Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZfNcNdZfPXMABSQQFFT0yOu10zU.roa
File: ZfNcNdZfPXMABSQQFFT0yOu10zU.roa (raw, json)
Hash identifier: bJjwJhRUZ+sXBuGrw7UhvcyX7Hq2xwFqBGGbMmujoto=
Subject key identifier: 65:F3:5C:35:D6:5F:3D:73:00:05:24:10:14:54:F4:C8:EB:B5:D3:35
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B79CEAFF7DBCE2AF745915C77C3F6A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZfNcNdZfPXMABSQQFFT0yOu10zU.roa
Signing time: Mon 01 Jan 2024 20:29:31 +0000
ROA not before: Mon 01 Jan 2024 20:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 62.72.182.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 09:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:9c:ea:ff:7d:bc:e2:af:74:59:15:c7:7c:3f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65f35c35d65f3d73000524101454f4c8ebb5d335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:94:ab:fb:e6:8f:2a:43:4e:47:af:2c:f4:
25:b3:80:61:2c:90:f1:1d:f8:5e:71:03:94:4c:77:
2d:f9:db:be:be:5c:10:1c:1d:a5:cf:f6:52:b8:d4:
30:7a:6b:72:4e:ee:08:43:9b:ae:92:14:c2:6b:97:
ea:ae:dd:df:ef:57:03:0e:a1:54:b3:c9:b8:65:c5:
29:ed:d9:68:f5:ff:7a:a5:76:52:8c:d4:70:76:5b:
db:5b:8d:77:b8:44:bb:49:65:2c:48:d8:58:ee:21:
91:52:e1:06:ec:5e:af:a5:24:8b:33:34:04:79:27:
ff:86:b8:9c:c0:b1:5c:4a:db:97:08:25:64:a7:4e:
4a:c2:dd:c9:e9:60:9b:f4:a0:8f:e2:73:fa:0b:7d:
fa:2d:0a:93:ff:8a:82:6b:58:9e:d5:87:24:43:f9:
f1:b6:3b:22:27:09:ad:70:78:12:09:05:5c:07:df:
c1:98:7f:8c:4d:a9:0f:5c:9a:9a:1f:ce:60:10:28:
e1:b7:83:0e:7d:41:82:0f:7e:53:79:85:3d:72:63:
17:b4:22:e5:d7:2e:72:12:08:5c:83:82:c6:f1:1c:
ca:f1:0e:13:2b:96:9f:a7:10:31:a5:f6:05:ee:69:
e9:54:fe:5c:14:1e:67:93:8a:57:6e:1d:8d:30:4e:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F3:5C:35:D6:5F:3D:73:00:05:24:10:14:54:F4:C8:EB:B5:D3:35
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZfNcNdZfPXMABSQQFFT0yOu10zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.181.0-62.72.182.255
62.72.188.0/24
62.72.191.0/24
81.21.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:02:e2:b0:9a:d2:35:a7:b2:c3:1e:a9:5a:97:bb:81:e3:1a:
cf:e9:49:33:40:7b:45:4e:79:02:1f:e3:92:ed:e8:68:f8:9f:
76:e4:44:f5:d1:97:3c:49:3a:33:4b:c3:6a:43:25:68:55:ad:
ab:b0:06:42:f5:0a:e1:3b:81:c7:4f:e8:32:77:49:ba:51:09:
0c:52:1f:0c:e9:8f:64:35:9d:eb:8e:ab:85:fb:da:6a:e6:ff:
b7:38:d8:bb:ec:29:d1:71:dd:27:f9:32:b7:e4:ab:24:66:b3:
d7:7a:46:62:40:e1:7b:9d:0e:fd:55:80:ff:62:e6:0e:59:d7:
b6:37:46:5e:bf:cc:23:2a:8f:0e:49:59:6a:2d:92:4b:1f:aa:
25:af:7e:54:1e:bd:7e:c3:bc:fd:8b:27:76:00:bf:d4:cd:3b:
9d:72:14:3e:2c:f9:19:f7:0c:00:53:fa:27:82:7c:79:c7:5b:
ef:50:93:92:5a:51:6f:b5:e0:bb:a8:04:e9:83:36:bb:7d:3e:
de:51:4d:3e:d4:d0:40:57:b0:8d:7c:73:de:3f:b3:53:98:51:
c8:a2:8b:07:91:5e:d0:64:15:28:66:2b:53:69:17:28:2c:79:
aa:3b:85:d0:20:36:a6:94:06:88:0e:ae:92:51:16:22:95:f9:
b8:3a:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org