Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/R8QeCV5nJMVvKZH2rZiWYSbe1t8.roa
File: R8QeCV5nJMVvKZH2rZiWYSbe1t8.roa (raw, json)
Hash identifier: 7xpdM4A3LcGGgC8RmANzUfBd6nJuDq25u0jl+Eebr8w=
Subject key identifier: 47:C4:1E:09:5E:67:24:C5:6F:29:91:F6:AD:98:96:61:26:DE:D6:DF
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C67084D09326771B0D93CB79D8148895F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/R8QeCV5nJMVvKZH2rZiWYSbe1t8.roa
Signing time: Thu 14 Dec 2023 06:34:06 +0000
ROA not before: Thu 14 Dec 2023 06:34:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 62.72.167.0/24 maxlen: 24
81.21.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:08:4d:09:32:67:71:b0:d9:3c:b7:9d:81:48:89:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 14 06:34:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47c41e095e6724c56f2991f6ad98966126ded6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:ad:9a:01:e9:ec:e0:5a:1e:45:73:04:f1:
11:d4:78:a1:22:94:c9:29:0a:64:5d:a5:9a:8a:b2:
fe:78:bb:26:71:34:81:41:bf:c2:15:ec:a1:8c:08:
d0:b7:99:f2:d3:dd:cc:e1:dd:a1:ef:36:cc:0d:fd:
a4:c8:5f:41:b4:66:12:88:a3:54:13:7f:25:8b:f8:
48:84:e7:e3:40:75:fe:b4:0a:ff:a5:51:42:eb:f8:
a8:36:01:c6:ab:2c:61:7a:75:5e:48:3b:11:5b:89:
43:6e:37:6e:90:1d:4f:a9:31:f6:32:b1:30:18:91:
cc:ba:74:3b:ce:ac:90:92:92:5e:e3:7d:53:da:ca:
3b:18:70:7a:81:bc:8c:14:31:5d:c7:98:a1:7b:a3:
06:1e:8a:4a:fe:75:60:a3:7c:58:04:79:10:4d:45:
7c:8b:a4:52:84:8e:2d:cf:01:46:03:67:bb:93:0e:
87:4a:e4:18:ca:de:5d:64:6f:47:55:3e:71:d6:50:
08:fd:8c:b4:1b:fd:06:64:1f:dc:de:8e:ed:ce:1e:
06:ab:f0:f7:46:e7:18:c9:a1:a6:df:d3:8d:b6:a3:
fd:17:76:b5:06:d2:6c:31:4b:ee:ba:02:b2:56:15:
5e:0b:ce:b9:6c:cd:c7:9d:a0:f4:8c:df:52:bf:17:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C4:1E:09:5E:67:24:C5:6F:29:91:F6:AD:98:96:61:26:DE:D6:DF
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/R8QeCV5nJMVvKZH2rZiWYSbe1t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.167.0/24
81.21.12.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:df:1b:88:a2:a8:c1:21:21:28:84:aa:8f:8a:b4:d4:79:1b:
15:a1:61:97:cb:d8:9a:d5:96:3b:de:5b:e0:5c:0c:5d:57:a2:
f0:b7:4c:90:cd:dd:da:31:b1:ea:c7:de:61:a1:8e:dd:0a:46:
a0:fd:e2:a2:bb:dd:99:8c:ef:ec:34:43:a1:41:f9:1e:64:d6:
81:eb:99:50:8c:a7:b9:cb:c8:f6:db:c3:33:e4:01:22:cb:4b:
6e:f9:40:93:e6:c0:62:78:31:48:07:64:44:d4:1e:18:e2:a6:
82:52:cd:5c:04:6f:44:ce:ec:0a:8a:b7:77:d5:62:cf:cc:13:
c1:a3:8b:64:85:1f:7d:c5:71:ac:62:5b:57:92:70:e9:14:f8:
38:e3:b7:9a:ef:66:2e:cb:3b:f4:1b:91:d5:d2:2b:8a:ee:48:
58:4e:43:e5:98:14:05:f8:30:ab:45:62:30:dc:5e:12:70:d0:
68:aa:77:80:9f:48:bd:29:1d:a2:4f:9d:77:04:d5:7c:25:a7:
1b:1c:21:93:c0:2f:4d:4f:be:36:d5:30:ee:0f:9a:52:5b:44:
59:42:2f:22:05:19:3e:13:94:d6:f5:53:09:42:dc:ef:ff:2d:
7c:34:82:ff:d9:76:28:69:77:c1:a6:46:3e:dc:91:80:b4:87:
76:d7:85:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org