Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/yNxllCQWQBc6_GZfwD5lFbnMK8E.roa
File: yNxllCQWQBc6_GZfwD5lFbnMK8E.roa (raw, json)
Hash identifier: MFDG5tGYN77MgOt4bxwVkv9RgMw8FMKX8zf47goYVyI=
Subject key identifier: C8:DC:65:94:24:16:40:17:3A:FC:66:5F:C0:3E:65:15:B9:CC:2B:C1
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7A8B53CEFF1DB514872E573F85467
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/yNxllCQWQBc6_GZfwD5lFbnMK8E.roa
Signing time: Mon 01 Jan 2024 20:29:34 +0000
ROA not before: Mon 01 Jan 2024 20:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206505
IP address blocks: 62.72.176.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 11:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a8:b5:3c:ef:f1:db:51:48:72:e5:73:f8:54:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8dc6594241640173afc665fc03e6515b9cc2bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:66:25:a3:0d:31:67:83:64:11:56:16:bf:
79:4c:48:63:ac:55:54:5a:0b:a4:53:a2:5d:a1:10:
9b:69:e2:f3:8e:e6:50:1b:14:ce:1d:7f:9d:53:53:
02:78:ca:3f:a7:34:bb:f1:27:9c:45:1f:f4:33:ea:
8c:94:2d:9e:b7:8e:68:e7:69:8e:9b:c7:52:10:64:
b9:96:54:6d:e4:5b:11:b4:e3:49:36:72:f7:53:3b:
11:10:18:03:e1:ae:33:25:9e:05:20:b3:5b:cf:0a:
41:b2:98:49:25:9a:f8:fa:46:3b:45:e3:96:3f:9b:
08:96:8b:9e:a0:ae:fb:82:e2:1a:24:91:8f:27:f5:
d8:a0:a1:11:ac:d3:01:a0:50:75:ce:4c:16:22:43:
91:59:c6:e4:ee:32:6d:5e:79:af:73:38:ad:a5:59:
09:9d:85:10:5f:3b:66:ab:48:62:94:60:c4:2a:7d:
88:fa:9e:bb:5f:8e:ca:c1:67:88:20:45:62:fe:d3:
54:fa:fd:6e:59:82:fe:65:7c:e8:a1:86:99:34:c3:
cc:a8:75:7e:65:da:05:e1:07:ad:c2:04:ec:19:03:
67:12:af:74:be:74:27:b4:e9:4b:50:8a:2b:65:72:
50:47:01:35:df:e0:80:f5:05:0c:31:a2:2d:29:c6:
b8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DC:65:94:24:16:40:17:3A:FC:66:5F:C0:3E:65:15:B9:CC:2B:C1
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/yNxllCQWQBc6_GZfwD5lFbnMK8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/24
62.72.190.0/24
Signature Algorithm: sha256WithRSAEncryption
50:be:91:ae:68:e5:76:3e:df:88:28:63:96:d7:ef:64:a7:61:
76:96:d5:3a:92:41:99:6e:61:4d:89:2f:c9:02:82:15:b9:e1:
80:5c:e6:38:68:a1:18:53:73:18:f3:a7:28:19:5c:d3:12:e9:
df:a9:d7:2e:fa:63:69:c0:98:30:a0:1b:fb:4d:9c:d3:1f:21:
d2:e8:7d:e4:ac:94:93:1d:f6:41:75:ba:ba:5b:77:9b:61:91:
5c:1d:98:e4:da:18:59:4c:1a:3c:5a:3e:17:22:f6:4d:29:ec:
d8:cb:e0:d1:40:1b:f4:aa:6d:73:5c:86:5d:48:a3:2a:5b:9d:
e9:13:49:1e:f3:b9:07:5d:41:a3:93:e1:b6:ef:ae:33:53:36:
31:ae:19:5a:e4:85:1a:c1:82:b3:c0:f9:65:7d:92:7b:df:c2:
fe:21:67:c7:8d:69:ed:8b:49:62:94:63:95:fc:19:8e:c1:dd:
28:2c:64:bf:f5:09:20:ab:39:7e:77:0c:30:ad:de:3c:f6:ed:
b7:6a:4a:16:ba:10:8f:d2:b4:76:10:85:dc:da:5a:de:5a:4a:
58:39:84:49:0d:1a:91:15:6f:2b:20:71:ed:4e:8b:a7:e2:a1:
d9:69:d7:82:64:57:91:33:0e:c4:d9:bc:0a:0d:f4:4f:12:82:
24:c2:32:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org