Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gWX3vZEii3c_1SDM-1aQUbW_gQY.roa
File: gWX3vZEii3c_1SDM-1aQUbW_gQY.roa (raw, json)
Hash identifier: 4NlvmahNVe0Xrt99kRXdVuFaihHxTGcerFHeeLLtVnw=
Subject key identifier: 81:65:F7:BD:91:22:8B:77:3F:D5:20:CC:FB:56:90:51:B5:BF:81:06
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C6807BBE376431056E2E3A1327242E9F8
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gWX3vZEii3c_1SDM-1aQUbW_gQY.roa
Signing time: Thu 14 Dec 2023 11:13:06 +0000
ROA not before: Thu 14 Dec 2023 11:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57974
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Dec 2023 06:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:07:bb:e3:76:43:10:56:e2:e3:a1:32:72:42:e9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 14 11:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8165f7bd91228b773fd520ccfb569051b5bf8106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2d:7d:8e:70:9c:6f:de:8f:43:8c:86:f3:8f:
08:f1:84:d0:33:63:79:04:8f:7b:d5:46:49:f4:4d:
b9:35:3d:ec:16:26:44:e2:88:39:79:e1:10:fe:d0:
b8:4c:04:b9:4f:a4:7f:de:43:d0:ed:93:5c:b0:1f:
eb:cd:61:2a:11:69:71:02:88:a8:9c:91:82:f1:c8:
45:5c:b4:8a:4a:60:df:0c:32:2e:c8:08:65:6c:5e:
cc:a6:e4:ba:d7:e6:bc:db:11:95:db:ee:0c:9f:ba:
6e:2a:5d:3c:4f:5f:cd:dd:ea:cc:00:21:09:90:74:
7c:9a:bb:c9:69:11:20:69:97:35:94:0d:44:6f:78:
6a:82:d0:6b:43:02:fa:e9:50:d6:19:43:d6:84:d0:
8d:96:ce:1c:6c:77:a7:55:5c:c1:d7:a4:39:5c:0f:
98:35:37:5f:a6:0b:1d:44:9f:c1:4f:1c:f6:b8:90:
9c:5e:06:f3:6e:1d:3c:53:55:21:2a:2e:e8:e0:6f:
55:8f:a3:cd:5c:83:8b:1f:e8:bd:1a:ec:48:7f:70:
8b:3f:c0:06:c3:5c:e7:3f:63:62:da:f8:cc:ba:18:
62:83:5d:ed:37:9e:39:50:00:e0:f0:8c:4b:0f:d2:
ec:7d:71:cd:2b:d4:ef:63:b7:65:61:35:4a:fb:18:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:65:F7:BD:91:22:8B:77:3F:D5:20:CC:FB:56:90:51:B5:BF:81:06
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gWX3vZEii3c_1SDM-1aQUbW_gQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0/24
62.72.188.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:8e:bb:c5:b1:02:96:e0:e8:31:0f:7b:3b:f8:81:7d:a3:d9:
44:ee:8b:7d:f3:6f:f0:78:57:69:40:23:e4:b7:d1:d2:ba:13:
4b:4d:c1:af:50:c1:58:05:7f:c2:ff:96:25:03:54:8a:c7:66:
25:4f:6b:30:32:20:2a:ec:9f:c6:42:f9:14:9b:a7:a3:62:eb:
33:e5:61:63:f0:6d:5a:f1:c4:38:45:d2:b3:88:70:71:3a:cb:
01:ca:dc:3c:c7:14:05:f2:a1:83:54:5f:f2:0a:7c:e3:0f:e9:
c7:94:af:3d:f8:36:f2:c3:d8:3d:8f:e3:c6:bc:8d:69:29:8a:
f9:40:34:fc:2e:82:96:36:be:aa:2e:48:20:98:db:e3:e3:b8:
6a:82:da:cb:e1:bf:b9:d7:aa:74:b0:44:fd:99:6c:34:fe:d9:
84:07:80:d7:2c:07:a5:06:31:ab:96:ab:37:98:97:0f:b8:5e:
9a:1d:2e:06:3b:62:56:c6:53:98:dc:f3:d5:dd:d1:e9:8a:f2:
29:3e:39:54:bc:64:76:a0:19:7d:30:86:37:6c:52:04:c3:2a:
03:c1:6a:9b:a1:63:f5:9d:d7:f5:4b:a7:64:2f:c9:ea:15:e9:
2d:3c:b6:32:f7:47:2f:09:4e:fa:7a:de:7b:6b:d6:43:bc:c9:
41:7d:95:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org