Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_r4_Z5JFvlvGPYvoK_jAA2XHZ6k.roa
File: _r4_Z5JFvlvGPYvoK_jAA2XHZ6k.roa (raw, json)
Hash identifier: 8neOoz1rZM18PcdtQCXP6eKOGaBFtxkMBRktQEVtwHc=
Subject key identifier: FE:BE:3F:67:92:45:BE:5B:C6:3D:8B:E8:2B:F8:C0:03:65:C7:67:A9
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C8750DD19B774DD795D1898A903C7774A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_r4_Z5JFvlvGPYvoK_jAA2XHZ6k.roa
Signing time: Wed 20 Dec 2023 13:01:12 +0000
ROA not before: Wed 20 Dec 2023 13:01:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396356
IP address blocks: 62.72.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:50:dd:19:b7:74:dd:79:5d:18:98:a9:03:c7:77:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 20 13:01:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=febe3f679245be5bc63d8be82bf8c00365c767a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:56:8a:81:e0:45:ef:64:d4:e4:3a:a8:b2:62:
ae:d8:e0:38:0f:99:2c:c4:8a:d0:3a:6a:b9:15:91:
b0:43:f8:e1:ac:63:1b:89:b9:04:ee:6a:24:8d:3c:
02:95:91:93:38:cd:1d:5d:be:61:b3:1a:f7:6e:18:
72:f0:84:a5:e3:6d:f6:6b:5c:66:9f:68:ae:48:51:
01:6c:08:62:2e:6e:d5:e5:94:7b:73:f9:d3:0a:0f:
52:7a:82:4f:8c:5e:fc:45:6d:75:e6:27:a0:87:85:
7f:10:1f:fd:76:5b:b0:0f:a5:39:8e:16:99:ad:04:
a6:c6:74:c0:af:8a:cd:af:3f:e3:ba:34:fb:7f:46:
ab:e1:51:3c:4f:b1:bb:a0:46:ad:7f:88:8e:de:3a:
d5:c7:8b:6c:30:16:77:d0:5b:69:0e:e4:c4:23:55:
ca:d3:0a:e2:6b:ae:4c:39:9e:ff:39:eb:4b:62:f0:
d3:11:8a:6d:bb:6d:db:28:d7:07:52:8f:b9:7b:2e:
27:13:b5:ea:f6:6c:ea:f6:2a:db:f9:08:2f:a6:70:
96:09:47:5d:6c:fa:46:d4:8e:78:27:b1:87:9f:82:
56:df:66:b8:d8:4d:de:bf:6a:a8:e6:1f:a1:58:96:
60:c7:6f:f8:0e:d0:b8:72:50:c7:04:84:32:b0:6c:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BE:3F:67:92:45:BE:5B:C6:3D:8B:E8:2B:F8:C0:03:65:C7:67:A9
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_r4_Z5JFvlvGPYvoK_jAA2XHZ6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:9d:01:74:fc:d9:63:cf:16:c1:fe:39:9d:73:bc:7b:2d:54:
e6:e4:ee:84:9b:83:18:10:fc:f7:33:66:55:80:4c:3d:d4:60:
46:2a:9b:4c:d0:e7:8e:5c:25:ed:27:a3:d3:c4:7f:e6:c4:43:
d5:49:e1:26:bd:c4:13:1f:ab:7d:0e:5a:cc:71:29:b7:72:54:
02:6f:4c:cc:a4:10:8e:5f:a2:76:f9:8a:76:c9:c0:a3:d9:6d:
31:b5:a5:29:e5:0a:5d:ad:74:a7:e5:a4:cd:9a:46:35:72:f3:
65:ac:4a:83:55:f4:73:20:59:f4:83:3a:33:4f:e9:fd:0b:9d:
19:3b:14:50:b4:d1:cc:1f:e0:aa:97:b3:66:12:48:be:92:e1:
aa:1c:ff:72:aa:83:fa:84:57:6e:3b:99:55:ca:79:e0:b3:24:
f0:2c:68:c6:74:d8:6c:54:d3:80:7d:9c:eb:a1:e5:07:d5:c1:
5d:f7:a3:c1:f4:15:c7:96:4b:15:f2:f4:8b:eb:50:27:c9:29:
bb:22:22:ac:b9:d2:68:19:b4:ba:b2:0c:98:37:bf:a5:60:d7:
cb:1b:6a:8c:80:90:61:fc:db:01:ab:13:d0:43:7f:06:08:86:
d6:e5:e3:ad:07:90:d7:30:a7:23:3a:52:ba:87:b6:3d:f2:6d:
d1:89:4b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org