Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/c7Q3fzQ2AnrXEYtCqOv32Yb5-Bo.roa
File: c7Q3fzQ2AnrXEYtCqOv32Yb5-Bo.roa (raw, json)
Hash identifier: aW7sLk84iz/GMZd0nrR/k+fOQzMJmAtvv0Opi4jf8G8=
Subject key identifier: 73:B4:37:7F:34:36:02:7A:D7:11:8B:42:A8:EB:F7:D9:86:F9:F8:1A
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0187E1311733A1BC3B327EFA7A23B2492CB3
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/c7Q3fzQ2AnrXEYtCqOv32Yb5-Bo.roa
Signing time: Wed 03 May 2023 10:38:23 +0000
ROA not before: Wed 03 May 2023 10:38:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 62.72.180.0/24 maxlen: 24
176.57.48.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
81.21.0.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 May 2023 07:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:31:17:33:a1:bc:3b:32:7e:fa:7a:23:b2:49:2c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 3 10:38:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73b4377f3436027ad7118b42a8ebf7d986f9f81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0e:6a:1e:ec:99:b4:06:ae:19:14:80:4b:7c:
12:b4:3e:7b:26:ff:94:f4:56:60:58:5b:88:4f:fa:
4b:e7:8c:fd:71:05:ee:d4:0f:28:4e:86:50:c1:97:
a7:e6:0a:5f:d1:7c:12:50:12:0e:82:5a:7c:46:43:
2e:bc:28:1e:70:56:de:ba:f0:cb:18:3b:8c:ca:51:
6d:13:fc:ec:c2:67:5f:b4:d4:0b:d6:1f:7b:63:f1:
ab:f6:e3:fe:3d:67:67:4f:bb:d4:0f:fc:b4:75:7d:
a1:29:d0:e7:79:59:90:aa:af:4f:05:de:1f:86:40:
9a:dc:18:e8:c8:61:f1:b3:e8:bb:5b:a4:00:1f:69:
2f:fc:e6:b0:18:58:27:6b:80:59:76:ff:5a:1f:a2:
c5:d2:61:ee:71:b6:8b:05:aa:36:3e:8b:1e:2a:27:
91:28:2c:3f:56:69:53:7c:b1:fd:d0:55:e8:bf:04:
fa:9d:6f:f0:ac:91:3a:f3:c2:c2:15:a1:9b:9f:db:
37:e9:e0:1c:d5:24:ea:c2:35:59:1f:28:12:72:b9:
49:d2:51:7c:e8:96:a6:f3:ec:77:3d:1b:b9:76:0e:
05:4a:be:81:fd:36:3a:01:d3:02:f1:b0:6c:88:92:
51:2d:1c:4d:36:3d:81:bb:41:ba:a7:23:39:25:e8:
19:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B4:37:7F:34:36:02:7A:D7:11:8B:42:A8:EB:F7:D9:86:F9:F8:1A
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/c7Q3fzQ2AnrXEYtCqOv32Yb5-Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.180.0/24
81.21.0.0/24
81.21.12.0/22
176.57.48.0/24
176.57.54.0/24
176.57.56.0/23
Signature Algorithm: sha256WithRSAEncryption
20:1b:43:a9:a1:1a:8e:8d:59:60:5e:52:2d:aa:2e:9e:4d:6c:
3c:94:96:30:cd:8c:39:e4:db:e2:58:56:7c:c3:29:2a:74:f9:
77:fe:5b:37:ea:4c:c5:26:ff:d3:72:09:26:69:25:c3:66:1e:
b2:c3:a5:6f:20:f0:c9:21:64:04:34:8a:5c:b5:3d:57:7c:77:
c5:64:ba:82:f6:a6:01:68:a0:64:b6:ac:21:03:01:b7:17:23:
25:d6:7b:57:85:61:2d:91:aa:b7:28:3e:68:23:27:dd:ee:6c:
6c:88:d0:c0:dc:90:5d:38:4f:18:c2:c6:28:a7:a9:bc:fd:b2:
10:f8:ff:5d:48:ab:d7:b2:8e:54:db:7d:da:22:5f:77:16:0e:
33:10:cc:77:5b:5e:02:f6:1f:7b:e7:b1:71:7c:48:8b:e9:24:
25:d7:c7:34:b6:7b:e7:5f:06:aa:71:f2:46:45:37:95:81:75:
e6:98:d0:35:51:d5:6f:9f:e0:ec:c6:d8:40:e8:ec:7d:d1:87:
a8:10:4d:b8:ae:f2:e6:9e:70:f0:4b:e2:b4:d2:b2:77:38:77:
7c:b0:cc:59:3f:3d:c2:ec:3a:9f:9a:67:75:8a:92:d3:bb:d7:
6b:28:a2:59:06:87:00:ca:90:62:0d:07:41:35:3b:37:bd:c2:
04:7b:2d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org