Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Y5CE4RVZct3ULwmtN12PmakM14c.roa
File: Y5CE4RVZct3ULwmtN12PmakM14c.roa (raw, json)
Hash identifier: lheDdBP7Ox8R3BS8gIaBHoVhQcMMmpAV+OuOcXQz2BU=
Subject key identifier: 63:90:84:E1:15:59:72:DD:D4:2F:09:AD:37:5D:8F:99:A9:0C:D7:87
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01856F4B8000746A450EC8F8E13F42C23A5C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Y5CE4RVZct3ULwmtN12PmakM14c.roa
Signing time: Sun 01 Jan 2023 21:44:56 +0000
ROA not before: Sun 01 Jan 2023 21:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 62.72.188.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jan 2023 18:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:80:00:74:6a:45:0e:c8:f8:e1:3f:42:c2:3a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 21:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=639084e1155972ddd42f09ad375d8f99a90cd787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:07:02:52:98:f6:1f:01:d2:4a:37:72:c3:
16:80:6b:af:6a:ed:6c:f2:89:cf:ad:d5:b3:3f:a2:
47:97:66:91:d9:a2:24:9e:7a:2d:6f:b7:15:c3:0b:
d2:dc:14:68:86:57:8d:08:43:ae:2b:8b:62:f0:3f:
19:9a:45:42:ae:4b:08:f8:e2:6c:dd:d8:f7:45:64:
0f:aa:7f:b8:6d:bd:25:99:a2:0d:8f:76:05:26:3d:
42:96:e7:14:a8:0b:8d:c4:81:b9:a4:ce:1d:0c:6b:
4f:0f:12:8c:44:72:36:58:a6:8c:6b:05:13:63:b8:
e6:4b:8e:01:f2:8c:a8:a6:eb:ca:07:fd:01:90:a4:
20:33:48:dc:7e:97:97:75:de:9b:fa:01:ea:f5:b1:
41:ab:e9:75:7d:17:24:c6:5f:4a:44:2f:bc:d6:dd:
d9:df:1b:d4:01:a4:93:d1:91:d0:49:5a:19:ab:d4:
70:f0:5f:ef:3e:f2:aa:8c:10:3d:23:fa:ec:e2:51:
e8:00:68:d5:98:4f:59:87:39:cc:9a:34:4f:c9:1b:
75:c0:ec:d0:1b:92:6e:c9:9f:84:1a:07:e8:13:a8:
1f:b9:bf:b7:f7:ad:01:17:7b:73:2a:9c:c1:dd:5a:
d2:1b:55:08:89:70:17:40:29:0a:c2:ca:c7:2b:96:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:90:84:E1:15:59:72:DD:D4:2F:09:AD:37:5D:8F:99:A9:0C:D7:87
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Y5CE4RVZct3ULwmtN12PmakM14c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.188.0/24
62.72.191.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:6c:cc:09:76:e8:94:7b:cc:04:1f:26:93:70:2c:cc:be:dd:
25:55:2f:8f:df:b0:42:db:ac:f6:fa:5a:df:93:37:1f:1b:82:
87:80:d4:75:a5:c7:7c:ce:dd:78:a0:9e:74:85:2c:81:77:1c:
4d:85:21:8f:4f:aa:9f:f5:fe:0b:49:24:8b:8e:7d:5c:45:dc:
4d:cb:0b:e2:d4:be:f1:90:77:14:f8:88:5c:45:b5:f2:2a:ba:
86:b9:2d:13:15:c6:7c:e9:7e:33:17:70:b3:3f:9a:62:18:24:
a6:d7:38:70:eb:2a:c1:4c:3a:68:5f:11:f2:c4:3e:db:8f:cb:
0c:45:1b:e0:e1:cf:66:f9:a6:bc:bd:b7:6f:1a:ad:27:04:4b:
e8:14:d0:5f:23:b4:99:d7:87:c2:c6:69:f2:5e:bf:f3:43:57:
07:cc:e4:76:26:3a:1f:e8:70:6c:60:ec:6b:3b:e9:e7:ce:28:
c2:b9:5f:5c:f3:cf:54:43:cc:3e:d8:32:82:43:d0:b6:62:e4:
a5:ac:8f:0b:f4:8e:29:a5:69:70:11:a6:b5:d1:2a:f5:fd:a4:
75:e5:fd:2d:05:b1:c6:ac:e7:30:2e:cb:14:a6:65:fe:dd:29:
ef:bb:17:24:6d:60:58:71:86:46:c8:9e:02:59:31:8e:99:c4:
88:64:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org