Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Z3YUYmCs0W6MYLiHXJ9FGEyKpBs.roa
File: Z3YUYmCs0W6MYLiHXJ9FGEyKpBs.roa (raw, json)
Hash identifier: +dVE8qjQ6z2/klSns2Q2QDv0fwPIBK7oLQaX0SnBVOQ=
Subject key identifier: 67:76:14:62:60:AC:D1:6E:8C:60:B8:87:5C:9F:45:18:4C:8A:A4:1B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C339A56C144FC24E3CD33112612708797
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Z3YUYmCs0W6MYLiHXJ9FGEyKpBs.roa
Signing time: Mon 04 Dec 2023 06:53:21 +0000
ROA not before: Mon 04 Dec 2023 06:53:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 09:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:9a:56:c1:44:fc:24:e3:cd:33:11:26:12:70:87:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 4 06:53:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6776146260acd16e8c60b8875c9f45184c8aa41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:10:14:c0:1a:35:37:8a:7c:fa:b2:76:2c:
2e:4b:8e:b5:78:d8:de:22:09:7f:1e:08:bd:7d:6e:
58:56:a6:bd:46:2a:78:90:f2:71:2c:dc:02:ba:70:
dc:03:f6:ff:fb:ed:d3:13:3a:8c:37:a2:44:6f:4d:
26:03:19:3b:81:2f:e2:13:32:c2:ec:f0:03:60:64:
93:7d:ec:37:d8:a9:fa:d8:46:1f:15:a9:56:44:ae:
98:ab:12:ae:18:46:13:0d:c0:55:3d:2e:fc:26:c0:
5a:c7:7d:5a:7d:2d:08:a8:db:d3:62:14:45:71:36:
db:ce:2e:b9:d5:75:68:db:89:70:94:8d:bb:b4:b7:
35:78:1c:f5:ea:05:15:7f:ab:55:b3:37:fa:52:51:
b2:38:9b:c0:69:b1:7d:c5:8c:76:23:13:0b:2a:0e:
06:72:40:7c:bc:3f:d6:4e:90:59:9e:c7:bd:2e:3f:
dd:4b:b5:ea:29:97:03:02:2e:f2:d9:c2:fd:cf:45:
d9:73:4b:3d:17:36:10:cf:a7:c2:3e:a9:48:6a:05:
31:b8:29:4b:b7:b3:e3:24:b6:de:de:30:c1:84:79:
ba:5a:5b:ae:88:a9:86:65:a7:26:83:81:69:0c:0e:
d0:88:ae:3f:52:ac:a5:e8:5b:6e:92:5d:e5:29:3f:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:76:14:62:60:AC:D1:6E:8C:60:B8:87:5C:9F:45:18:4C:8A:A4:1B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Z3YUYmCs0W6MYLiHXJ9FGEyKpBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.182.0/24
62.72.191.0/24
81.21.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:0d:5e:9e:2a:b0:9d:5b:6f:22:2b:40:2f:bf:be:70:fc:24:
b4:fe:0a:3b:88:01:03:38:1e:b1:7d:17:38:d7:00:d9:20:7f:
4a:49:41:fa:7a:f4:27:b5:be:9e:08:a3:6e:57:5f:ee:2c:cc:
28:4c:5d:2a:46:da:28:92:6c:bc:1f:4a:92:dc:57:99:84:f8:
9b:70:42:ef:24:eb:3c:97:df:4f:8a:4d:a8:be:e9:33:7c:21:
27:94:5b:5c:75:d1:df:2a:8b:8a:b4:1c:98:98:0d:ce:65:3c:
ef:19:96:dc:f7:43:9a:07:14:37:d2:15:4b:8a:9b:ff:2b:18:
08:bf:89:7c:9f:23:75:e6:98:d4:74:76:6d:1b:72:a8:7f:60:
8a:9e:03:75:36:ee:fa:51:7e:1f:6e:ba:f6:90:af:55:e4:49:
67:1f:35:20:6f:c9:ca:aa:ac:8e:29:0a:ff:ee:d8:4e:e5:51:
bd:a6:d2:fe:11:f5:2f:6e:8c:d9:02:9c:0b:df:79:a8:97:cb:
f3:2c:f7:ff:b7:2b:ee:7c:fe:0c:ad:19:c9:a5:7a:04:eb:90:
aa:0b:83:f0:03:82:2b:e3:31:60:27:b1:92:8f:d8:6b:69:a8:
44:b8:1c:3e:19:e7:d7:8b:f3:fd:6b:a6:87:b3:0c:5f:e6:51:
0f:07:d6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org