Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VDOJciDXyy8RAqeiZMvR6nLqx4k.roa
File: VDOJciDXyy8RAqeiZMvR6nLqx4k.roa (raw, json)
Hash identifier: qfHXkjeTJ9AbhpO1O7uOEKW3pCo4Y3HWhkMaqtAVd9E=
Subject key identifier: 54:33:89:72:20:D7:CB:2F:11:02:A7:A2:64:CB:D1:EA:72:EA:C7:89
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018BD73ACF22CE44D0A1B99019E1DB6AD4D9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VDOJciDXyy8RAqeiZMvR6nLqx4k.roa
Signing time: Thu 16 Nov 2023 08:23:57 +0000
ROA not before: Thu 16 Nov 2023 08:23:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24768
IP address blocks: 62.72.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 18:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:3a:cf:22:ce:44:d0:a1:b9:90:19:e1:db:6a:d4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 16 08:23:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5433897220d7cb2f1102a7a264cbd1ea72eac789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:92:bd:8b:da:9a:c3:9a:21:6b:0b:b6:db:
c0:92:40:c9:cb:67:6d:50:45:9d:32:64:58:79:8d:
86:47:3c:e9:6c:72:53:b1:44:ed:69:c9:69:8d:a4:
56:76:83:d1:0c:f3:6d:fd:8c:dc:c4:66:60:b1:d5:
29:00:d0:32:98:c8:30:3d:25:bf:d1:a3:13:ba:6f:
ea:a9:be:56:50:bb:b3:bd:dc:54:fb:f5:b0:77:1a:
f3:f6:53:f7:56:a2:e4:a6:da:74:0f:cb:cf:2c:73:
ad:5d:20:80:89:f8:0e:d0:4a:02:ba:ce:95:ca:49:
d5:e3:d3:28:e1:34:43:d9:68:32:8a:d1:ee:e0:31:
9a:c4:fc:89:c1:9c:5d:d3:ee:60:ca:c2:ca:c3:31:
16:ec:0d:c4:0e:f7:ef:51:f6:9e:d6:37:f9:75:b4:
7d:06:49:be:39:3e:33:03:9e:78:00:4c:a7:a6:0f:
c8:f2:61:b6:d7:d6:31:bb:0a:a3:36:d8:46:4c:68:
68:18:6c:c2:7e:cb:9c:7e:19:5e:a4:15:95:7c:69:
f2:87:b5:e1:80:a0:33:dc:16:cf:6f:d6:fb:db:40:
02:f9:1d:96:e5:69:99:27:40:ec:0a:e9:4d:7c:55:
f7:c8:78:83:97:8a:59:bc:3f:16:63:cf:88:eb:72:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:33:89:72:20:D7:CB:2F:11:02:A7:A2:64:CB:D1:EA:72:EA:C7:89
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VDOJciDXyy8RAqeiZMvR6nLqx4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.185.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ac:fb:81:fb:9d:f8:4e:3a:df:02:84:79:4b:52:86:73:54:
a1:41:6f:db:82:3f:56:91:61:fa:40:cb:b5:33:20:74:9e:94:
2c:3c:be:53:8e:df:e0:5f:cf:06:05:13:8a:a5:6f:4b:f2:9e:
11:be:cc:e2:7e:ab:2c:11:2a:86:90:ef:27:de:66:73:98:8a:
90:43:b3:94:c1:43:a5:60:b0:eb:1c:89:02:8e:2d:03:f7:9d:
93:2e:d2:16:3a:7e:33:2b:c2:1c:1e:23:56:41:4f:34:37:c4:
c3:6f:cf:09:cd:37:12:17:e6:66:98:aa:12:e5:b1:26:62:1d:
e6:7c:94:80:f9:65:5c:30:cb:81:57:2a:95:00:33:ce:89:9e:
d5:f3:ec:4b:e9:b1:72:f6:da:5a:70:fa:2d:0d:62:8c:68:dd:
55:38:d3:59:b2:f0:ee:1a:c8:9e:0d:5d:d7:3f:7f:d2:24:c6:
68:f4:0e:69:d7:b7:22:40:b0:f6:96:7b:63:eb:31:3d:f1:c1:
ed:b1:1b:01:80:ef:eb:e5:a8:dd:cf:29:8c:be:6f:8a:22:0d:
4b:df:a3:06:75:78:cc:6e:9c:a8:04:b2:37:61:b1:cf:c9:6c:
15:64:cc:71:48:cc:37:13:10:70:95:fe:03:f6:0a:21:c6:24:
9b:11:c5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org