Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/slEmG3ZY8cyNz5VEBvdeLEVPc10.roa
File: slEmG3ZY8cyNz5VEBvdeLEVPc10.roa (raw, json)
Hash identifier: 1gYBLNPcs2LfDgI3f0xLz3/xaFABEPWBNWKAYukYiBY=
Subject key identifier: B2:51:26:1B:76:58:F1:CC:8D:CF:95:44:06:F7:5E:2C:45:4F:73:5D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018750DAE2F750FEC3C80A3F658BCB9341D2
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/slEmG3ZY8cyNz5VEBvdeLEVPc10.roa
Signing time: Wed 05 Apr 2023 09:58:54 +0000
ROA not before: Wed 05 Apr 2023 09:58:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213305
IP address blocks: 62.72.164.0/24 maxlen: 24
62.72.160.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Apr 2023 13:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:da:e2:f7:50:fe:c3:c8:0a:3f:65:8b:cb:93:41:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 5 09:58:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b251261b7658f1cc8dcf954406f75e2c454f735d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:ae:bf:f9:16:2b:dd:9c:a1:c4:0a:08:97:
61:bf:0f:6c:e7:b1:1d:a8:c2:de:9f:e4:aa:40:3b:
aa:5f:9e:25:dd:28:87:61:c3:1b:cd:a0:ae:d2:05:
b5:10:b5:b0:0b:ff:47:b5:b7:6e:ae:bf:2c:b0:b3:
30:1c:8a:00:3c:98:72:b3:31:49:f0:43:19:fb:50:
74:fb:3a:8e:7d:22:06:b7:96:48:52:fb:ad:02:10:
cf:35:91:df:2c:b7:11:a0:a7:b4:49:c8:a1:32:70:
85:83:c4:93:d4:75:da:1c:04:07:ac:92:2a:c1:8a:
ee:b2:d6:21:1b:de:1d:38:8b:bf:ba:a4:5c:f1:4b:
1a:5d:d7:4b:27:b6:8f:ed:42:c9:57:5b:f4:0f:59:
ef:a8:d0:96:52:bd:5a:ac:1e:cc:ad:71:d7:93:07:
62:9d:34:07:65:33:81:3a:e3:27:f8:ac:f2:c4:a6:
11:42:d2:d1:4c:ed:b0:dd:fc:5a:95:19:d2:27:a0:
55:5d:45:66:03:8c:75:f4:86:c9:7f:08:03:fb:97:
66:1f:62:d0:08:68:6b:19:f4:c3:fd:66:71:61:d8:
91:d2:28:19:bb:00:78:0f:f1:87:47:e4:64:61:f2:
58:3e:4f:e2:12:96:a4:f0:25:67:91:98:96:e7:f7:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:51:26:1B:76:58:F1:CC:8D:CF:95:44:06:F7:5E:2C:45:4F:73:5D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/slEmG3ZY8cyNz5VEBvdeLEVPc10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0/24
62.72.164.0/24
62.72.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:5e:7e:36:63:92:86:5b:ae:ab:ee:ee:8b:3c:0d:b0:62:84:
f0:14:67:42:4e:c3:92:e4:36:c4:49:96:c1:97:2b:bf:18:7f:
0d:8f:40:02:36:11:1f:0f:c1:2d:97:a0:d8:eb:c3:43:f3:a7:
0d:a1:94:4e:cd:cc:00:9c:98:d9:a1:c0:36:8f:91:66:9d:b2:
59:85:59:68:23:b8:d3:d1:83:52:9b:94:c5:80:4d:40:f2:be:
bb:c6:c0:d4:2b:d3:d2:f1:80:a0:6f:fd:eb:c4:2e:a8:5d:8b:
e2:f7:0c:fd:ec:6c:7b:90:3a:d5:df:4f:b7:ef:a6:18:e2:30:
84:28:32:d2:07:57:17:b3:34:ff:b5:c2:25:7a:7c:52:d7:56:
c8:54:5d:0d:ab:37:8e:fd:5e:29:d4:d7:85:b1:28:07:9b:a2:
56:6d:40:83:86:c9:9c:ea:83:fa:51:71:c8:8b:5c:05:fc:14:
3e:39:3c:d4:2b:6c:e6:27:1b:2f:f7:1d:23:d0:a1:c1:34:81:
d8:ca:ef:df:ad:91:c5:39:52:3d:93:d3:d2:65:e8:dc:72:d3:
69:dc:af:60:e2:49:0c:4a:8f:1c:1e:d2:60:0d:59:ef:7d:be:
47:ef:b3:09:85:a9:10:bf:5c:fa:33:d1:4c:7b:46:5f:c4:e5:
38:8b:6c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org