Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/tiEfWvuBwQLJED-x6s-cT9wo6e0.roa
File: tiEfWvuBwQLJED-x6s-cT9wo6e0.roa (raw, json)
Hash identifier: zyVOudpm9+nz5KPSnf0erIF2xRw6tX+7LPJ+lhPOnNk=
Subject key identifier: B6:21:1F:5A:FB:81:C1:02:C9:10:3F:B1:EA:CF:9C:4F:DC:28:E9:ED
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018737A727C4B6EDCF4563761427D4D14C53
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/tiEfWvuBwQLJED-x6s-cT9wo6e0.roa
Signing time: Fri 31 Mar 2023 12:31:54 +0000
ROA not before: Fri 31 Mar 2023 12:31:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Apr 2023 09:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:a7:27:c4:b6:ed:cf:45:63:76:14:27:d4:d1:4c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 31 12:31:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6211f5afb81c102c9103fb1eacf9c4fdc28e9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:6d:df:70:11:a0:37:c0:f3:ed:4a:15:b9:
be:8e:90:29:88:b9:f6:84:70:bf:c6:e1:31:c3:c9:
20:dc:ca:1b:55:e9:cb:83:1e:59:b5:9e:62:a4:9a:
37:10:4a:eb:b3:78:c2:96:a2:33:41:d4:37:54:3e:
49:3c:fa:2d:be:37:4a:5f:1d:11:70:f9:26:05:b6:
fc:03:bc:29:b1:be:40:84:5b:cb:83:b0:75:60:1b:
ab:bc:11:05:5e:77:14:e2:f1:17:94:19:c2:cf:25:
f4:b1:31:87:70:98:38:45:3b:a4:9a:a5:c4:1b:dc:
b3:6c:d5:b3:e4:2a:88:9c:66:80:eb:b4:24:05:e3:
b8:d2:fc:6c:e3:73:7b:c8:fd:df:3a:03:1f:9d:a6:
45:10:a0:94:46:98:6b:59:b5:5d:03:a5:ab:0c:cc:
0e:16:8c:18:bb:62:6b:70:83:fe:38:fe:d9:3d:e3:
68:6b:0d:32:74:9d:fb:ed:36:49:34:ff:24:21:e2:
1d:c6:dc:47:56:6f:62:c7:08:8a:4d:2f:9a:b0:6d:
77:2d:0c:fe:de:95:bb:c3:d1:9a:18:28:ff:1b:a3:
73:64:62:1a:70:07:a5:11:87:d7:e3:a2:07:b6:5b:
64:e7:d8:b4:fa:fb:3c:19:e3:d8:78:5f:11:c0:71:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:21:1F:5A:FB:81:C1:02:C9:10:3F:B1:EA:CF:9C:4F:DC:28:E9:ED
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/tiEfWvuBwQLJED-x6s-cT9wo6e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.185.0-62.72.187.255
Signature Algorithm: sha256WithRSAEncryption
84:98:f1:1c:f4:e7:6b:55:2c:80:60:08:c2:62:7f:38:f4:fd:
97:92:41:82:60:41:84:99:14:72:68:7b:a2:c6:87:ab:3f:f8:
30:6f:08:db:85:47:ae:da:a4:f6:53:3e:7d:6f:ae:e9:36:8c:
ee:d6:34:74:11:6b:fc:21:4b:45:05:f4:63:ca:6b:53:01:9b:
9c:e7:0c:e3:50:ab:0d:06:ac:49:ae:f1:df:ca:09:4c:4c:e0:
8f:2a:58:c4:98:e6:c7:83:84:3c:3c:ef:06:94:50:db:72:90:
78:9d:60:61:d6:a1:f1:6e:63:5a:84:01:e9:9d:47:a4:f0:96:
f6:52:3d:53:e1:5d:c8:2a:db:76:ea:bd:06:ef:2d:67:d8:95:
8e:9d:6c:ad:b7:fa:45:86:2e:69:56:42:7c:31:c5:5f:5a:f8:
b1:fc:38:7c:77:a8:f4:fe:c9:f5:d9:4b:ca:23:a5:e5:bb:73:
e6:c7:6b:06:55:34:e1:24:b4:b8:e9:88:82:5f:24:c4:4f:48:
24:0c:3b:b5:e4:f4:1a:9e:7e:59:58:71:b3:ba:b2:94:05:c0:
ee:d9:0e:a3:2b:52:3f:96:52:de:f5:78:eb:af:08:21:7d:e6:
a8:23:6e:03:42:94:33:8d:c0:90:a5:89:83:4a:c4:e4:c6:43:
db:3b:bb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org