Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/YLBVXZ_tqapV3M5BNihbW1xwf6E.roa
File: YLBVXZ_tqapV3M5BNihbW1xwf6E.roa (raw, json)
Hash identifier: 0voEIetSBf9CYWF4dzoGtVv3OpQhbf2eKWnh1nzv0pA=
Subject key identifier: 60:B0:55:5D:9F:ED:A9:AA:55:DC:CE:41:36:28:5B:5B:5C:70:7F:A1
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B79E1A3FF5DE5C1BAF2B698D4F5408
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/YLBVXZ_tqapV3M5BNihbW1xwf6E.roa
Signing time: Mon 01 Jan 2024 20:29:31 +0000
ROA not before: Mon 01 Jan 2024 20:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 62.72.167.0/24 maxlen: 24
81.21.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 14:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:9e:1a:3f:f5:de:5c:1b:af:2b:69:8d:4f:54:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60b0555d9feda9aa55dcce4136285b5b5c707fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:68:56:9f:97:fd:70:10:82:f1:cf:59:63:29:
8a:f8:d0:cf:20:2a:76:ea:3f:96:81:7e:de:ad:3e:
59:37:31:e5:f9:0a:07:9d:5b:fc:4d:5f:f4:ac:9a:
4c:f5:64:5c:91:8c:0d:35:2b:c3:fc:51:69:6e:3d:
0b:17:dc:a3:c8:0a:0b:fa:95:a5:6d:21:0f:5a:0c:
29:7c:fd:0c:1a:7b:2a:c9:05:48:78:ad:0f:ab:01:
a0:bf:85:b4:bf:ae:bb:80:ca:b2:11:eb:35:ed:ac:
9a:32:a2:06:ed:d7:87:20:2b:40:10:5d:0b:4a:34:
87:1b:65:aa:4a:bd:7d:99:20:89:ec:4d:f3:33:57:
44:ef:d6:f6:af:59:5e:0b:f4:94:7a:27:4f:c8:c1:
92:45:4e:2d:6a:ff:93:f1:82:c2:15:88:5a:cb:85:
a8:12:26:37:19:0a:ab:2d:8b:10:bb:9f:20:0f:31:
3d:70:c9:2a:79:3e:b5:79:ee:f0:82:07:02:24:56:
56:5c:bc:b3:43:e8:68:e2:56:92:7a:d2:f2:ca:46:
22:03:3e:ba:2b:23:65:e5:73:c6:9b:78:0c:19:24:
2b:44:34:c5:f9:1e:15:b1:1b:13:74:70:0d:4d:68:
06:7a:78:5d:80:dc:c7:0e:ad:78:43:c4:16:20:c9:
00:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B0:55:5D:9F:ED:A9:AA:55:DC:CE:41:36:28:5B:5B:5C:70:7F:A1
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/YLBVXZ_tqapV3M5BNihbW1xwf6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.167.0/24
81.21.12.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ea:57:01:fa:82:0a:a3:48:20:79:12:b4:54:8c:4b:18:92:
cd:82:07:70:64:99:49:c0:dd:df:05:51:56:ff:10:bc:d2:21:
cc:56:30:e6:99:01:cf:ff:7f:57:28:8c:05:4b:47:3f:c5:67:
48:1d:ca:ca:3d:00:5a:e3:f9:c7:2b:b1:ef:49:a5:11:17:85:
68:cb:40:19:1b:cc:f0:60:07:0b:6f:a6:fa:82:85:13:c0:1e:
9a:e3:b3:f5:d6:50:5b:03:56:ce:b8:c3:94:58:74:ea:35:f7:
9b:55:2d:8b:94:53:9a:bb:9b:9e:9e:f0:b4:13:7a:df:ec:9a:
08:ef:68:76:f9:45:86:9c:89:62:f1:d4:c4:54:30:bf:61:d5:
8a:1e:91:16:f0:c5:8a:d0:44:b6:25:34:bd:43:e6:96:24:69:
57:18:df:f9:16:1b:22:f4:7a:49:fc:60:5e:ef:c8:f8:f1:68:
af:6c:3d:42:77:c6:ae:13:db:c0:e9:d7:f4:93:4f:68:d1:ff:
e0:7c:3a:d7:dc:80:a8:79:3d:98:02:2f:ee:4d:25:6a:ff:83:
c4:9b:00:06:a1:5a:2a:19:32:81:2b:91:45:d7:74:6a:b5:0f:
c6:60:44:f7:1a:4e:b5:92:6e:69:2c:b1:f6:1e:1a:cb:bd:08:
b8:3f:ab:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org