Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/YwrxFLgCeHg_zVuk-eQP4ZNZRNI.roa
File: YwrxFLgCeHg_zVuk-eQP4ZNZRNI.roa (raw, json)
Hash identifier: 5HiSdEaBM/dEHDzgySqDIrpeJSF7B37Esj91YSApWGo=
Subject key identifier: 63:0A:F1:14:B8:02:78:78:3F:CD:5B:A4:F9:E4:0F:E1:93:59:44:D2
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CCEA12E19D26D162FFDD2478F3C5013B1
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/YwrxFLgCeHg_zVuk-eQP4ZNZRNI.roa
Signing time: Wed 03 Jan 2024 09:21:58 +0000
ROA not before: Wed 03 Jan 2024 09:21:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 62.72.181.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 08:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:a1:2e:19:d2:6d:16:2f:fd:d2:47:8f:3c:50:13:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 3 09:21:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=630af114b80278783fcd5ba4f9e40fe1935944d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:fe:06:7f:58:3d:0e:d9:80:93:a8:96:c0:
ee:3e:e7:55:43:9a:f0:93:cd:8e:18:b4:42:61:7d:
74:e5:f5:f4:0e:6f:25:20:27:01:33:52:20:42:db:
6f:2b:d6:0b:cb:25:ec:02:fe:3a:63:32:ad:91:32:
df:bb:62:cf:ad:ca:19:24:1f:e0:8c:7b:dd:61:f0:
d4:75:9e:a1:c9:0d:bd:1f:df:4a:59:a6:6a:53:eb:
cd:72:43:f1:1d:4e:70:df:f0:4f:c3:b6:43:a3:7b:
dc:3e:14:d6:5c:e8:16:6c:a4:c1:55:c4:76:76:98:
1e:a1:11:cb:51:11:8a:cf:cd:c4:cf:5f:ce:2e:73:
9f:79:34:c7:3c:65:38:c5:f9:32:52:d4:13:d9:18:
60:ac:ec:cb:27:fb:d6:78:13:0e:64:5b:e1:a1:a2:
5e:7e:c6:0f:93:f2:cf:eb:23:a4:ae:bb:0d:17:00:
0e:4f:a9:e0:8f:2c:e5:82:86:3a:64:01:3e:9c:01:
a9:ab:85:37:86:03:9c:88:58:4e:5c:7e:8b:4d:02:
88:df:10:03:8a:08:ef:28:fb:47:11:58:63:a0:1d:
47:55:2c:4a:f4:80:62:98:c0:a9:4f:55:b9:d7:b8:
42:a6:47:da:07:6f:be:e9:c4:e5:b9:45:29:c0:31:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:F1:14:B8:02:78:78:3F:CD:5B:A4:F9:E4:0F:E1:93:59:44:D2
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/YwrxFLgCeHg_zVuk-eQP4ZNZRNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.181.0/24
62.72.188.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c4:89:bd:6f:f4:3c:52:f2:32:95:b2:86:e8:0f:54:8b:17:
f5:73:61:96:e3:2a:5e:88:83:af:f0:17:67:c9:91:54:ef:e1:
2e:f1:63:28:25:2a:89:8c:aa:f7:6e:e1:ba:ad:61:41:25:e5:
60:ac:58:78:8f:52:8b:17:a5:a7:79:56:22:71:2b:5c:bb:a5:
33:d9:9f:98:57:c5:3f:d8:af:86:ff:66:58:3b:ab:b3:1a:5f:
64:f7:9b:d9:c4:da:bb:88:dd:29:b2:63:95:e0:aa:6f:8f:bd:
d7:28:3d:ef:b8:4d:ef:d7:7a:89:56:32:a8:1d:19:0c:30:ab:
c5:9a:d8:66:d6:d1:7e:c9:6d:12:8c:1a:3b:47:7d:ae:14:69:
cf:c0:84:b2:52:82:e1:6f:e3:f4:b8:22:83:b3:ce:8d:08:39:
10:b8:7f:0b:32:0f:95:ba:27:54:0d:44:27:6d:4b:a9:9e:8b:
82:94:79:65:fe:c8:6e:d0:c8:87:c7:5f:84:26:bc:22:84:ef:
5e:5e:ea:d2:84:92:fa:e0:50:d6:67:28:2f:61:6c:25:53:32:
9a:39:e8:b3:b0:21:84:ff:50:cb:8a:2c:fa:9c:0a:3e:12:d4:
e6:93:af:91:60:b2:a0:c1:45:56:55:2c:0e:26:45:69:ea:8c:
bd:48:ec:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org