Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/oIjfb7u7Jdk05lM9J5l-3nT67y0.roa
File: oIjfb7u7Jdk05lM9J5l-3nT67y0.roa (raw, json)
Hash identifier: w21zzQuACRE9AL7b6d0f8nLvMdr4SmI4a3VadFWwLcU=
Subject key identifier: A0:88:DF:6F:BB:BB:25:D9:34:E6:53:3D:27:99:7E:DE:74:FA:EF:2D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B79D26CE2D59664B6D93AD82B81C77
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/oIjfb7u7Jdk05lM9J5l-3nT67y0.roa
Signing time: Mon 01 Jan 2024 20:29:31 +0000
ROA not before: Mon 01 Jan 2024 20:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24768
IP address blocks: 62.72.170.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 20:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:9d:26:ce:2d:59:66:4b:6d:93:ad:82:b8:1c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a088df6fbbbb25d934e6533d27997ede74faef2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:36:67:00:c9:f3:52:87:45:a4:45:6a:a7:
b5:cb:f7:7c:3d:63:77:7f:a5:5f:82:9f:39:c7:4b:
65:45:37:ed:28:02:27:4d:40:49:9b:62:11:70:37:
fa:3c:72:12:30:c2:c4:b7:19:cd:9a:6e:5b:10:73:
7c:54:cf:ca:ea:38:62:80:7a:2d:71:86:ed:f3:3b:
ca:0e:44:d9:4e:af:6a:51:25:36:6d:d8:5a:03:50:
67:63:df:df:17:39:aa:44:fe:ff:ed:93:97:75:2e:
12:c0:5a:55:14:55:3e:b3:b0:ad:36:07:4e:cd:6c:
19:3f:52:e6:4d:b6:9e:7f:92:26:69:83:ef:be:cf:
53:bd:36:e9:60:25:02:b8:25:6f:17:21:d1:31:56:
2e:a3:8f:20:32:08:c1:a1:82:fe:fe:de:cb:79:2e:
27:a0:6b:70:c2:ca:6d:73:19:69:57:4d:9a:c0:c3:
60:3c:e7:d8:0e:4e:72:18:20:e8:8e:d7:af:c3:d4:
b7:ea:8c:40:18:c3:37:09:bd:dc:ce:d5:d7:ef:17:
46:35:51:01:9a:79:dd:74:d4:23:33:59:12:4c:70:
1f:96:1c:55:10:1d:8d:31:54:eb:b5:9d:3e:2e:fa:
a6:80:9e:43:88:fe:eb:3c:8d:be:21:e2:91:e1:e1:
dc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:88:DF:6F:BB:BB:25:D9:34:E6:53:3D:27:99:7E:DE:74:FA:EF:2D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/oIjfb7u7Jdk05lM9J5l-3nT67y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.170.0/24
62.72.174.0/24
62.72.185.0/24
Signature Algorithm: sha256WithRSAEncryption
59:6f:71:11:54:f1:78:41:18:c8:03:f7:97:5d:23:95:22:2a:
75:95:01:85:f1:72:cc:33:7b:60:61:38:3c:1a:22:e2:84:11:
be:26:33:37:f4:1d:d5:95:d6:2c:c1:8b:8f:bc:fb:46:18:18:
78:fa:d0:bc:0d:6c:97:8c:78:f8:bf:fc:d5:f9:05:29:bf:13:
3e:a3:2b:37:61:be:59:0e:63:53:5d:ba:82:62:3b:98:21:17:
a4:e1:b4:5f:29:5e:c3:fd:1b:cd:52:80:02:ad:dc:44:59:1f:
74:06:cb:f3:17:8e:80:29:a0:16:bf:85:5c:7f:ae:e0:66:ff:
05:ce:7b:e6:cd:05:5a:d4:b7:f1:e3:b7:42:d4:08:f4:fd:2a:
ed:4d:b0:36:69:25:33:59:dc:81:1e:da:02:3b:0a:3c:5d:b7:
12:5e:72:25:3d:e9:70:3e:d9:84:ed:9e:70:49:11:64:bc:a8:
65:54:7e:9d:df:94:c3:83:b6:61:3d:48:6d:46:d8:12:26:f2:
70:45:09:ce:04:e5:bc:b0:70:9e:2f:73:88:0e:19:3d:23:ea:
fb:d6:14:ce:7c:92:ea:00:fd:da:f9:75:0f:ce:74:5b:11:3e:
ab:2f:6c:76:db:3e:eb:65:af:0b:c6:05:4b:9b:42:31:9d:80:
1f:0b:69:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org