Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/qeqB5sPGWz7uHBpuzJwU7c3RQ_o.roa
File: qeqB5sPGWz7uHBpuzJwU7c3RQ_o.roa (raw, json)
Hash identifier: zvpNqfE2RGPysa9Rpv7DjS2AV9L18AWc16zkarMn41g=
Subject key identifier: A9:EA:81:E6:C3:C6:5B:3E:EE:1C:1A:6E:CC:9C:14:ED:CD:D1:43:FA
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018B24171AA54CB54E9DEE630C868525314C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/qeqB5sPGWz7uHBpuzJwU7c3RQ_o.roa
Signing time: Thu 12 Oct 2023 13:32:55 +0000
ROA not before: Thu 12 Oct 2023 13:32:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42055
IP address blocks: 62.72.177.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 18:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:24:17:1a:a5:4c:b5:4e:9d:ee:63:0c:86:85:25:31:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 12 13:32:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9ea81e6c3c65b3eee1c1a6ecc9c14edcdd143fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cc:1e:9d:a8:55:55:a4:aa:b1:a3:93:64:ed:
a2:42:66:71:92:7d:ce:40:81:44:b3:b3:fe:6b:a7:
fb:4b:c2:4b:f7:04:1a:ea:82:79:94:ec:97:66:0f:
03:40:6d:6a:53:d2:38:ec:94:f3:05:f4:0f:56:d1:
c8:d4:00:86:fb:f0:6f:df:e0:9f:34:be:78:82:67:
05:4a:7c:ca:6c:3a:03:09:38:2b:3d:cf:ae:ae:cf:
b1:35:ff:b8:5e:7f:cb:27:eb:f3:94:73:ac:32:29:
e8:50:4b:e7:87:09:b9:4d:23:51:73:ec:9e:25:5f:
98:19:4c:88:3b:42:b2:47:db:9d:bb:dc:cf:3c:a8:
19:7a:86:51:d4:17:56:05:5b:9a:6a:94:5d:fc:a9:
1c:79:78:92:57:77:a3:2b:c7:0e:53:f9:93:d8:06:
43:ce:2d:22:80:6c:c4:13:8f:84:42:38:bf:b5:a5:
fb:3b:28:3a:88:fd:ac:19:68:36:bf:bb:03:58:e0:
b6:38:c0:52:83:f9:5a:71:04:a5:64:7c:e2:4f:4d:
70:85:69:ca:3d:55:26:8e:1e:1b:92:9a:9d:6b:16:
77:94:0f:84:ea:62:e0:db:a6:3d:a9:97:14:f7:56:
ae:60:e5:f6:31:ca:94:e7:f4:39:ec:c1:56:0b:bd:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EA:81:E6:C3:C6:5B:3E:EE:1C:1A:6E:CC:9C:14:ED:CD:D1:43:FA
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/qeqB5sPGWz7uHBpuzJwU7c3RQ_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.177.0/24
62.72.182.0/24
62.72.188.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:a3:3e:67:e4:a3:1f:d2:31:6b:48:34:46:fe:f3:59:df:f3:
16:77:a2:68:d7:af:34:3e:9e:b9:65:3c:04:3e:05:63:4d:38:
18:a3:f3:a3:6a:34:8d:75:d6:94:dd:a6:31:e9:1e:2a:56:3f:
0b:52:d5:7f:3f:86:4c:19:38:b5:ea:a3:5d:9c:d1:e2:6b:d8:
2f:14:54:9b:2c:c7:58:b1:be:af:53:fc:9f:57:6c:60:f4:c5:
e6:47:7c:41:e0:06:5f:41:8f:e8:2f:06:d0:ab:2c:1c:c2:64:
ec:20:2e:72:4e:be:df:90:78:e1:4a:ba:7e:57:03:11:ba:fa:
44:25:1a:13:4a:8d:17:7b:25:a8:35:08:a3:2e:99:3a:ec:d7:
03:9f:e5:6e:c3:06:0d:eb:4f:6d:72:2a:5b:c4:cb:aa:80:5c:
ba:e6:54:ff:ba:de:cd:a1:e3:84:6c:44:25:cd:f8:84:1a:63:
07:c9:0b:54:cf:3d:b1:f4:5d:f3:1d:15:11:b5:fd:85:3b:71:
08:be:2b:23:64:2c:09:40:27:c7:c9:d1:4d:37:1e:4a:c5:42:
bd:ca:f7:8b:2b:41:27:40:bc:dc:16:33:58:92:53:e8:14:e5:
30:ac:fd:3c:16:b2:07:e6:78:8f:30:61:6c:1b:6c:62:8e:3f:
dc:80:47:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org