Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lWd9Ansr-Rt7ofAonB47qv3YwCQ.roa
File: lWd9Ansr-Rt7ofAonB47qv3YwCQ.roa (raw, json)
Hash identifier: ZiY9G0PYQq9OtHxg/Wuz+eLaQ7mos3EUKF2MeIzEVWM=
Subject key identifier: 95:67:7D:02:7B:2B:F9:1B:7B:A1:F0:28:9C:1E:3B:AA:FD:D8:C0:24
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018909AC0BF1A653CCB61B37840492851D81
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lWd9Ansr-Rt7ofAonB47qv3YwCQ.roa
Signing time: Fri 30 Jun 2023 00:20:17 +0000
ROA not before: Fri 30 Jun 2023 00:20:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 62.72.180.0/24 maxlen: 24
176.57.48.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
81.21.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 08:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:09:ac:0b:f1:a6:53:cc:b6:1b:37:84:04:92:85:1d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 30 00:20:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95677d027b2bf91b7ba1f0289c1e3baafdd8c024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:35:f8:4f:92:1a:c1:28:a9:19:6d:6b:ce:
c8:0a:50:c6:9b:96:d7:51:c0:5a:b1:26:ba:0d:b2:
a7:94:36:51:4f:4b:28:03:60:f9:23:37:2c:9d:7a:
e6:c2:85:6d:57:bd:f2:93:bc:be:69:9d:7a:59:99:
17:10:be:9c:d1:1b:79:f7:18:6a:ca:13:c7:65:b2:
30:4e:39:ea:16:8f:e1:d1:d6:64:fc:1b:ab:7a:30:
3f:b9:75:26:64:08:ee:36:84:d8:22:ba:44:72:25:
6f:83:56:88:d0:14:ff:93:0c:36:fc:19:33:3b:5d:
cd:30:cf:b8:ef:9c:08:59:c5:6c:1d:d0:81:56:a7:
53:8b:6c:7b:d4:8c:24:33:57:fe:da:2a:7e:7b:d3:
82:4c:0c:d4:00:c4:8f:65:5b:2f:6f:17:48:ee:ba:
e5:ad:15:49:d5:d8:c8:6b:6e:0b:20:76:1a:28:18:
f2:05:62:f4:39:10:ec:4a:07:ed:cf:33:b9:31:ee:
26:a6:36:79:8c:e9:47:e7:3e:15:3d:84:fa:36:ef:
34:91:b5:77:08:75:af:95:12:52:fd:15:7f:8a:d8:
3b:62:5d:63:34:e1:33:2e:4d:06:a5:7c:e6:bb:01:
99:12:2a:6e:16:39:3b:25:95:02:a8:47:78:9d:ab:
d2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:67:7D:02:7B:2B:F9:1B:7B:A1:F0:28:9C:1E:3B:AA:FD:D8:C0:24
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lWd9Ansr-Rt7ofAonB47qv3YwCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.180.0/24
81.21.0.0/24
176.57.48.0/24
176.57.54.0/24
176.57.56.0/23
Signature Algorithm: sha256WithRSAEncryption
57:bc:fc:09:dc:64:bc:ff:0b:33:5f:54:12:55:76:ae:6e:72:
b4:d5:7a:54:8f:5e:82:7f:18:16:3a:f7:ce:8c:d6:bb:38:18:
2d:58:4d:17:98:19:4a:31:71:83:2c:e0:bd:b6:ed:5b:4f:57:
61:50:b1:06:7a:24:62:05:f6:29:26:6c:ce:62:a5:aa:70:ed:
6d:77:5e:05:f3:30:25:1b:1b:7d:72:ca:24:b3:e3:16:63:27:
73:97:48:3e:dc:56:ab:54:ee:d8:63:e5:c4:00:ee:e1:a8:a1:
27:70:96:41:5b:80:f6:77:6f:1f:cc:81:9e:9e:12:6f:08:06:
23:7f:2e:e7:6c:d4:1b:78:7f:3e:e4:c3:31:3e:ca:64:ff:7f:
3d:9a:f9:ee:7d:ec:aa:23:28:1d:f8:69:57:64:2a:9a:ef:f1:
07:d0:c2:d1:5c:1b:3d:40:eb:20:ae:e6:91:19:69:e7:3d:e8:
d1:ad:94:7d:22:26:8a:a6:f8:13:53:31:80:3f:57:34:6f:84:
9b:59:8c:ae:45:b7:d1:7f:43:32:48:d2:12:d5:24:68:c1:a1:
41:78:e2:45:ec:fd:bb:a2:84:fb:dc:b7:57:5a:69:f8:d1:21:
e1:d3:b6:0f:a0:c1:ec:cd:17:96:e3:23:1d:f8:e3:58:c7:ef:
20:b6:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org