Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/TbHZRVNlsIGC2jlJH5yCN5BpBL0.roa
File: TbHZRVNlsIGC2jlJH5yCN5BpBL0.roa (raw, json)
Hash identifier: 6eJ5G7O7dPH64tF7OIts4OF0a7N3fH1KAPmlbsE11Mo=
Subject key identifier: 4D:B1:D9:45:53:65:B0:81:82:DA:39:49:1F:9C:82:37:90:69:04:BD
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01856F4B7E95960AE452E86D9EAE944EE2C7
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/TbHZRVNlsIGC2jlJH5yCN5BpBL0.roa
Signing time: Sun 01 Jan 2023 21:44:56 +0000
ROA not before: Sun 01 Jan 2023 21:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 62.72.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jan 2023 18:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:7e:95:96:0a:e4:52:e8:6d:9e:ae:94:4e:e2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 21:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4db1d9455365b08182da39491f9c8237906904bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:66:5d:ec:88:7d:64:ef:b4:55:45:90:1f:
71:63:b9:3a:e0:8e:cb:b8:de:5e:86:f3:9f:23:2e:
e2:0f:4d:85:bc:c5:ce:8c:65:56:32:4f:06:5a:d5:
97:b1:2e:fc:e6:5e:6e:d0:19:2d:5c:93:be:7e:c0:
ec:49:c3:8b:60:cc:11:1b:ec:d7:5d:42:44:61:aa:
ff:ac:cc:9f:07:f6:99:31:79:3d:77:22:65:fd:82:
36:9b:25:91:94:b0:7f:cb:bf:6e:4e:83:e4:43:3d:
b1:52:fb:8f:6f:2c:6a:29:8d:06:79:6d:a3:b8:62:
b5:f9:2a:3e:f8:00:63:2c:c1:26:d9:8b:d7:8a:64:
de:be:93:3f:da:8e:bb:68:66:64:08:4d:a6:5b:ff:
02:8f:80:f1:00:fc:9a:39:40:2c:e7:aa:43:7c:1f:
97:e2:e7:95:ab:91:36:ed:43:3f:03:ec:59:ee:33:
b2:90:48:d8:20:64:13:01:85:0e:60:11:d0:50:d8:
6b:04:8a:ce:b2:97:e9:d5:a3:18:83:3a:33:41:83:
b0:af:2b:72:b5:37:cf:d4:84:ca:18:54:ea:8d:0e:
cf:9d:83:2e:0a:7a:7f:17:ec:69:e7:17:b2:4f:26:
a4:37:46:81:70:1c:2d:84:8e:ad:d4:2c:4a:e6:3e:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B1:D9:45:53:65:B0:81:82:DA:39:49:1F:9C:82:37:90:69:04:BD
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/TbHZRVNlsIGC2jlJH5yCN5BpBL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.182.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e1:5e:7c:df:c8:0d:df:bc:ab:f9:e7:53:cc:10:b3:5a:e4:
63:59:9d:8e:c6:d6:59:b0:35:cf:dd:bd:f0:c1:0e:d8:23:b4:
c8:8a:43:d1:fe:78:64:a5:30:dc:a3:7f:ab:5a:94:0a:b1:6b:
8c:45:56:09:a2:e8:d3:41:b1:73:76:52:51:bc:3b:3d:85:dd:
14:4e:a3:33:1e:94:d7:7e:f8:f2:23:3d:ad:67:1f:9d:a1:49:
d4:2b:0b:ba:39:11:46:04:29:b8:7b:e7:6c:77:c3:7f:04:b6:
b2:d3:db:14:dc:7c:68:be:02:1e:3d:44:8a:8f:00:f7:0d:d0:
f2:d0:06:89:22:ba:ea:75:6c:fc:8a:77:66:0a:41:3f:3a:11:
8a:30:e1:9c:91:96:23:c5:77:8c:a7:57:91:3e:ef:63:cb:bf:
e0:16:64:f9:d4:4c:bd:67:63:28:d5:95:69:7c:86:3e:37:c6:
16:62:bd:ba:f7:6a:f1:55:31:44:9e:8b:3b:ad:a1:8c:13:97:
cb:f3:c6:d3:6c:f1:99:21:c1:0c:cc:2f:60:a3:bb:fb:f6:a5:
50:59:ce:20:09:a6:64:6b:68:59:0d:c9:37:5f:40:ed:12:bc:
bf:0e:27:ef:9c:15:fc:7d:b4:0d:ce:ae:f1:f0:12:f2:14:11:
3a:8f:9c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org