Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/UNOTIChpotjkOrE63JqwuXTbP30.roa
File: UNOTIChpotjkOrE63JqwuXTbP30.roa (raw, json)
Hash identifier: uwKhXKqKKLbbHWsSkPE9huhasUplF9TxirvpThSKLTk=
Subject key identifier: 50:D3:93:20:28:69:A2:D8:E4:3A:B1:3A:DC:9A:B0:B9:74:DB:3F:7D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0187E55C95FB8ABE81EA2135540EAE52E5FD
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/UNOTIChpotjkOrE63JqwuXTbP30.roa
Signing time: Thu 04 May 2023 06:04:22 +0000
ROA not before: Thu 04 May 2023 06:04:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 62.72.175.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.3.0/24 maxlen: 24
81.21.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Jun 2023 19:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:5c:95:fb:8a:be:81:ea:21:35:54:0e:ae:52:e5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 4 06:04:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50d393202869a2d8e43ab13adc9ab0b974db3f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:61:c1:72:4a:ce:29:8d:94:15:b5:1e:eb:
54:fe:aa:cd:54:75:bb:9b:80:f5:cc:f5:d1:82:24:
a1:32:32:20:bb:00:61:71:1b:f4:89:ae:36:3b:06:
a4:14:bc:72:4e:46:cd:aa:68:3b:99:e1:b5:42:6c:
22:ae:dc:50:e9:19:d5:d1:33:69:37:74:8e:fd:b1:
c9:27:dc:6a:24:55:2e:c9:c6:2b:ce:2c:1c:a2:ba:
a7:b0:bc:b5:c9:91:5b:f6:3e:10:16:ad:a7:5d:6c:
3d:33:d9:98:7c:39:dd:eb:1c:37:22:fd:5d:0b:c7:
5a:2c:c1:7b:1a:b6:37:96:ef:01:20:96:3e:45:64:
92:5f:e3:d2:95:14:21:47:99:46:72:5c:0f:46:49:
ac:c4:27:9d:56:fd:12:ec:08:da:d0:d3:36:5a:92:
b5:86:a3:86:67:04:67:3f:05:1a:33:2a:fe:0e:ab:
54:a5:29:9b:ab:11:ae:c2:4b:f7:26:fe:d8:a8:26:
53:ca:c3:a3:bd:61:c9:a4:19:9d:63:77:3a:4f:62:
7b:1e:1d:89:ed:75:87:eb:b0:ba:98:37:eb:97:fc:
67:2f:cd:62:f0:a4:3d:02:73:ed:72:73:fc:35:55:
40:38:7e:88:5b:43:34:c8:26:91:7e:1d:9c:f3:a0:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D3:93:20:28:69:A2:D8:E4:3A:B1:3A:DC:9A:B0:B9:74:DB:3F:7D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/UNOTIChpotjkOrE63JqwuXTbP30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.175.0/24
81.21.2.0-81.21.7.255
Signature Algorithm: sha256WithRSAEncryption
a3:03:6e:4a:98:a3:a9:83:a0:ac:13:ac:9c:21:db:40:76:d3:
9f:b5:c7:21:d5:9a:2b:5b:af:5b:44:a4:76:da:32:70:6c:44:
a7:e2:48:61:d9:79:35:e0:33:46:ec:d7:fc:00:7d:60:10:3e:
fc:c9:69:06:1b:0b:ea:fc:e5:c5:93:15:7d:c6:0e:df:b3:d8:
47:fa:dd:bf:3f:8d:4f:b5:39:fe:0d:3e:cc:8d:78:3a:16:d4:
2a:bd:6d:42:98:9e:d3:45:64:fc:ae:12:cb:8a:c1:5f:12:af:
ee:26:4a:70:f2:dc:e0:09:cc:40:5b:bf:28:14:c6:45:b6:b8:
a5:50:05:26:4a:79:4e:19:a0:e9:b3:c4:fe:cd:36:11:38:09:
a9:cf:4a:a1:72:e3:f5:f4:f9:ac:96:2e:e1:69:00:54:af:ea:
d2:f1:96:d5:3b:09:79:01:6f:69:35:75:8c:c1:46:0e:3e:2f:
0a:62:df:b7:af:76:27:80:8b:bd:9c:bb:dc:85:23:2e:09:93:
22:0c:92:fb:bf:3e:02:77:6d:10:2f:6e:39:bd:1c:28:f8:3d:
42:d2:8f:0b:c4:2b:f3:dd:dd:e0:d2:d9:a1:82:45:85:c1:e4:
e4:45:7f:7e:93:42:91:15:0b:2d:30:aa:43:5d:c3:42:07:0b:
8d:18:09:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org