Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/aBUYDAFuLwb0jhs0MatPI-rSWwQ.roa
File: aBUYDAFuLwb0jhs0MatPI-rSWwQ.roa (raw, json)
Hash identifier: WJ7MkALn1cAh5jiftqs4Xt1Fu/NmMSURaHarsxlAH28=
Subject key identifier: 68:15:18:0C:01:6E:2F:06:F4:8E:1B:34:31:AB:4F:23:EA:D2:5B:04
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0188390B0A6685AB021F1FF68A7B050EC42D
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/aBUYDAFuLwb0jhs0MatPI-rSWwQ.roa
Signing time: Sat 20 May 2023 12:03:24 +0000
ROA not before: Sat 20 May 2023 12:03:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 62.72.190.0/24 maxlen: 24
81.21.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 11:44:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:39:0b:0a:66:85:ab:02:1f:1f:f6:8a:7b:05:0e:c4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 20 12:03:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6815180c016e2f06f48e1b3431ab4f23ead25b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8d:ac:3e:e5:89:ff:81:da:64:fc:cc:9a:87:
50:47:e4:14:97:85:2e:26:bc:ad:82:cb:b6:aa:af:
df:09:f0:6c:36:f6:f0:0d:ce:5f:71:6f:26:01:bb:
ed:54:85:85:29:5f:43:eb:77:cf:79:47:51:f9:42:
32:7a:44:92:62:dc:5b:0a:ac:d3:b8:3a:11:a3:eb:
1c:5b:b2:0b:ff:ab:7a:5f:a1:57:1d:30:18:43:37:
8b:8e:21:9e:3e:14:ae:ba:f3:e1:a6:59:dd:36:eb:
af:05:69:e5:97:f1:ea:65:1c:9d:2e:55:f6:e6:11:
1d:08:91:16:d1:c1:74:d7:e3:6d:63:d8:24:ea:75:
ad:91:ba:3a:b3:a9:db:db:10:14:6a:ac:60:e1:c7:
5e:bd:33:e6:e4:7c:a5:91:57:40:e9:83:ee:4a:c4:
38:c3:4b:06:84:c6:af:6d:da:34:2f:06:a2:80:05:
ac:c3:f4:23:1a:92:9d:03:5e:52:e9:72:7a:0f:d8:
47:cf:5b:97:62:8f:c3:10:b8:f0:90:17:44:32:48:
64:64:2b:3a:93:52:91:79:00:3a:90:b5:0b:42:63:
14:2f:68:43:d1:ce:79:27:22:52:47:06:c0:a4:bc:
a1:4c:5d:48:f5:44:85:e2:94:a3:e9:68:42:30:e8:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:18:0C:01:6E:2F:06:F4:8E:1B:34:31:AB:4F:23:EA:D2:5B:04
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/aBUYDAFuLwb0jhs0MatPI-rSWwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.190.0/24
81.21.1.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5d:19:40:3e:38:c1:76:1e:3a:32:16:bc:37:e7:7e:6c:d8:
7d:af:f4:73:e8:85:c0:f2:c4:a7:85:71:9e:28:c3:a2:6d:80:
35:03:4f:26:3d:bb:b6:63:5b:c0:8a:82:b2:89:08:33:16:9e:
de:17:43:e0:be:53:9e:8d:b0:cb:96:79:33:d6:62:7a:04:23:
22:14:3b:e5:ed:cb:8a:52:5b:e8:21:68:6c:e2:68:67:8b:b6:
dc:12:58:09:29:9b:96:ad:e8:c1:51:43:8e:9a:bc:f6:04:43:
5e:3a:e2:ae:23:a8:cc:79:d0:34:ec:f6:14:e0:d9:c5:15:35:
6b:68:3f:d5:3b:0a:42:24:d4:5e:67:d6:e6:5f:b8:ed:5f:3e:
33:50:8b:ec:a0:1c:ff:aa:44:5a:3c:f9:1a:00:e2:69:1f:21:
3f:f7:81:ae:02:4f:2a:aa:77:1c:e1:13:90:e3:36:f9:b5:a4:
e8:3d:a9:b8:90:23:2e:d9:1d:c4:5b:3d:4b:0a:73:61:e1:42:
a3:67:10:c5:89:28:ab:b1:88:33:26:8b:45:60:24:14:f6:99:
bc:6c:4a:e9:de:be:03:fa:ee:02:69:cc:41:68:95:17:47:38:
b9:1e:0a:37:23:39:2f:60:d2:db:92:6b:87:d9:de:76:db:6e:
b9:44:cc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org