Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xJYrMUtWi8VyMRRwvcSgtEWAvK8.roa
File: xJYrMUtWi8VyMRRwvcSgtEWAvK8.roa (raw, json)
Hash identifier: WOn1xJDju4GZFbTNc+UPBcZOmPOKUg9imqFXr6fzqi0=
Subject key identifier: C4:96:2B:31:4B:56:8B:C5:72:31:14:70:BD:C4:A0:B4:45:80:BC:AF
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018A7DC00B3083C182AF7636FAA9AB941DFF
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xJYrMUtWi8VyMRRwvcSgtEWAvK8.roa
Signing time: Sun 10 Sep 2023 06:20:52 +0000
ROA not before: Sun 10 Sep 2023 06:20:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13830
IP address blocks: 62.72.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Sep 2023 13:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7d:c0:0b:30:83:c1:82:af:76:36:fa:a9:ab:94:1d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 10 06:20:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4962b314b568bc572311470bdc4a0b44580bcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:6f:10:46:46:c8:d9:b9:11:0e:b3:37:be:
a0:52:3e:d2:cd:95:0f:2b:f5:58:7d:10:ef:56:b6:
67:0d:e9:e2:58:57:dc:d7:e1:f3:62:d9:b9:b4:6e:
b8:a6:27:ac:29:18:97:bc:bd:3c:fa:4a:51:15:71:
9e:03:2c:84:94:d1:72:16:aa:11:c1:c6:3d:37:77:
ec:64:98:6f:6d:54:9f:97:34:18:9b:04:9b:7b:6a:
34:4e:a4:0d:48:f6:21:5f:53:eb:a3:1d:5a:98:13:
81:c5:b2:1e:ea:fb:dd:ad:d9:df:87:4d:bc:f4:c4:
67:55:89:09:16:a9:3d:8b:2b:70:41:2f:78:c3:92:
21:8d:d4:c8:1d:20:82:37:b6:06:19:0d:99:0f:d5:
90:ea:17:1e:7a:56:2e:44:6e:52:3c:b1:d0:d6:3e:
ea:53:5f:a5:6f:33:ac:7f:13:6b:8c:6c:bd:7d:0e:
0c:b6:0d:7b:44:e4:29:c6:5b:45:6c:9d:28:32:ee:
0f:c3:59:85:6f:eb:de:45:76:fc:5d:17:d5:9e:7b:
17:06:6d:d4:92:63:9a:0b:da:bb:95:79:5f:e4:41:
c2:95:47:9b:6b:22:af:b4:8a:39:7e:42:a2:93:a9:
eb:fb:60:a7:fe:b5:ef:6b:71:3b:a9:b4:f7:b6:1c:
18:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:96:2B:31:4B:56:8B:C5:72:31:14:70:BD:C4:A0:B4:45:80:BC:AF
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xJYrMUtWi8VyMRRwvcSgtEWAvK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fd:9f:68:57:b6:75:85:b6:69:6f:4a:3d:e6:92:c1:0c:9c:
9d:ed:d5:c3:16:66:a0:20:ad:aa:88:52:3c:9e:cb:93:ac:33:
f3:f0:dd:ac:04:7b:7d:38:8b:69:09:0a:bd:41:35:9b:11:c2:
d0:d1:14:46:e1:c5:52:19:c2:7f:d1:d5:d6:6d:44:ef:34:47:
c3:b0:af:a6:3a:4a:3f:05:17:01:1c:c9:6e:20:94:ae:8e:5c:
bd:70:98:d7:93:e3:dd:0e:7e:af:91:4b:f6:a4:16:fe:b1:de:
d8:fa:64:58:d2:44:1f:ba:cd:b9:6c:47:ff:40:c6:f9:5c:d7:
46:32:6f:09:c0:29:b6:ed:46:6a:80:3e:10:5a:ec:6f:b8:06:
5c:68:61:aa:27:2a:be:16:df:1d:b6:68:68:50:05:dd:b6:0f:
5d:8d:16:f1:01:c5:96:d1:71:fb:28:e7:3c:92:9f:5b:52:11:
c4:b2:40:1f:ce:34:b2:f4:07:00:0a:80:21:eb:e9:8b:87:c3:
be:c3:ca:66:31:bc:67:c5:62:fd:ac:27:76:a8:7d:e3:20:09:
d1:27:59:cc:c1:85:c5:57:c6:58:86:fc:a5:f4:01:7a:e0:d9:
52:ca:a4:87:f8:97:d7:cc:34:ec:fe:a9:f5:74:9f:99:2c:cb:
4b:6c:af:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org