Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/r4JDd0YWOojBYo-hB414Dn_dN7s.roa
File: r4JDd0YWOojBYo-hB414Dn_dN7s.roa (raw, json)
Hash identifier: 19QpyAVeKT3tynqnEFeJcBQI2zE6gVAgIF8dJwU6ISM=
Subject key identifier: AF:82:43:77:46:16:3A:88:C1:62:8F:A1:07:8D:78:0E:7F:DD:37:BB
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7A1946990A8C5A74FC724D1661952
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/r4JDd0YWOojBYo-hB414Dn_dN7s.roa
Signing time: Mon 01 Jan 2024 20:29:32 +0000
ROA not before: Mon 01 Jan 2024 20:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60849
IP address blocks: 62.72.165.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 08:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a1:94:69:90:a8:c5:a7:4f:c7:24:d1:66:19:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af82437746163a88c1628fa1078d780e7fdd37bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fc:8d:b6:92:a5:f2:72:26:eb:e9:dd:1f:e9:
95:72:87:45:8f:b0:cb:c4:9d:38:bc:fc:a9:06:af:
a0:9f:e0:1b:1a:63:09:88:0b:58:42:0a:78:fc:22:
43:63:c7:ee:a7:eb:e3:c5:c7:6d:fc:df:ec:21:73:
b0:24:1b:43:00:26:b4:19:14:02:00:08:b3:3b:ee:
ef:d5:13:48:ae:28:12:18:e0:8e:54:95:9d:b5:b6:
ea:70:18:2a:6b:d9:52:43:88:b8:4c:e5:fc:e4:46:
48:60:c1:2a:78:51:00:42:6b:6a:74:25:87:1f:d9:
f3:cf:27:28:c2:41:fa:25:5a:8d:1f:19:32:ce:1a:
2b:bc:88:27:74:03:3b:c5:f2:8b:43:e7:f4:25:b6:
14:e7:c2:70:bc:6f:c3:54:b9:4d:59:b8:39:fa:29:
38:24:fa:44:36:d4:f3:9b:c1:d9:a7:c0:de:e1:96:
b5:48:e9:fe:07:83:e9:9c:10:43:df:54:17:20:0e:
0d:62:8e:a9:4c:f4:78:52:7b:4a:82:41:ff:3a:bf:
05:6a:7a:57:38:47:73:ce:e7:e5:9e:0d:91:ea:ff:
bc:c3:3b:05:9e:38:b8:54:9b:f0:30:d6:f5:86:e2:
37:32:1c:f9:0c:17:bc:be:b2:4a:8a:3d:36:c9:cb:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:82:43:77:46:16:3A:88:C1:62:8F:A1:07:8D:78:0E:7F:DD:37:BB
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/r4JDd0YWOojBYo-hB414Dn_dN7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.165.0/24
62.72.169.0/24
62.72.179.0/24
Signature Algorithm: sha256WithRSAEncryption
86:4d:67:1e:df:93:1a:3a:4b:03:ec:8f:df:04:cb:98:3d:a5:
6e:c8:ce:a5:5c:35:27:b9:df:ea:5a:69:ae:f9:9e:9c:1d:c6:
6b:91:6e:6f:82:1f:50:da:9b:f8:85:c5:66:93:0a:88:8e:89:
c6:08:02:11:5f:cb:e4:6f:37:35:bf:53:75:b0:9d:38:2c:f2:
1c:1b:92:3e:9e:00:8b:bb:cf:ad:cb:ad:12:f8:8f:87:ae:db:
ca:2c:82:1d:ae:2a:ee:f4:37:3d:21:d8:55:d5:f1:b6:5c:09:
19:d2:c5:7c:19:b9:4c:8f:38:31:91:24:5c:bb:22:33:68:f4:
f1:3e:1f:f0:9d:53:e7:52:3c:94:dc:fe:0a:7a:05:68:43:5d:
b2:b2:03:57:97:7c:43:c7:03:34:25:74:b7:a5:a8:64:c6:51:
16:dd:d7:0b:b7:f6:07:dc:c8:be:4b:e8:0b:03:c5:4e:cd:6a:
f7:51:10:6b:1e:97:40:35:7f:6c:fe:3e:b6:04:4a:57:e6:57:
68:78:5d:5b:25:55:da:99:48:ea:fb:50:f5:2f:f7:6b:fb:83:
b7:b9:bd:f7:ea:d9:8a:16:c7:38:5c:a1:5f:b5:d9:2c:14:7f:
af:25:95:be:e5:42:69:84:c0:06:f9:c1:e8:c5:dc:7e:e5:a8:
e9:47:ec:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org