Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/z-7RCd_1PtvFzbElVtpatM6iGGY.roa
File: z-7RCd_1PtvFzbElVtpatM6iGGY.roa (raw, json)
Hash identifier: ePb4f5K7ng1njRB0Lq8wnjGbdOCAVTPV6McGtp4bNdM=
Subject key identifier: CF:EE:D1:09:DF:F5:3E:DB:C5:CD:B1:25:56:DA:5A:B4:CE:A2:18:66
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0189394BB92A5D8A378464BD725EF9FFB641
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/z-7RCd_1PtvFzbElVtpatM6iGGY.roa
Signing time: Sun 09 Jul 2023 06:16:50 +0000
ROA not before: Sun 09 Jul 2023 06:16:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 62.72.175.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jul 2023 05:09:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:39:4b:b9:2a:5d:8a:37:84:64:bd:72:5e:f9:ff:b6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jul 9 06:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfeed109dff53edbc5cdb12556da5ab4cea21866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:1b:cb:b1:0b:c2:b9:07:16:03:b0:4b:39:
4d:13:b5:41:68:43:21:19:af:dd:13:1b:08:6f:42:
37:70:1a:c7:7a:31:0a:60:22:46:5c:35:e4:ff:00:
1e:fa:2e:f8:34:26:ed:b4:34:12:ad:fc:e2:e2:31:
9c:ca:c6:64:31:6e:f4:7c:be:54:74:98:1e:33:13:
a9:68:f6:bc:f9:0b:4b:67:89:70:63:f8:07:17:b3:
5f:c2:0a:9d:74:0c:e6:ba:20:93:37:ae:e0:11:a6:
15:2b:f9:78:af:65:70:01:0c:d1:1e:91:92:6d:f1:
a4:e5:c4:f9:a4:b0:19:ee:5b:b9:aa:3e:11:c1:93:
12:10:62:a8:2b:76:7e:a3:e4:e2:a0:b7:9c:a0:e5:
64:75:b3:dd:fe:a0:a5:c3:a8:21:fb:3e:6f:9e:6d:
bf:1f:24:8e:60:6e:70:94:28:a5:db:a1:73:17:04:
90:b7:7c:4f:85:12:a7:13:e4:b8:81:e0:84:49:db:
b6:a8:4a:a4:db:78:7d:51:6a:c8:0b:d0:a2:a7:26:
e4:e4:da:93:df:f1:a2:0f:10:d8:71:98:bb:55:3f:
ba:3e:49:e4:11:4d:97:c8:57:28:21:97:cf:95:fc:
71:af:df:d8:da:fa:f2:c1:c4:3c:1b:30:1d:4f:4b:
fb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:D1:09:DF:F5:3E:DB:C5:CD:B1:25:56:DA:5A:B4:CE:A2:18:66
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/z-7RCd_1PtvFzbElVtpatM6iGGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.175.0/24
81.21.2.0/24
81.21.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:b3:ed:c2:1c:bb:85:35:cd:ed:f4:3d:e5:c2:ed:d5:be:c3:
f5:ed:23:0a:21:ee:a7:9f:a7:4d:fa:c8:62:a8:0c:8e:37:de:
38:7e:f0:6e:27:bc:c9:7d:a3:90:65:cb:19:d4:d3:8d:f3:42:
41:02:14:a1:42:be:14:d2:45:57:5b:c1:02:b0:a8:d1:4a:54:
3f:cb:26:a0:2f:38:4d:1d:7d:19:bd:9c:79:aa:bf:cb:68:01:
59:e7:ea:00:d8:51:99:fc:64:95:89:e4:df:f8:3b:8b:aa:9c:
2f:ff:d0:3d:b9:d2:ab:5f:43:d0:ba:0e:ae:36:a0:98:5f:a1:
7c:95:a4:08:b6:77:b1:89:f5:48:4e:25:57:e9:5b:1f:02:e4:
e4:0e:1e:ba:83:d7:d7:3e:eb:db:c5:f3:5e:cc:92:cf:8b:b4:
b3:18:09:d1:f5:28:46:64:53:21:63:98:ab:fe:55:80:87:56:
7d:14:1a:aa:a8:47:3d:ab:e9:1f:12:42:c5:60:8b:7f:26:6f:
99:ec:67:69:e1:c2:20:ea:38:c6:b9:8c:18:b5:58:7b:9c:3c:
96:3b:b6:6f:e3:bf:79:af:66:88:69:f1:3d:d8:b3:40:07:ed:
2b:da:92:c7:b7:72:12:cb:7a:76:47:e0:f3:e4:b6:15:67:c1:
c6:47:ef:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org