Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vLQPufueE7QCsvZLU3vqQMQdQl4.roa
File: vLQPufueE7QCsvZLU3vqQMQdQl4.roa (raw, json)
Hash identifier: EcOTc//bUAF0hH3Uh0DIZj9On3PaygrCyuxciZP/Tt8=
Subject key identifier: BC:B4:0F:B9:FB:9E:13:B4:02:B2:F6:4B:53:7B:EA:40:C4:1D:42:5E
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018882D6C23D247F8E7B9008321885B7078D
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vLQPufueE7QCsvZLU3vqQMQdQl4.roa
Signing time: Sat 03 Jun 2023 19:58:12 +0000
ROA not before: Sat 03 Jun 2023 19:58:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 62.72.175.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Jun 2023 12:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:82:d6:c2:3d:24:7f:8e:7b:90:08:32:18:85:b7:07:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 3 19:58:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcb40fb9fb9e13b402b2f64b537bea40c41d425e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cc:00:6f:1b:ff:fc:c1:46:61:42:db:5c:cd:
12:fc:1f:d1:c4:02:e3:22:0a:10:ea:30:86:cc:bf:
ca:4a:fc:55:5c:98:01:37:2d:06:a5:aa:4b:d2:5d:
d5:f0:1c:4d:fb:fd:d3:d0:0e:6f:d9:89:f0:69:3c:
a7:4f:de:14:b9:02:97:bc:f8:12:ee:a3:b4:6a:f5:
ad:a2:11:07:a7:ae:92:33:17:88:00:cc:6a:59:ee:
bc:dd:41:62:e3:b9:65:2e:1e:60:49:aa:55:06:63:
6d:62:c4:a5:e6:56:55:85:9c:01:21:8b:63:e9:2e:
70:4e:07:78:85:a9:16:95:19:19:7f:4d:5a:b5:38:
0a:dc:6c:b1:21:9a:fc:8f:49:f5:b1:bd:16:3a:64:
b3:5a:a3:7b:9f:cc:5d:ac:ae:09:49:0f:20:46:ca:
33:df:52:6c:f8:69:c1:90:87:1d:f0:28:4f:d5:53:
dd:55:33:13:d8:3a:64:ed:02:2b:14:79:3f:80:2f:
e6:3d:74:f6:a9:fb:20:44:05:8a:56:b7:17:f6:84:
1d:80:56:cc:fb:70:47:49:e7:85:0f:88:32:72:3a:
3f:d0:98:63:a5:2c:74:52:67:71:a8:a9:c4:ed:ee:
ab:8f:6d:a3:9b:e0:f5:38:c5:0b:9e:de:f0:c4:2a:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B4:0F:B9:FB:9E:13:B4:02:B2:F6:4B:53:7B:EA:40:C4:1D:42:5E
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vLQPufueE7QCsvZLU3vqQMQdQl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.175.0/24
81.21.4.0/22
Signature Algorithm: sha256WithRSAEncryption
55:14:72:b5:6e:19:30:7b:a6:b9:d9:f1:c2:fc:96:6f:48:eb:
c0:2c:46:f3:b3:9a:c6:59:c3:b8:49:ac:da:7e:c5:73:4f:b2:
ba:a0:c1:3a:77:55:00:8d:37:77:73:49:78:f9:43:fd:98:79:
6a:c8:2b:d3:09:4f:48:5b:e2:dd:26:c2:6d:f1:1b:60:03:ab:
cd:16:b1:d8:7e:20:e9:fa:f9:51:e0:c0:40:fe:40:78:4c:2d:
38:39:18:b8:53:55:23:d8:d8:73:5b:4f:27:81:74:82:98:c7:
57:bf:69:be:a2:4e:65:09:ea:e4:35:12:23:58:a8:68:62:87:
22:e2:89:55:d2:3b:50:30:26:5d:ed:77:29:cc:3b:01:a8:4e:
5c:94:f1:68:97:6a:d2:59:be:6f:57:76:cf:98:71:c3:a1:2b:
c3:9a:e5:37:e7:82:11:fb:20:8a:a3:8e:f0:65:ff:dd:3f:b9:
2c:56:56:7c:fe:37:b5:04:0a:d9:4b:86:fa:87:6e:60:c6:fc:
cf:fd:15:01:e5:10:45:f3:12:71:95:df:6d:d0:70:23:42:f9:
e8:fa:dd:17:5e:79:31:df:b9:23:7a:bd:6f:ed:cf:ac:74:1c:
a5:be:71:c7:f6:97:81:ed:2b:a7:e4:36:71:aa:3b:97:ad:42:
cd:a4:9a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org