Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/zK4mkwLd8Rq9LVufOABRpf40Br4.roa
File: zK4mkwLd8Rq9LVufOABRpf40Br4.roa (raw, json)
Hash identifier: SDl3ciReZAyudGYoJWM3ZeswtugSC6Csaj6uK2yKgXE=
Subject key identifier: CC:AE:26:93:02:DD:F1:1A:BD:2D:5B:9F:38:00:51:A5:FE:34:06:BE
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018BC272ADF1B34FA18879E850184221E8F0
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/zK4mkwLd8Rq9LVufOABRpf40Br4.roa
Signing time: Sun 12 Nov 2023 07:32:57 +0000
ROA not before: Sun 12 Nov 2023 07:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60849
IP address blocks: 62.72.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Nov 2023 07:58:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c2:72:ad:f1:b3:4f:a1:88:79:e8:50:18:42:21:e8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 12 07:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccae269302ddf11abd2d5b9f380051a5fe3406be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:31:ac:36:31:c1:0f:a5:72:e6:c5:d7:64:
66:f8:f9:e8:8b:dc:27:ac:f9:17:8c:2b:9e:61:06:
98:52:25:d1:2f:4f:96:61:2f:67:0a:cb:8e:1e:92:
84:0c:63:8d:a4:b7:01:a1:86:84:13:7b:02:4a:b1:
86:86:15:ef:7a:39:71:87:36:4f:91:fe:16:74:0c:
4c:cb:78:f1:9a:a4:70:9d:f7:2e:2b:62:da:e8:7d:
94:b0:b8:25:75:57:92:3b:cf:8c:d4:ad:15:25:38:
7f:96:3d:ea:09:1a:84:69:0f:22:4d:83:9b:42:7a:
22:af:ac:44:61:77:f0:89:0c:ad:6b:fa:d0:ae:1d:
14:d0:a5:b7:02:59:7d:08:06:aa:54:6d:6c:02:7f:
60:d4:a6:73:68:c6:90:ca:9b:0b:ef:da:10:47:e0:
11:a0:48:54:9a:f6:d8:ce:7f:54:22:5b:35:0e:b7:
ea:71:be:5e:cc:df:32:d2:23:81:35:80:54:7a:a5:
bd:47:77:66:c3:bb:c2:c5:c1:97:2a:07:e7:cf:4c:
a7:9a:df:5f:31:1e:99:ab:a6:90:70:23:b8:55:b4:
38:e7:a0:a7:ce:81:b9:8e:5c:d8:ad:6a:82:1d:63:
46:81:50:e1:03:02:36:f8:ab:e1:d2:d7:fb:cf:3c:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AE:26:93:02:DD:F1:1A:BD:2D:5B:9F:38:00:51:A5:FE:34:06:BE
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/zK4mkwLd8Rq9LVufOABRpf40Br4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.169.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e4:be:ef:ec:4d:47:08:a9:ab:cc:df:53:c6:cd:0f:85:10:
be:7f:3d:02:90:a8:a3:ac:66:35:82:50:9f:59:ab:84:40:7f:
81:91:6d:04:12:80:d3:20:e8:ad:22:15:94:2e:7f:e5:d6:81:
af:b8:7e:17:94:89:f7:33:af:8b:89:1e:52:a6:d4:3e:51:dd:
68:8e:fe:83:a4:9c:35:3c:4f:18:b4:59:ea:0a:da:88:5c:b7:
71:65:7f:96:92:1a:a3:20:ce:6c:4e:57:fb:50:77:71:f6:d5:
6a:e7:12:1c:11:14:82:2a:ec:0e:09:1a:39:17:50:74:e1:bd:
f9:97:7e:87:0d:7d:5b:38:3e:12:90:3c:9a:c7:37:7f:cb:b4:
76:20:eb:02:d3:af:e6:4b:42:db:4f:43:de:e8:bd:2d:33:34:
5b:b7:ea:1b:fc:b3:d1:34:34:aa:58:cb:41:f1:25:24:3f:6b:
fa:e2:eb:ff:2c:5b:81:2c:90:68:ae:80:ae:51:6e:36:94:0e:
1c:e1:ce:f8:ae:b7:a9:6d:a1:2c:b9:86:89:c3:5e:51:64:a3:
ec:aa:fb:cb:10:b3:e6:85:b8:4d:41:e4:eb:1e:b4:ee:5a:6f:
b6:65:97:70:0b:05:36:81:a7:52:92:02:bb:80:60:f7:22:ea:
3a:d1:75:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org