb 2023 06:49:17 +0000
ROA not before: Sat 18 Feb 2023 06:49:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 62.72.177.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Mar 2023 11:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:63:48:be:ee:d7:13:fc:3e:d9:cf:a5:24:92:a7:2a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 18 06:49:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40916c73bc50346f275e4eb56d9c905309eeb762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d1:91:bc:70:f3:ee:f2:f1:e1:55:92:c5:eb:
7d:04:f0:10:d9:cf:d1:65:c5:a7:6f:79:ec:c7:bd:
69:04:5b:24:f1:23:b1:d9:90:08:49:d5:d3:57:5e:
d7:49:86:e9:80:81:5c:64:11:6d:13:7c:2d:d3:43:
1d:41:92:6e:57:aa:78:cd:f5:8f:a5:17:b8:4b:18:
a8:de:d1:5f:c8:bf:ac:fb:70:33:1c:c4:dc:aa:89:
58:ed:7c:22:b9:49:60:f5:ec:5a:f0:d1:2a:54:e4:
d0:ca:23:93:54:48:6b:af:52:db:1e:48:77:9c:bc:
02:48:32:26:96:2e:ea:33:fc:6b:77:04:22:02:49:
aa:cf:90:6b:ef:1e:5b:1e:f4:41:5e:1c:13:ee:41:
e8:aa:97:a7:17:bd:78:35:c3:45:63:71:c9:9f:ce:
20:c1:9e:18:3d:16:76:3d:bf:6e:fc:dc:4e:96:ba:
da:81:3e:e8:79:13:03:29:c8:42:93:89:02:9c:a3:
2e:72:4a:13:20:81:ae:f5:4a:99:a3:65:1f:39:df:
7d:59:d7:f0:59:97:c0:6d:3f:5e:a6:3d:16:9b:d1:
96:6f:f9:2b:c2:69:42:51:3f:c7:81:63:e8:9f:93:
f9:b7:ba:d0:8d:49:55:01:37:43:01:46:e1:e1:f8:
ce:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:91:6C:73:BC:50:34:6F:27:5E:4E:B5:6D:9C:90:53:09:EE:B7:62
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/QJFsc7xQNG8nXk61bZyQUwnut2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.177.0/24
62.72.190.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4d:81:37:b4:fa:90:35:a6:ff:1d:4b:04:8b:86:e6:0b:36:
91:85:9f:23:11:7b:ea:d2:b3:85:7e:95:1a:be:4e:47:19:d3:
cc:ec:56:b6:24:1e:68:5f:95:e6:39:76:b0:33:44:d0:16:9f:
37:ce:a6:a0:b3:da:54:be:fe:de:50:4a:f2:d1:eb:06:b2:3a:
08:66:a4:d7:0f:b0:4a:66:64:30:c4:2d:39:34:3c:8d:42:96:
b4:43:39:3c:7a:52:c0:35:da:ab:87:25:0a:8b:e6:82:db:e7:
f1:d3:08:7e:28:19:c7:6d:50:04:01:0d:82:a0:0d:39:91:f2:
31:43:a7:b6:e5:eb:4a:a0:6d:1c:ab:38:59:a3:fa:5b:06:bd:
36:bb:8f:d8:d0:ee:5a:f8:53:57:04:2d:36:d2:25:2c:2c:9f:
df:e8:c2:cc:8c:54:a5:ef:1c:fa:a3:7b:39:b8:f2:ed:9a:cd:
92:6c:70:9d:3a:ee:99:9d:d9:8f:d8:09:67:7e:2d:22:51:f1:
78:51:72:d5:0d:20:0d:da:66:0b:f4:c6:6b:8b:ed:45:9b:fe:
bf:2e:a0:01:ac:2a:44:ab:38:56:0e:42:c0:6e:e0:c8:b7:b3:
29:5a:e4:75:e7:d4:a0:92:69:b5:e8:3f:1c:fc:5c:20:c0:ed:
a8:81:c9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org