Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/izpMtajbzFr-3J3_B6AJT2aiQ_o.roa
File: izpMtajbzFr-3J3_B6AJT2aiQ_o.roa (raw, json)
Hash identifier: /kgYt+nNDPKB4Bsqr2Noyu4+QEMU3bLrpAtNkz7I9iA=
Subject key identifier: 8B:3A:4C:B5:A8:DB:CC:5A:FE:DC:9D:FF:07:A0:09:4F:66:A2:43:FA
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019045617B67EE0A3692592F162546CDE43B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/izpMtajbzFr-3J3_B6AJT2aiQ_o.roa
Signing time: Sun 23 Jun 2024 13:55:34 +0000
ROA not before: Sun 23 Jun 2024 13:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 62.72.173.0/24 maxlen: 24
62.72.180.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 11:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:61:7b:67:ee:0a:36:92:59:2f:16:25:46:cd:e4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 23 13:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b3a4cb5a8dbcc5afedc9dff07a0094f66a243fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:92:06:25:3c:d1:70:42:30:b2:2e:6c:18:
be:1e:6d:4c:a0:43:a4:d6:3d:33:03:0a:20:0d:96:
db:90:fd:be:4b:0b:9b:bc:d7:34:e0:48:ca:dd:3a:
58:83:41:ad:90:6e:ea:f6:c9:60:24:1a:b2:ec:36:
61:a3:57:8d:ed:05:b3:4a:8f:0f:5d:1c:cd:6f:b6:
7f:74:b9:7e:55:30:db:6d:b2:d4:c1:39:19:21:99:
f0:78:87:29:e1:05:3b:90:c0:f8:99:bc:ef:51:9e:
c9:2c:97:61:fc:33:55:65:78:a6:42:f0:c7:70:89:
d1:92:31:3a:1c:f5:d3:f6:25:45:93:c0:9d:8f:79:
83:68:23:08:a6:b9:1a:06:cc:a5:56:1a:20:42:50:
30:ec:1a:7e:05:aa:85:b8:81:d9:9c:13:4b:97:c7:
53:a0:70:a8:ec:7e:9f:e1:cf:92:0e:64:b4:53:2f:
86:64:4e:cc:b8:c2:a5:30:2b:93:84:62:3c:14:6e:
d2:a8:de:f7:ac:f2:ae:b6:d6:30:d7:1c:f5:c2:36:
cb:00:50:8f:98:b4:63:2a:55:a2:5f:77:98:e0:1e:
37:ca:f0:c1:d0:28:4a:88:f5:86:43:27:0d:fb:60:
96:3a:e4:2c:3b:7e:c2:11:d0:73:51:a3:f2:f8:80:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3A:4C:B5:A8:DB:CC:5A:FE:DC:9D:FF:07:A0:09:4F:66:A2:43:FA
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/izpMtajbzFr-3J3_B6AJT2aiQ_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.173.0/24
62.72.180.0/24
62.72.184.0/23
Signature Algorithm: sha256WithRSAEncryption
25:9a:ca:22:bf:39:20:7e:31:e4:d5:1f:cb:c1:53:6b:65:11:
2c:80:1f:34:75:14:13:c0:c0:a5:04:11:77:53:72:38:f4:73:
61:76:e1:c0:4a:9f:90:06:63:01:0f:48:bf:8b:e2:8f:38:13:
e8:3d:49:51:4c:ee:66:58:7e:44:92:ae:61:89:81:01:2e:c3:
f3:37:78:ba:34:ed:21:ce:2d:26:ff:22:27:1f:5a:a0:23:87:
ec:8b:b2:93:7b:47:ba:38:82:99:1e:c9:fd:61:7d:bf:bf:f3:
a7:71:e5:db:12:e2:a4:18:5f:a4:c3:38:70:57:3c:fb:98:59:
ec:e7:57:13:65:4b:cb:8c:d7:17:bf:8f:e3:1e:dc:ee:44:96:
2a:79:f3:18:b5:5c:7f:e2:9b:00:e2:ca:ca:d4:f7:2e:de:07:
3b:77:fa:16:74:33:f3:3b:d4:cc:ea:d5:6d:f4:68:da:d2:1f:
16:86:fa:9d:36:4e:17:f4:6a:3e:9f:0b:94:32:68:68:9e:1a:
3c:bd:11:61:63:6d:07:85:71:ba:ea:2c:88:aa:3d:76:c9:35:
ab:86:21:f2:38:94:fa:d1:31:f1:10:9f:f1:61:61:a4:32:36:
26:3a:67:1a:35:41:d4:b2:6c:69:d7:57:d9:32:ab:b9:65:42:
be:27:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 14:14:27 2024 by rpki-client on console-ams.rpki-client.org