Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Xbg0gnkB16avLBAnFcBefT-ewzU.roa
File: Xbg0gnkB16avLBAnFcBefT-ewzU.roa (raw, json)
Hash identifier: mwKaQEZ4iXNyYQKACdckho0wQ+P7p1m41M7m+hnXb+A=
Subject key identifier: 5D:B8:34:82:79:01:D7:A6:AF:2C:10:27:15:C0:5E:7D:3F:9E:C3:35
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C5CC4BD3237BEEEE3171736F25655C11F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Xbg0gnkB16avLBAnFcBefT-ewzU.roa
Signing time: Tue 12 Dec 2023 06:44:06 +0000
ROA not before: Tue 12 Dec 2023 06:44:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57974
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Dec 2023 11:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5c:c4:bd:32:37:be:ee:e3:17:17:36:f2:56:55:c1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 12 06:44:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5db834827901d7a6af2c102715c05e7d3f9ec335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:08:d8:8a:f5:62:f2:e1:98:eb:d1:43:c7:
0b:2b:9b:40:d4:7d:a6:c2:75:85:dc:0a:e0:6b:a5:
6f:60:12:dd:31:80:d3:56:bb:38:53:b1:ce:6b:56:
96:0c:53:ae:eb:d2:7e:51:14:fb:b0:2b:ff:e3:30:
56:57:0d:9e:eb:54:30:25:cc:4e:ad:de:d4:fd:bf:
ef:b9:fd:2c:65:d7:ee:62:8d:67:c2:07:80:e8:70:
e9:bf:ab:02:34:c6:58:67:ef:1e:3e:e0:6b:78:9c:
ed:e6:ba:28:e3:89:f4:86:15:c2:cf:40:b6:8d:31:
a1:ba:7c:48:21:87:b6:fc:27:d2:4a:e7:8e:ef:79:
4f:05:d2:58:70:90:71:c4:d7:25:49:1c:1c:b0:38:
fc:67:e0:e8:44:e9:90:cb:ae:98:33:32:c8:92:c3:
c4:ad:41:9d:87:2f:55:c6:28:a4:77:cd:22:a7:95:
f1:1b:e7:9c:fa:b9:45:f8:28:54:90:e5:1c:94:31:
c0:94:ed:3a:c8:30:91:98:7c:1a:36:7a:85:94:a2:
42:bd:41:cc:f5:b3:0e:34:64:bd:33:bb:65:7a:4d:
e7:45:e3:2f:a1:c8:b1:22:d8:af:db:1c:c3:a9:13:
90:e0:33:11:1c:9c:fa:1a:54:50:06:1f:04:a3:4d:
e6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B8:34:82:79:01:D7:A6:AF:2C:10:27:15:C0:5E:7D:3F:9E:C3:35
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Xbg0gnkB16avLBAnFcBefT-ewzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0/24
62.72.181.0/24
62.72.188.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:73:8d:05:a1:c3:ba:62:86:09:ff:0d:e0:34:d2:ae:4a:7e:
31:06:ff:d8:eb:c8:a0:a5:2c:69:92:43:11:f8:07:e0:58:cb:
f5:e8:9d:a5:42:e3:d6:db:c1:22:e9:f9:13:8f:20:24:ba:36:
59:e5:a5:8e:af:39:36:c9:39:ca:dc:31:cf:3f:55:30:1a:67:
8b:84:4e:af:b2:c7:38:c6:36:85:27:34:f6:c3:ff:61:c5:78:
5b:eb:7c:9e:41:ae:c0:8a:02:64:8c:1b:3d:0e:1c:1a:93:d0:
68:8d:12:b5:6d:7c:2a:76:6b:8a:7a:7e:0d:6d:18:c3:41:51:
1e:41:4b:c8:52:9c:10:f6:d9:7d:4a:0e:e8:b3:d3:0e:96:56:
5f:54:64:4d:33:db:aa:0f:50:e8:dc:ef:75:31:9d:23:df:be:
9c:c0:b7:fd:90:c1:92:33:ca:c8:74:63:d3:ff:2f:6b:6a:3a:
cb:c8:4a:38:80:00:2d:7e:69:9e:ae:f3:e1:be:9b:e1:0c:b3:
54:88:c0:7f:85:87:b2:c3:0a:bc:cb:63:e9:93:73:e5:60:53:
18:9f:85:12:2d:81:3a:51:a2:c6:24:d1:c4:9d:2b:26:37:b2:
e7:67:03:82:0b:97:43:5e:ad:86:88:02:ee:b6:85:8d:03:36:
a3:fa:7a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org