Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/zRdAvdjz2LNkqZwuzmp_WXeENks.roa
File: zRdAvdjz2LNkqZwuzmp_WXeENks.roa (raw, json)
Hash identifier: nLQolnijbn3ZD8D+GwRUr7CmcJI7/OgUSS4xUTohmD4=
Subject key identifier: CD:17:40:BD:D8:F3:D8:B3:64:A9:9C:2E:CE:6A:7F:59:77:84:36:4B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01856F4B81455E510A3433C8EB9B1C2CDE49
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/zRdAvdjz2LNkqZwuzmp_WXeENks.roa
Signing time: Sun 01 Jan 2023 21:44:57 +0000
ROA not before: Sun 01 Jan 2023 21:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 62.72.189.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jan 2023 18:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:81:45:5e:51:0a:34:33:c8:eb:9b:1c:2c:de:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 21:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd1740bdd8f3d8b364a99c2ece6a7f597784364b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:d1:1f:98:3f:c5:eb:98:3d:9e:11:5c:48:
8c:4c:11:8a:f2:d9:16:c9:57:34:85:5f:3f:9f:84:
4d:74:b8:bc:c1:dd:ed:3a:e8:2e:1f:4e:d5:6e:c6:
40:27:4d:25:d3:80:ce:36:a1:be:4d:e3:27:8a:5d:
68:e2:dd:c5:02:37:8b:67:2b:4e:78:fb:36:fd:b6:
95:19:1b:51:d4:22:eb:92:c7:01:76:76:b7:6f:c0:
fa:f8:e8:fa:0e:85:9f:cd:a2:c0:f3:57:3a:c7:29:
6c:43:b3:24:fc:18:13:55:f4:74:08:de:c5:1b:1c:
07:47:1b:15:69:61:3e:e2:e0:13:50:a4:69:96:79:
3e:02:74:99:07:d5:4b:9c:94:ab:a3:c2:ec:a9:b5:
9a:c0:f5:c4:ae:a5:fa:e9:66:da:23:0e:ac:15:fb:
22:e7:42:13:3a:33:cb:97:93:64:96:8e:a9:f0:c5:
88:9f:63:c6:a1:93:70:bf:e5:17:da:21:22:fc:17:
c4:73:c9:6d:a7:44:ff:f2:f1:d1:d4:3c:df:24:12:
47:a7:a2:64:6f:91:e8:43:71:c6:3e:d4:7c:b4:55:
45:77:5c:5d:72:c4:40:98:4f:d2:a2:af:15:68:f5:
4a:a6:0e:23:61:46:c1:38:f4:81:3d:8f:1f:60:2d:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:17:40:BD:D8:F3:D8:B3:64:A9:9C:2E:CE:6A:7F:59:77:84:36:4B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/zRdAvdjz2LNkqZwuzmp_WXeENks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.189.0/24
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
26:72:fe:cf:d0:cb:00:97:3b:85:97:4b:11:a6:03:28:84:2f:
36:7e:ca:59:16:fa:f0:9f:e2:73:45:7c:00:e3:a5:bf:97:d6:
28:be:71:24:9a:47:6f:35:b7:94:44:8d:50:5f:e1:88:6b:6a:
3a:43:fa:b3:93:ac:77:31:00:0c:db:45:db:e9:62:8b:94:c9:
d1:79:c6:ba:29:ad:90:56:d5:1c:4d:e8:e7:18:9a:10:de:8f:
ed:e3:31:70:42:85:8e:e3:5d:87:34:49:f3:cf:25:54:45:55:
52:3e:62:d0:9b:7c:e8:fb:41:83:d1:83:50:eb:87:fb:b8:28:
6c:fe:ba:fb:cf:23:d6:19:42:bb:6b:24:7d:95:0f:39:2d:0e:
f0:a3:de:55:81:c0:b0:74:6a:87:79:f9:d6:97:4c:92:25:d7:
e4:fb:97:6d:71:ed:0e:9e:42:4d:9a:e9:04:bb:f4:6e:bd:27:
ba:bb:38:af:0f:21:b7:9e:76:0c:63:53:c2:bb:51:51:bb:f0:
e9:d0:d4:8d:9b:3a:0b:8b:e9:59:d4:5a:53:04:b1:9d:19:49:
cf:ed:31:89:f7:23:a2:42:83:36:6d:95:52:c3:fd:fe:fb:5b:
9a:ce:75:5f:44:69:00:02:af:67:9c:2b:b5:3a:37:2c:4c:05:
d4:41:29:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org