Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/X6bYr84FJ_1q6B9KricJfbT9DP4.roa
File: X6bYr84FJ_1q6B9KricJfbT9DP4.roa (raw, json)
Hash identifier: 3G9BnBWkLkilEnRXbU9K3kKafeOAoOdy9Tjo/j569OM=
Subject key identifier: 5F:A6:D8:AF:CE:05:27:FD:6A:E8:1F:4A:AE:27:09:7D:B4:FD:0C:FE
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018945098BFC5F8DE26C2F3962A8B6CFEC73
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/X6bYr84FJ_1q6B9KricJfbT9DP4.roa
Signing time: Tue 11 Jul 2023 13:00:00 +0000
ROA not before: Tue 11 Jul 2023 13:00:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 62.72.191.0/24 maxlen: 24
81.21.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 06:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:45:09:8b:fc:5f:8d:e2:6c:2f:39:62:a8:b6:cf:ec:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jul 11 13:00:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fa6d8afce0527fd6ae81f4aae27097db4fd0cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:48:31:96:78:21:89:43:52:e3:71:53:80:b5:
d3:46:f6:63:1d:69:f5:ac:a8:0f:a8:1d:56:aa:54:
5b:b4:53:80:4d:12:82:60:3d:6d:58:7c:18:75:3a:
5a:85:ce:c4:51:51:88:57:19:24:21:be:3b:db:35:
05:57:dc:b9:aa:29:f9:73:ec:49:de:5c:09:a1:cc:
a7:21:b9:5a:4e:17:95:4d:29:e9:e0:42:17:1e:0d:
e5:05:1c:7a:d2:82:3f:d4:18:e1:64:89:32:59:6f:
ec:4b:36:a3:72:a5:7a:1f:70:35:f5:a3:ea:8b:19:
34:ee:95:4d:24:96:b6:b3:45:82:86:e3:58:4c:2b:
62:19:c5:a0:a1:f6:45:c9:b7:6b:09:f7:ec:1f:e9:
7b:b2:0f:73:2d:d3:97:0a:73:a9:be:e0:b4:be:d3:
c2:89:df:5d:56:d1:cc:f9:42:95:68:33:6a:26:ba:
88:7a:75:13:bb:e2:01:59:cc:4e:9d:58:a0:0c:4c:
ad:17:3c:1a:c6:4b:8b:05:de:d1:62:98:d3:e6:94:
b7:44:99:1f:ea:45:15:df:2f:8c:aa:f9:a4:1f:c8:
91:ca:b9:f3:3c:ca:e8:d9:0e:48:39:5c:0a:18:08:
2a:03:fc:4c:d8:ac:c7:44:a3:1f:26:8e:09:a6:2b:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A6:D8:AF:CE:05:27:FD:6A:E8:1F:4A:AE:27:09:7D:B4:FD:0C:FE
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/X6bYr84FJ_1q6B9KricJfbT9DP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.191.0/24
81.21.8.0/24
Signature Algorithm: sha256WithRSAEncryption
42:78:3d:e1:5b:6d:1c:de:41:08:35:a8:89:39:17:2e:03:6f:
bb:b7:b9:22:88:3b:8a:cd:b0:34:08:0b:b3:c0:3f:d5:b6:1c:
e4:c3:d0:7d:00:8e:fe:e1:b7:fc:1a:d9:8f:33:15:80:cf:cc:
aa:5d:ba:3f:a0:ba:30:c7:e5:bb:0a:fe:af:2b:1d:72:d4:5a:
f5:b1:1f:5a:ad:94:69:07:d2:6b:56:25:c8:5f:47:1e:41:4e:
59:b9:b3:aa:af:30:8f:85:56:0f:b9:ae:0b:08:e7:4e:3f:1c:
0b:af:a1:26:34:78:4e:cf:da:2c:d5:09:db:d4:a3:da:b3:68:
77:ec:eb:5e:89:c8:14:25:f7:33:e8:f3:ba:e8:b3:2c:06:23:
d8:05:a4:e7:1f:84:7b:e8:21:2f:ed:65:7c:af:f1:13:fa:5f:
f9:62:9a:3d:39:95:f8:0f:a2:8d:54:85:42:d9:32:16:47:d1:
af:4e:79:5a:23:58:e7:6d:c5:86:2f:cf:00:95:05:f2:7a:bf:
21:c9:09:ae:55:c4:dd:5d:1b:b7:fb:c4:ef:21:85:6b:c8:cb:
b4:32:26:23:96:00:e0:12:d4:11:31:00:5b:f7:3c:29:8d:a9:
41:65:4b:b4:51:5a:e8:88:b3:43:33:0f:40:b9:ab:51:32:b7:
33:53:9a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org