Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/pmYBHeBjlF9rmHA30-KXzVLdVhc.roa
File: pmYBHeBjlF9rmHA30-KXzVLdVhc.roa (raw, json)
Hash identifier: 1hZ3AcYK4aIttRO8tF1XGiS7yXZR2R/UO0cOCd1DqPI=
Subject key identifier: A6:66:01:1D:E0:63:94:5F:6B:98:70:37:D3:E2:97:CD:52:DD:56:17
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018BB9247A4CF3E15836AD349EA11E58E53C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/pmYBHeBjlF9rmHA30-KXzVLdVhc.roa
Signing time: Fri 10 Nov 2023 12:10:57 +0000
ROA not before: Fri 10 Nov 2023 12:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 62.72.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 06:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:24:7a:4c:f3:e1:58:36:ad:34:9e:a1:1e:58:e5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 10 12:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a666011de063945f6b987037d3e297cd52dd5617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:1e:a4:ba:f6:70:ec:3b:ec:3b:4f:dc:24:
64:b3:c4:a6:c8:9e:f9:dc:0d:da:31:ed:e7:85:3e:
4a:f7:8f:81:c3:0f:0f:0e:93:f5:4e:85:73:5e:91:
bc:1a:87:ca:2a:e4:8f:80:7e:23:d4:cf:77:b6:63:
fa:26:f9:40:31:ab:84:6b:db:2a:01:27:99:ad:5c:
00:2c:99:d5:7e:b4:ab:9d:27:23:17:37:af:f1:c8:
54:1a:a7:f6:eb:bd:43:f2:b1:38:d4:c4:9b:dc:38:
17:b4:c6:21:bd:b1:29:26:6a:51:64:d6:c0:51:55:
6c:b2:63:ca:11:0b:f7:c6:d1:88:50:88:8b:88:a0:
e0:8b:ac:a0:ea:4f:4c:c3:bc:51:b8:32:74:ab:95:
46:61:72:e5:ee:0d:01:f5:76:08:93:88:47:d0:69:
77:e9:f2:c9:e0:3e:0e:a4:81:a8:eb:0a:86:05:11:
5c:ad:e1:e0:4f:18:ab:71:c5:38:d5:cb:62:56:ea:
0d:08:04:a5:5a:31:71:f0:d9:7c:c0:75:1b:66:b9:
d2:9e:bd:c9:a3:40:9c:3b:76:e6:1e:90:51:af:5b:
d7:16:24:7c:47:66:1b:22:66:d0:ca:61:21:d5:7f:
3f:f2:93:f2:1f:6f:43:32:cb:1c:0a:38:d7:ed:06:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:66:01:1D:E0:63:94:5F:6B:98:70:37:D3:E2:97:CD:52:DD:56:17
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/pmYBHeBjlF9rmHA30-KXzVLdVhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.167.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:67:b6:9f:84:c5:9f:fb:00:ab:3c:06:3a:b1:8a:a0:e2:c4:
3d:cd:ea:88:af:d4:f3:2a:8f:b2:0e:c4:1d:08:1b:a3:b6:91:
f6:15:05:df:be:98:61:2c:fb:c0:d0:c9:20:21:e7:09:0a:25:
d3:50:5b:30:dd:9f:90:9b:2c:22:b5:78:d8:55:4e:6a:6c:92:
cc:cd:9b:be:dd:de:db:ca:63:4a:6f:01:37:90:e7:96:0d:5f:
75:48:22:2e:43:cb:d5:54:9a:e0:94:62:d5:89:cf:f0:c6:89:
3d:9a:7c:4b:19:ea:92:78:fa:6f:bf:e8:cc:a5:0d:1c:e1:5c:
5b:04:cf:37:bc:67:6f:6c:69:5e:d9:16:e0:4e:34:12:56:a7:
0d:9b:10:0e:f8:ff:1a:78:9e:cd:0e:c7:8d:dc:34:a9:a8:26:
e8:05:2f:72:f8:ea:95:e6:fb:54:a7:e3:8b:3c:a9:2d:cc:4b:
15:8d:ee:37:92:0b:f9:d6:f0:bb:0e:d0:0d:6a:03:9e:97:89:
91:e4:36:f4:07:e7:e4:5a:aa:6b:f3:e8:fe:82:3a:3f:39:7b:
c3:e8:36:e6:0e:ad:8a:be:b9:00:17:fc:e8:02:32:40:18:1e:
dd:0c:ae:b4:09:62:2d:4b:0b:22:c4:a5:05:1f:61:9c:b7:16:
5a:b9:20:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org