Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lP_LdqqDtmRJeVn_HHPnPOlecaU.roa
File: lP_LdqqDtmRJeVn_HHPnPOlecaU.roa (raw, json)
Hash identifier: 1Q229eAgb6IznNWwcaErwkONdaiF6TcfcD0Za7mwvl4=
Subject key identifier: 94:FF:CB:76:AA:83:B6:64:49:79:59:FF:1C:73:E7:3C:E9:5E:71:A5
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01874B203485017D47DCECCDFBBBB1D0F5A6
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lP_LdqqDtmRJeVn_HHPnPOlecaU.roa
Signing time: Tue 04 Apr 2023 07:16:54 +0000
ROA not before: Tue 04 Apr 2023 07:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:20:34:85:01:7d:47:dc:ec:cd:fb:bb:b1:d0:f5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 4 07:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94ffcb76aa83b664497959ff1c73e73ce95e71a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:41:ce:8f:9d:52:7a:ee:71:09:1a:f4:50:b5:
b2:84:07:62:ef:56:3e:6f:10:10:a8:1a:31:03:10:
29:65:f7:cd:98:8d:95:42:55:16:41:7a:c8:ae:8b:
65:a4:ad:4f:ec:54:c9:85:11:bf:6e:84:75:a0:42:
f5:7c:b5:35:7a:0c:40:e8:b3:55:06:0e:1c:a0:13:
76:60:e9:7c:15:1e:e5:9e:51:f5:c2:a9:a7:15:ed:
0a:71:92:51:dd:64:45:33:66:e6:46:56:52:1d:37:
5d:01:98:7e:72:26:3e:51:ec:51:78:ef:c1:8e:3a:
f0:c9:6d:86:d2:09:6d:ff:98:c0:fe:e0:78:61:e3:
40:0f:f1:80:c1:53:a9:77:82:e3:b4:17:d9:f8:86:
6b:5c:aa:31:84:95:cb:a3:34:bf:28:17:a7:4a:7a:
4b:1d:c8:bf:7b:8c:52:12:ba:c8:42:27:78:d3:d6:
8a:b6:75:d3:5d:37:31:7b:a2:6d:37:c4:3d:77:2f:
bd:2e:61:ea:93:0a:1d:2d:f4:93:9d:fb:09:8c:83:
e8:52:ca:ff:00:05:62:f2:f5:26:49:a2:9b:22:d6:
24:38:ca:1c:30:96:28:2e:64:35:b0:f9:ae:a6:4b:
b7:47:b6:77:3c:d8:7c:f4:ca:08:d0:79:98:cc:1c:
c1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FF:CB:76:AA:83:B6:64:49:79:59:FF:1C:73:E7:3C:E9:5E:71:A5
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lP_LdqqDtmRJeVn_HHPnPOlecaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:89:8e:50:fc:f3:dc:05:da:ae:49:04:74:6c:0d:a2:77:1c:
4f:97:0f:24:f8:d9:58:28:b9:24:02:79:6b:b6:77:bf:5d:04:
04:96:81:7f:2d:ba:93:0c:02:39:53:44:d7:03:82:df:1c:35:
09:ba:bd:f6:e1:b1:44:00:06:b4:25:3f:3b:39:23:1a:ff:de:
e0:c0:5e:88:b8:15:54:5d:62:e1:07:f5:e0:16:99:d6:18:d6:
88:4a:46:ec:b4:38:65:4b:21:83:23:84:48:53:be:66:2d:e7:
4a:55:ba:bd:60:48:bf:b4:3f:32:9e:f6:f0:6e:da:c1:69:77:
71:ef:c3:19:af:cb:2f:8e:cc:f8:26:f6:cd:13:91:c4:0d:6e:
43:15:dd:1a:23:d7:ca:db:e1:e5:5f:6f:24:ad:e2:1d:bf:4e:
50:75:6a:aa:7b:06:b3:f5:78:c3:2c:47:f0:73:c5:5a:27:87:
e9:89:48:2e:00:20:6e:46:5d:58:99:02:26:fa:cb:60:6d:af:
1d:83:8c:01:ca:12:16:3a:c5:30:95:cd:1f:9b:1d:36:de:68:
b1:cd:d3:14:36:df:0a:78:96:55:c7:68:e7:9b:88:60:b9:e7:
2e:38:a5:65:eb:fc:1f:2b:24:25:93:6d:c6:fb:a6:2e:bd:59:
1e:77:5a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org