Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/V58RamzXLiwAoGiu9TsH-0QI9A4.roa
File: V58RamzXLiwAoGiu9TsH-0QI9A4.roa (raw, json)
Hash identifier: maZnNN6T4yN0WalKp+9ta+GwR5S/FsfGm1/+iysHPNM=
Subject key identifier: 57:9F:11:6A:6C:D7:2E:2C:00:A0:68:AE:F5:3B:07:FB:44:08:F4:0E
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CF21AF0689232335717A3719D3552D949
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/V58RamzXLiwAoGiu9TsH-0QI9A4.roa
Signing time: Wed 10 Jan 2024 06:41:40 +0000
ROA not before: Wed 10 Jan 2024 06:41:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 62.72.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 10:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:1a:f0:68:92:32:33:57:17:a3:71:9d:35:52:d9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 10 06:41:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=579f116a6cd72e2c00a068aef53b07fb4408f40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:03:da:b2:90:ac:57:8c:a8:2b:0d:10:96:
56:52:30:01:f7:cb:ef:ae:ff:42:6c:6c:95:cd:68:
c2:98:85:44:93:9c:47:0e:02:c5:f6:77:c2:0f:05:
ff:14:6a:ea:75:a2:98:f4:ba:f1:70:20:c3:24:22:
83:85:e0:e7:bb:07:ea:3d:e7:2c:38:bb:99:12:9e:
62:1c:14:5b:4f:12:42:8c:36:67:49:a4:74:df:e9:
d4:d0:84:aa:f9:e6:14:90:82:b3:8a:d4:25:a1:fb:
e7:2b:07:2b:a6:ae:ff:47:10:47:49:a5:dc:39:71:
08:d3:a8:c5:e7:d8:86:e4:e4:bc:61:25:a4:62:44:
e2:dd:be:63:1c:f0:e4:81:7b:c2:19:87:7c:56:78:
6d:3b:4c:a2:07:3a:91:67:ec:7b:1d:3e:83:2c:2b:
53:3c:e7:2e:96:01:fa:c7:42:3c:b5:27:47:8e:63:
8f:ed:8c:3c:66:e9:c7:88:d8:16:40:72:91:1e:20:
b9:2b:f6:74:9c:29:24:83:4a:48:44:f0:34:9d:0d:
71:a7:04:ea:75:f1:49:1b:f7:65:f4:26:63:90:3c:
43:30:7e:db:45:73:fd:11:63:fd:e9:d8:af:71:d8:
c8:a4:6d:e6:21:2f:e3:54:22:d0:55:e8:f6:85:83:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9F:11:6A:6C:D7:2E:2C:00:A0:68:AE:F5:3B:07:FB:44:08:F4:0E
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/V58RamzXLiwAoGiu9TsH-0QI9A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.173.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ca:4f:f2:51:d3:25:9b:94:51:e5:a3:14:1f:64:d8:2d:c9:
bb:9d:38:96:72:c3:bc:49:23:62:09:58:c6:65:70:14:45:7f:
a6:d3:e5:25:9e:b5:5f:39:b6:e8:1f:ed:41:7f:14:be:78:ba:
26:1d:6a:86:d6:ca:bb:26:da:36:fb:4c:70:d0:c1:ca:89:bc:
c7:78:6d:67:ef:12:bc:36:86:af:b2:68:25:58:dd:49:1b:f2:
e7:9d:f3:da:3a:67:46:45:b2:08:6d:b0:0d:3f:fa:79:3b:db:
3b:ab:37:2f:47:a6:52:32:b2:b4:60:72:79:25:1f:c0:8f:14:
75:0d:9d:73:58:47:21:d8:06:29:7a:86:52:da:c4:e1:92:82:
0d:c3:df:be:d4:20:ee:b1:20:cf:ea:3b:91:02:2e:b9:7b:95:
b1:f8:66:5a:0c:49:f2:66:f4:1c:0e:b3:31:7c:f3:e6:48:e9:
41:6c:a4:d8:ad:d0:73:97:0d:2e:97:5d:44:c1:40:63:3f:a3:
35:f5:fe:02:88:79:44:ad:5b:8e:f1:d6:3e:77:69:6c:24:98:
c4:9c:9c:26:32:0a:d9:41:ec:6d:fe:51:4e:35:6e:50:4a:41:
00:4e:56:14:fc:20:0e:1c:97:ba:f6:2e:34:1c:ed:d3:07:9c:
b2:30:6d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org