Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/SFTfEtp_hgJ2erDsNvmHKd-NhlM.roa
File: SFTfEtp_hgJ2erDsNvmHKd-NhlM.roa (raw, json)
Hash identifier: svGlBHtZLczbPtfKOl/0qmK5JhqOWda9I401bsEMCPI=
Subject key identifier: 48:54:DF:12:DA:7F:86:02:76:7A:B0:EC:36:F9:87:29:DF:8D:86:53
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0186BA9E9B04BD16C927841CE66D4E499B1C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/SFTfEtp_hgJ2erDsNvmHKd-NhlM.roa
Signing time: Tue 07 Mar 2023 05:50:01 +0000
ROA not before: Tue 07 Mar 2023 05:50:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211432
IP address blocks: 62.72.171.0/24 maxlen: 24
176.57.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Sep 2023 06:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:9e:9b:04:bd:16:c9:27:84:1c:e6:6d:4e:49:9b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 7 05:50:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4854df12da7f8602767ab0ec36f98729df8d8653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:3c:14:3d:d5:aa:d1:5d:40:df:e0:e7:90:
b5:44:6d:8f:c1:f2:02:fb:80:df:5d:40:51:11:74:
28:77:92:01:d3:32:de:47:8e:90:5b:ed:96:33:09:
54:5e:f1:b7:16:b9:54:c9:02:51:1d:b0:ad:c1:eb:
bf:3a:e1:31:eb:f1:f6:15:ae:85:a2:9b:dc:f9:af:
9d:03:e3:c0:a0:80:b2:75:2b:88:1c:74:64:db:50:
27:32:82:47:9c:20:24:90:fe:80:6f:17:2a:c0:34:
c5:3f:27:82:d8:f7:af:71:03:72:b5:af:2f:50:06:
4e:8f:ab:3c:cc:64:21:03:a4:ea:04:80:03:65:16:
4d:13:ff:fb:b7:36:5c:52:ec:45:c7:f3:ca:d7:6b:
66:0c:9a:1f:8d:d4:f5:40:f7:7a:af:13:7d:f9:cc:
4c:4e:e0:3f:14:d4:68:31:84:13:99:1a:c9:bb:93:
f4:11:2d:ba:ed:a9:32:c8:c4:d7:04:75:68:ec:d8:
a0:15:07:29:fa:b7:90:03:4e:47:5d:fd:97:bf:ab:
6e:34:1f:16:5e:96:01:17:50:28:7e:a4:b4:a8:cb:
a2:a8:d0:ac:b1:22:36:51:5d:8d:78:e1:5e:f8:c2:
d8:29:77:1b:28:43:27:e4:58:df:ad:64:f7:d5:d6:
67:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:54:DF:12:DA:7F:86:02:76:7A:B0:EC:36:F9:87:29:DF:8D:86:53
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/SFTfEtp_hgJ2erDsNvmHKd-NhlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.171.0/24
176.57.60.0/24
Signature Algorithm: sha256WithRSAEncryption
75:91:69:ec:4e:cd:40:02:53:d5:2d:6d:cb:d2:17:ee:42:fd:
26:8d:2e:c3:c2:66:b0:0e:10:92:18:b5:c3:3d:4c:50:5d:2d:
54:f0:57:c6:dd:65:31:1c:94:c0:7c:b0:15:da:b4:bf:95:23:
46:72:d0:af:f0:36:98:e0:6a:a3:91:d8:22:48:a5:06:18:3f:
f1:c9:71:9a:29:36:f0:c4:9c:b3:e2:e3:98:f3:e2:7c:c2:8d:
bd:d1:46:83:27:e2:32:56:ef:50:c2:da:6d:5c:ca:0a:59:2e:
19:f0:8b:d4:04:b8:cb:fe:24:ce:e4:e3:34:0b:ce:d4:17:42:
b7:a0:fb:03:5e:b1:8d:79:2f:e7:87:9b:2e:f9:9e:11:66:bc:
2c:b8:4f:14:88:57:8d:8c:ff:54:fd:bd:9a:ec:50:34:4d:e5:
f2:e8:ad:c9:8a:f3:b8:64:1b:4e:63:34:3b:98:ad:c0:3d:6b:
bb:48:f2:79:da:82:e0:06:d3:df:fa:bf:cd:ac:62:13:f8:3d:
f1:00:54:5e:7f:17:6d:58:a2:4e:ba:1a:b4:20:a2:8d:92:8e:
21:5e:72:ce:27:18:a5:e3:3c:8c:8f:46:8c:f0:56:84:71:0c:
16:5d:ea:3d:d3:d4:ab:fd:23:19:15:18:fd:80:e9:24:f7:e5:
8d:b5:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org