Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ylYsgkxYVeeNmvMMw21OM2eN8KM.roa
File: ylYsgkxYVeeNmvMMw21OM2eN8KM.roa (raw, json)
Hash identifier: 87OCZDcxj+wWcDX6bH4SlPtGqXuRzW3TAVm7C1agvjU=
Subject key identifier: CA:56:2C:82:4C:58:55:E7:8D:9A:F3:0C:C3:6D:4E:33:67:8D:F0:A3
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0186BFE9928CB38E3948F6BDD8DE139C3BAE
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ylYsgkxYVeeNmvMMw21OM2eN8KM.roa
Signing time: Wed 08 Mar 2023 06:30:00 +0000
ROA not before: Wed 08 Mar 2023 06:30:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 62.72.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 12:09:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bf:e9:92:8c:b3:8e:39:48:f6:bd:d8:de:13:9c:3b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 8 06:30:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca562c824c5855e78d9af30cc36d4e33678df0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:a3:d2:d9:be:15:28:aa:e4:c3:0a:cc:8e:
36:45:7f:32:a2:0c:07:af:47:63:20:30:17:bc:3e:
58:c1:4e:61:3a:28:f4:6b:ac:d8:62:6a:1f:02:59:
ee:a9:da:8e:e8:1c:3a:97:3d:50:a8:72:54:5c:4b:
27:03:a1:5b:d6:ab:25:ea:3a:ff:e8:6e:c9:ec:b4:
13:a0:51:ac:70:7c:da:6f:31:24:d2:07:c4:60:46:
31:1b:49:c1:a2:c0:54:23:d9:d9:8f:85:71:17:69:
be:ce:08:a7:39:8d:b2:26:18:96:c2:25:51:ac:04:
a5:09:98:ea:85:e5:75:c4:d2:d1:f2:3b:4d:2e:5a:
36:eb:72:2d:9b:58:cf:ed:5d:e4:0e:6d:57:cf:93:
f2:1f:4c:03:63:51:ce:1d:0d:fb:a9:46:8e:8d:29:
51:18:6a:38:69:1b:90:e9:dc:ec:1d:7a:df:3c:e4:
b0:d4:1a:a3:65:96:73:e2:de:0e:91:8d:ac:8b:a6:
8f:18:55:91:c0:db:6f:b7:c8:47:e0:40:69:e8:bb:
d0:a3:68:16:39:45:c1:71:f5:25:04:51:8a:22:dd:
7f:44:ee:db:df:69:78:98:bf:af:71:ae:9c:17:ed:
bc:48:94:83:2f:eb:92:8a:ba:dd:40:06:94:fc:e1:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:56:2C:82:4C:58:55:E7:8D:9A:F3:0C:C3:6D:4E:33:67:8D:F0:A3
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ylYsgkxYVeeNmvMMw21OM2eN8KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.175.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:1d:70:8a:69:c0:9d:a7:3a:d6:87:bb:17:b8:d4:db:31:3a:
c3:4a:fd:17:32:be:8d:d7:86:62:78:2a:51:a2:20:24:ba:25:
89:6d:c2:f3:67:81:88:1f:74:bd:48:7b:9f:c9:2f:07:ff:a1:
1d:e1:c5:98:6d:31:b8:fc:59:1f:df:52:ab:d6:66:b0:42:44:
7d:68:21:08:e7:7c:d9:8e:21:e9:dd:69:a8:e1:dd:97:ee:7d:
be:1f:18:ef:0c:2e:5e:12:da:3b:c1:c1:a0:88:e3:32:2c:cd:
0d:6b:59:7e:d2:d7:e5:35:1b:db:69:65:f7:e2:a9:38:91:94:
66:fe:ed:71:e2:63:05:4a:96:5b:e9:5e:34:0b:0a:71:d8:b9:
74:56:9c:cb:cd:4e:0e:04:0e:8e:9e:57:5d:d5:e1:cf:18:d3:
d4:85:c1:da:69:2e:69:f1:47:ce:a0:ad:82:d7:ed:a3:eb:f7:
41:6d:13:e2:e6:5a:a8:50:11:42:bf:91:05:59:0e:73:ac:3a:
ad:73:0e:a3:3e:36:fc:89:02:26:60:10:9d:cb:40:c9:1f:f0:
86:18:a0:eb:ff:35:88:f8:1a:4f:ad:0b:35:0a:c2:dd:b5:f7:
d3:4e:81:36:15:73:75:f6:af:fc:89:5b:3f:28:2d:7d:1c:c5:
62:83:fb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org