Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vIhNWMRLsg_GdUEUw28jJCbJnAo.roa
File: vIhNWMRLsg_GdUEUw28jJCbJnAo.roa (raw, json)
Hash identifier: WpB0ymRhD5R791SICFS6ycwWnAEo4SusQ5WM4GWbpnI=
Subject key identifier: BC:88:4D:58:C4:4B:B2:0F:C6:75:41:14:C3:6F:23:24:26:C9:9C:0A
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7A0D673F54B4813668ABD06A4BD7A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vIhNWMRLsg_GdUEUw28jJCbJnAo.roa
Signing time: Mon 01 Jan 2024 20:29:32 +0000
ROA not before: Mon 01 Jan 2024 20:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57974
IP address blocks: 62.72.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 07:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a0:d6:73:f5:4b:48:13:66:8a:bd:06:a4:bd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc884d58c44bb20fc6754114c36f232426c99c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:20:b3:eb:c1:a9:ed:3b:77:0b:8d:78:00:
1f:15:2c:40:b1:36:f0:dd:2c:2d:ba:09:6c:63:5a:
e8:12:6b:e4:d4:bd:a3:56:24:d3:04:41:54:8f:42:
7e:e6:4d:f4:d2:5c:90:17:59:7a:61:f0:7c:a9:d9:
da:f7:2e:e5:01:45:3c:24:3f:b9:fb:0e:ac:7d:67:
67:f0:f7:15:06:0c:bd:a6:f4:d0:56:ed:e2:1c:3e:
99:cc:d1:53:7a:0e:14:f9:dd:3c:e8:01:57:b6:35:
ea:a0:b9:1d:a3:25:4b:f2:ba:3a:68:db:b8:ee:9b:
b0:18:80:f8:c6:af:18:41:1e:60:da:34:4a:49:a7:
c5:4b:0f:90:5b:d6:03:5a:04:a2:c3:85:7f:af:6c:
3c:17:f5:66:f9:2e:f8:1f:6c:0d:88:08:60:ea:52:
b1:0a:8d:ba:dc:9d:89:52:11:8f:c3:f3:0b:88:a7:
11:e4:b9:33:89:94:67:cf:d8:d0:f7:08:97:8d:67:
15:28:28:f6:fe:d4:96:19:c6:aa:fd:48:8a:e1:99:
0d:1f:8d:57:93:9c:54:97:c8:d7:4b:3c:0f:65:ab:
94:4d:5e:78:5f:93:b7:d3:eb:32:7a:88:fa:7a:ec:
86:94:b3:08:fd:25:13:a1:2a:bc:cd:44:f0:eb:b0:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:88:4D:58:C4:4B:B2:0F:C6:75:41:14:C3:6F:23:24:26:C9:9C:0A
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vIhNWMRLsg_GdUEUw28jJCbJnAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b2:01:0f:89:b5:98:49:11:35:04:0b:c4:2b:fb:e7:6d:a9:
cd:3e:0e:10:ab:63:2c:5f:61:06:a0:66:60:bb:c4:8c:7d:b4:
d6:db:cd:30:26:7d:3a:45:e6:65:01:3d:1c:3a:f3:cb:a2:ee:
d1:b4:3d:e9:af:f7:14:97:8d:3d:f8:f6:09:31:59:21:bc:c8:
bc:3c:70:37:a6:36:47:e3:0e:eb:b8:bf:b8:44:aa:88:58:ce:
d1:44:73:e9:30:a1:90:8c:d5:a8:04:50:14:c3:1e:44:e4:00:
16:73:de:87:f4:fa:cf:ed:89:f7:86:2d:c7:44:f2:43:5d:aa:
61:fe:50:6e:2a:60:3a:b5:0a:8d:62:fc:98:e7:3d:a7:a3:74:
cb:20:06:43:b4:35:33:8c:bc:2a:fe:64:b5:37:85:37:45:1d:
79:29:f9:d4:55:3e:50:d0:00:7b:de:8e:73:06:cd:9a:da:0d:
d5:75:d5:8f:68:3e:79:04:5a:3e:6a:b7:16:1f:17:84:f9:03:
4a:76:c7:cf:c3:54:a6:b9:2d:11:85:19:5a:3c:35:06:91:e2:
5a:6a:b6:e1:1f:4c:38:52:1a:66:76:de:a3:45:99:57:42:1a:
2e:cd:68:68:b6:07:89:07:42:c8:d7:e9:5c:d6:83:39:ee:43:
60:81:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org