Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/WvcLlXrSre8XcQ0p-flf1L7GAv0.roa
File: WvcLlXrSre8XcQ0p-flf1L7GAv0.roa (raw, json)
Hash identifier: ClBRCtzumT8tj1JIzIEomjsr9PlGGWcsYdOO9Vks1j0=
Subject key identifier: 5A:F7:0B:95:7A:D2:AD:EF:17:71:0D:29:F9:F9:5F:D4:BE:C6:02:FD
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018A845928E65E6F707A09C4E89B3B7D40F4
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/WvcLlXrSre8XcQ0p-flf1L7GAv0.roa
Signing time: Mon 11 Sep 2023 13:05:50 +0000
ROA not before: Mon 11 Sep 2023 13:05:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 62.72.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Dec 2023 06:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:84:59:28:e6:5e:6f:70:7a:09:c4:e8:9b:3b:7d:40:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 11 13:05:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5af70b957ad2adef17710d29f9f95fd4bec602fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a9:a1:d5:0d:8b:61:32:bc:bb:e3:a8:67:11:
74:c4:2e:cb:d3:cf:c8:92:b5:04:60:98:f4:24:c9:
c9:66:b1:c9:f8:3a:a8:9a:80:27:14:2c:5d:3a:bd:
7c:8d:57:23:c0:2f:b9:7c:ec:fa:c6:12:b7:24:35:
a6:f4:c7:75:1b:41:71:1d:48:27:f8:f0:a9:88:70:
b5:1c:68:f8:ab:0a:fd:09:1e:80:19:b7:19:dc:77:
ee:13:6b:88:af:7e:07:f0:a9:08:79:91:58:50:da:
78:a8:b4:cf:38:4e:49:5b:c4:f5:bc:b2:94:57:eb:
a4:fc:38:e1:b1:db:c9:8d:3e:ff:45:f4:5c:94:a7:
c5:84:dc:91:19:95:25:07:7b:29:39:c8:ff:8d:a7:
6c:65:91:2f:30:f7:a3:0e:94:10:2a:97:a4:de:ff:
6a:53:2d:a5:94:03:36:b6:f3:36:58:37:36:e8:63:
7e:8b:bc:59:77:ad:2e:be:e3:a6:4e:00:66:4d:a3:
d9:35:bb:7a:bb:d0:91:ce:dd:cf:cb:0c:7c:89:1e:
52:e4:4f:84:1a:bd:88:8f:3e:70:35:34:00:1b:a5:
90:ac:90:6d:65:3f:bd:54:b4:96:f1:17:d9:52:d4:
65:73:e0:42:0e:ba:cb:7d:19:f1:f7:ae:7c:64:93:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F7:0B:95:7A:D2:AD:EF:17:71:0D:29:F9:F9:5F:D4:BE:C6:02:FD
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/WvcLlXrSre8XcQ0p-flf1L7GAv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0/24
Signature Algorithm: sha256WithRSAEncryption
94:64:4f:5e:f8:9c:d5:92:6b:ba:22:84:96:13:08:6f:2a:a9:
d8:77:ad:b9:c2:88:ab:fc:8b:16:32:ef:71:09:26:49:75:15:
f8:cb:d7:cb:29:dd:c0:09:49:f3:4b:3f:7d:d1:90:06:ee:83:
51:f8:27:77:42:87:c6:92:11:df:a4:e3:3d:1b:35:88:ee:70:
15:85:62:e8:8b:91:36:c2:f8:8a:e3:86:dc:40:c9:41:64:a0:
cf:1b:58:20:27:44:bd:00:cf:6d:ec:dc:21:8c:d4:ea:a7:10:
16:e9:2a:2e:f3:06:b3:3c:b6:9d:55:19:77:88:63:3a:ef:7c:
dc:45:1f:86:95:59:37:04:bc:1a:d2:ae:0b:9b:65:83:50:38:
b1:f9:fa:d3:10:db:fa:32:f5:4e:18:35:19:75:3c:7c:25:9e:
72:5a:29:c7:0b:48:7e:3b:97:8d:f9:7e:6f:ee:b4:c1:c8:e4:
35:41:ff:1f:c1:cc:ed:81:b7:a9:45:f2:46:3d:db:8f:03:b6:
41:ac:c5:fb:31:a3:a2:a2:3a:a8:cf:57:3e:92:6e:ba:15:41:
ff:f4:52:5a:58:57:3a:ba:b4:de:df:dd:7c:13:6f:a7:ce:43:
62:55:6c:25:80:4f:80:4d:09:ce:f6:f7:3e:74:77:cb:b0:4c:
2b:de:0f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org