Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ear1X_hb-Qhhh8iMjpDNYUExyWc.roa
File: ear1X_hb-Qhhh8iMjpDNYUExyWc.roa (raw, json)
Hash identifier: ijKnqWIAF9Yb0MGUOON3b1EQrlxp99n923q/HnTdqvg=
Subject key identifier: 79:AA:F5:5F:F8:5B:F9:08:61:87:C8:8C:8E:90:CD:61:41:31:C9:67
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01856F4B82DEFACE9D28C672B5EA18C1A7AB
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ear1X_hb-Qhhh8iMjpDNYUExyWc.roa
Signing time: Sun 01 Jan 2023 21:44:57 +0000
ROA not before: Sun 01 Jan 2023 21:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 62.72.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Mar 2023 21:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:82:de:fa:ce:9d:28:c6:72:b5:ea:18:c1:a7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 21:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79aaf55ff85bf9086187c88c8e90cd614131c967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:37:be:73:97:4d:57:78:45:b2:20:fc:9a:
07:6e:bb:f2:5e:0a:87:4d:53:83:f5:23:5c:f0:16:
a0:94:e5:6d:fc:02:6c:f8:75:f9:f6:4e:d1:46:d4:
ef:09:f1:40:14:26:95:42:02:cc:94:1d:46:05:7b:
d1:ab:2e:cd:05:38:59:d8:5c:14:ce:11:2f:54:13:
9a:d4:b6:5d:fd:e6:d1:5d:8e:d2:f3:29:cd:56:7a:
10:48:73:b7:22:3d:50:c1:3f:cd:6c:f5:7f:5c:f1:
2d:f2:3e:b1:8f:b4:b1:cf:17:3f:b6:8d:47:22:2e:
89:00:f1:f0:3b:d4:44:3e:39:c4:ff:d5:09:ae:f9:
27:a4:a2:b1:15:4e:b3:91:c1:f7:ef:02:9d:b6:61:
90:c7:ff:56:6b:3a:d4:07:0b:3e:21:40:73:83:52:
d0:38:1a:48:1c:4f:31:a6:16:6f:a2:93:0e:3d:67:
e0:cf:d2:af:a9:61:94:d0:56:a6:9e:28:5b:10:44:
b7:1c:a3:13:7e:2a:61:45:40:c1:33:34:88:e9:f4:
55:22:2d:3d:65:b1:d3:36:df:ad:72:6c:99:26:bc:
3a:fc:05:c2:f4:71:79:89:a0:5b:5e:de:e9:ee:3c:
13:9e:6c:78:6a:8e:49:86:44:73:a2:22:6e:47:6c:
a8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AA:F5:5F:F8:5B:F9:08:61:87:C8:8C:8E:90:CD:61:41:31:C9:67
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ear1X_hb-Qhhh8iMjpDNYUExyWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.185.0/24
Signature Algorithm: sha256WithRSAEncryption
61:3c:e4:0b:92:18:f0:38:3e:a3:ed:80:ba:75:e5:4a:26:3f:
13:fa:71:1e:52:32:00:3a:ce:b5:98:0e:36:a5:cb:6f:fd:b8:
67:42:36:53:20:cb:24:5a:d0:b0:7b:82:a5:29:74:78:d4:f1:
40:47:df:e8:8d:ac:d7:52:5d:2c:c2:53:dd:ba:9f:8b:25:ce:
d2:ba:de:d1:fb:86:10:be:5f:20:4a:7b:d5:37:76:f1:29:ad:
a9:ee:e1:6d:44:47:5d:41:10:a1:4d:81:47:0b:5b:00:a1:79:
ea:b1:13:47:21:ed:91:3a:56:1e:2c:d4:8d:7d:36:ca:73:67:
6d:9d:03:88:f7:d0:bb:38:70:54:2a:96:4d:1b:28:12:be:0e:
6a:1d:40:da:b0:fd:1b:87:91:fd:9d:bb:60:46:bb:b3:ba:bd:
04:b5:70:af:33:4a:b0:02:2f:ed:3f:4c:cb:43:7b:8b:24:8a:
a8:8a:ae:c4:68:02:7d:19:60:8e:cf:50:1c:f0:5a:4f:86:7a:
53:7d:a5:03:88:05:41:72:06:26:5f:d0:81:cb:ac:ee:ed:f6:
ae:41:29:6a:17:bb:39:c6:dc:b9:28:a4:31:77:2d:cf:32:25:
d8:c5:56:85:a8:32:ee:30:c8:4b:6c:68:ed:5c:69:69:7a:34:
a8:15:09:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org