Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/qW79C17PTgderAd1HUn2vCsUcZc.roa
File: qW79C17PTgderAd1HUn2vCsUcZc.roa (raw, json)
Hash identifier: cwgAMsi5XBG0ffiRJFBaER8v3Jx2S6KaDKR6JmjkjKs=
Subject key identifier: A9:6E:FD:0B:5E:CF:4E:07:5E:AC:07:75:1D:49:F6:BC:2B:14:71:97
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CF7AA239B85C283F4C2AD8A4466D79015
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/qW79C17PTgderAd1HUn2vCsUcZc.roa
Signing time: Thu 11 Jan 2024 08:36:11 +0000
ROA not before: Thu 11 Jan 2024 08:36:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50131
IP address blocks: 62.72.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 11:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:aa:23:9b:85:c2:83:f4:c2:ad:8a:44:66:d7:90:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 11 08:36:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a96efd0b5ecf4e075eac07751d49f6bc2b147197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:08:90:7f:49:68:b0:06:88:69:5d:ee:07:
89:f0:ee:a6:c8:b5:16:22:9d:3b:50:20:8a:55:49:
21:3a:a7:79:96:01:f4:a4:77:9b:7f:89:60:4a:4a:
db:65:1d:68:01:03:9d:d7:39:23:a9:ee:86:b3:95:
58:a8:2c:6d:1e:e8:b4:30:a3:6f:f7:c2:f8:a4:58:
9b:43:68:62:b8:08:89:40:72:0f:f4:52:e5:56:de:
54:5b:c3:36:b1:12:4c:35:9d:6a:a7:7d:59:7f:d1:
f4:8f:c0:eb:90:94:4f:97:80:f1:33:f6:cd:dd:e5:
e3:4a:cc:28:f3:57:ed:6f:9a:e6:fd:cb:71:f1:a6:
3a:7b:f4:88:c4:12:e3:30:d6:ae:53:ac:ba:d2:d4:
e5:b7:9c:a7:00:61:39:2c:4d:53:60:f2:da:6b:54:
58:f8:67:37:b2:ba:a5:0f:57:7c:62:04:7c:5a:0b:
6d:b8:66:14:c6:01:5e:3a:d5:f4:a3:7a:d0:6c:28:
60:ec:83:e3:6d:20:ba:21:dd:c2:19:4d:8c:ac:38:
ac:36:39:46:5b:0f:d4:8d:d2:05:5c:08:78:6a:64:
63:30:4a:1d:19:0e:dc:6a:4e:2e:0b:9c:ed:06:ba:
60:b6:35:1f:20:97:0d:62:b4:d8:7e:81:3d:62:18:
1c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6E:FD:0B:5E:CF:4E:07:5E:AC:07:75:1D:49:F6:BC:2B:14:71:97
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/qW79C17PTgderAd1HUn2vCsUcZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.189.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:fc:9a:69:11:9f:6d:0c:66:04:fd:d4:15:ce:7b:7e:f0:c0:
0b:92:63:a7:57:db:9f:fc:6e:fb:e9:84:31:ca:38:92:b8:b8:
0d:a4:54:27:2b:a0:38:82:b4:ca:09:a3:60:cb:c8:f6:1b:67:
13:be:53:2f:2a:52:4a:dc:38:10:a8:50:4b:0c:82:94:48:48:
6e:6a:62:10:8e:7d:04:f8:a2:a5:ee:c9:c9:30:ce:e8:9b:b3:
b1:af:96:5c:28:5f:32:5c:5a:77:66:a9:c6:73:87:bf:73:ea:
e9:9b:16:ea:26:a5:2f:8d:05:71:f1:0c:2c:c1:c1:d0:b5:d5:
14:28:b1:4a:4b:56:81:39:1f:96:fb:75:34:a6:86:d5:91:52:
b4:a9:a8:9c:67:95:0b:cd:cc:1b:06:7f:c5:94:8f:e0:a6:56:
df:fc:e4:2f:fc:69:18:f9:e4:af:ee:99:4c:37:5e:26:3c:4a:
40:d7:48:24:e2:17:18:e6:d2:4a:d1:e9:b8:42:26:12:58:30:
8f:6e:ac:61:6b:1e:18:94:30:35:92:46:75:22:35:b8:77:ce:
60:b2:2f:89:ee:e3:1a:1b:90:88:9c:a4:9e:b8:65:2a:e8:63:
ca:31:62:5f:5f:05:51:5b:06:99:7e:61:9a:f3:3b:d7:a4:94:
62:69:d7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org