Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/egoSqFEK8X-BBqMDeutqUFRWX4w.roa
File: egoSqFEK8X-BBqMDeutqUFRWX4w.roa (raw, json)
Hash identifier: zlaU9q3P/XbyKd88mfOh3hHz9NYAafNB/gtcxqYZI3c=
Subject key identifier: 7A:0A:12:A8:51:0A:F1:7F:81:06:A3:03:7A:EB:6A:50:54:56:5F:8C
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01894DA8BF324BB3C84869A145D1D6C3FF8E
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/egoSqFEK8X-BBqMDeutqUFRWX4w.roa
Signing time: Thu 13 Jul 2023 05:10:51 +0000
ROA not before: Thu 13 Jul 2023 05:10:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 62.72.175.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.3.0/24 maxlen: 24
81.21.2.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 13:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4d:a8:bf:32:4b:b3:c8:48:69:a1:45:d1:d6:c3:ff:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jul 13 05:10:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a0a12a8510af17f8106a3037aeb6a5054565f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e5:ed:c3:ef:1e:09:bc:ec:6e:6e:43:48:c2:
de:81:90:45:d1:31:78:94:76:8b:68:a4:2f:2f:9c:
45:ac:fa:72:01:2f:31:4c:b7:a8:a9:69:8f:e9:12:
58:9b:8a:29:6c:ce:98:87:4f:3e:c9:bc:b5:c1:f6:
bd:4f:f2:fb:45:09:b8:5e:58:94:0c:dd:fa:8e:5f:
41:47:e6:d8:76:63:f3:93:6c:e7:5d:60:39:1c:35:
f6:21:cc:d4:0d:76:34:ca:cd:90:e7:f1:d8:06:67:
79:33:d6:3d:82:5f:be:3d:f6:ba:85:b1:0b:5a:1c:
bc:03:99:b2:e9:f8:d4:33:65:32:4b:2b:97:24:f6:
40:5d:9f:08:bb:7f:95:f4:87:2d:72:8a:9d:9f:2a:
fc:e8:3d:34:23:26:79:d6:0f:c3:03:fe:b8:67:1b:
49:d8:b4:49:a0:9d:f5:67:7b:9f:8a:c0:de:e3:8b:
0b:4f:4a:d4:15:21:e4:22:aa:20:64:a3:78:e6:30:
1e:7e:6d:88:c9:05:f6:06:57:85:24:d6:4c:53:7b:
ef:92:a3:73:9d:54:82:46:c7:03:3a:36:ff:99:1f:
c5:d1:f6:f0:44:f1:ad:d4:3b:29:9c:68:18:57:dd:
58:de:3a:f5:d5:00:fb:04:79:db:33:9e:59:53:aa:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0A:12:A8:51:0A:F1:7F:81:06:A3:03:7A:EB:6A:50:54:56:5F:8C
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/egoSqFEK8X-BBqMDeutqUFRWX4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.175.0/24
81.21.2.0-81.21.7.255
81.21.9.0/24
Signature Algorithm: sha256WithRSAEncryption
10:87:88:72:08:be:07:4f:e9:ba:6c:16:df:92:67:8f:70:25:
6d:f1:f4:23:3b:43:0e:0a:51:38:e7:0d:e3:11:30:ea:28:ca:
3d:15:94:b5:6e:d6:ba:b1:c0:b0:84:fb:a3:1b:88:4f:57:54:
32:b4:4c:9c:19:b3:5d:c3:11:04:da:4a:64:a1:48:d1:e6:d4:
7d:60:87:2a:ae:16:69:09:3a:05:dc:65:54:ff:c6:f5:97:92:
4f:74:ed:7c:c0:96:f0:18:e7:0b:1b:f7:13:84:3e:e4:06:c4:
5f:58:bd:75:cc:d9:d0:d0:99:a5:35:1d:ce:db:f6:e4:9d:c2:
e7:c3:34:d0:75:f3:ef:38:f7:17:4a:78:1c:2f:a1:7e:69:2b:
73:4a:14:43:96:98:5e:14:6d:58:5b:d5:9c:8a:a7:54:0e:d2:
e1:13:7d:b4:ec:8a:f9:80:eb:ad:d4:8b:bc:d3:45:f3:0d:54:
7a:b1:d9:68:04:1d:f3:7a:fb:39:4b:4e:ae:35:df:18:da:97:
a2:13:f4:c1:af:7c:5b:2c:bd:d1:9a:7d:81:ca:97:94:f3:b9:
1f:9b:e0:78:c9:24:d7:0a:5b:30:5f:9c:1a:f6:6f:8e:78:92:
1b:9d:fb:84:f8:c4:50:fb:85:9f:80:48:a2:bd:f5:a9:74:6e:
c9:3f:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org