Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-mPgAMHVRRIkQu8Uuu9XYfqelZg.roa
File: 1-mPgAMHVRRIkQu8Uuu9XYfqelZg.roa (raw, json)
Hash identifier: 8JyLuIPmwjgBdVQSJEt4tuWWX8/N1IH1rBony9beTOI=
Subject key identifier: FA:63:E0:00:C1:D5:45:12:24:42:EF:14:BA:EF:57:61:FA:9E:95:98
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0189B5159173C73B92A1B33FD307EA58DBBE
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-mPgAMHVRRIkQu8Uuu9XYfqelZg.roa
Signing time: Wed 02 Aug 2023 07:10:36 +0000
ROA not before: Wed 02 Aug 2023 07:10:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
81.21.1.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 07:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:15:91:73:c7:3b:92:a1:b3:3f:d3:07:ea:58:db:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 2 07:10:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa63e000c1d545122442ef14baef5761fa9e9598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:eb:75:2b:90:94:b0:c3:d8:a8:5a:27:4d:
7a:f5:02:5b:c6:80:57:e9:52:45:f6:8a:22:f8:04:
eb:ce:fa:f1:36:96:d1:75:12:b9:c2:5a:39:6d:78:
b6:0d:b1:c7:2e:23:72:35:65:c1:b4:dd:96:08:14:
45:71:b4:02:99:b9:66:35:80:26:32:fc:b7:82:b9:
20:89:65:66:58:64:d9:bf:b4:9c:1a:57:79:bb:fa:
fc:38:d2:2a:10:3d:84:d2:a9:0b:52:8f:3d:19:c7:
eb:30:c7:e3:85:5e:91:7e:96:ac:7b:f5:11:69:57:
f1:b8:79:1c:62:0e:86:63:37:61:9d:49:38:08:85:
3e:95:50:68:d7:2f:a7:75:ee:13:eb:03:ef:80:38:
72:6b:a7:d3:c7:00:80:d6:77:da:7e:07:04:c1:2b:
2e:17:e0:3b:cc:4a:43:bc:db:53:2e:8e:5b:26:82:
cb:f7:b9:24:6f:3c:7c:4d:4e:1e:52:6e:f8:9c:e7:
5a:df:88:60:95:b2:20:87:e3:2c:ec:c2:98:84:b1:
c7:c5:78:ee:1d:3b:6c:55:ac:7f:fd:dd:42:cc:e1:
7e:22:94:b9:cd:7f:85:6b:f7:11:68:3b:7e:ae:9e:
2e:86:4b:da:59:c0:2f:6a:d1:6c:3f:1f:fd:5d:c7:
6a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:63:E0:00:C1:D5:45:12:24:42:EF:14:BA:EF:57:61:FA:9E:95:98
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-mPgAMHVRRIkQu8Uuu9XYfqelZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.163.255
62.72.169.0/24
62.72.177.0/24
62.72.179.0/24
62.72.181.0-62.72.182.255
62.72.185.0/24
62.72.187.0-62.72.189.255
62.72.191.0/24
81.21.1.0/24
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:36:4b:61:a4:23:47:9d:1f:b1:a8:95:22:90:a4:6b:36:10:
2c:97:37:3e:49:79:20:a4:7a:3e:04:c0:96:76:0d:ae:10:d9:
59:63:74:c5:24:6c:5a:d8:14:f4:97:4f:d9:dd:28:79:ac:bf:
e7:65:ef:9b:13:6f:9a:3f:61:4d:a1:b4:2d:bb:ed:f8:01:ad:
da:f7:b6:7a:b3:95:b8:7b:4d:a2:a9:ec:cd:13:c7:18:2f:17:
ad:5c:52:ac:61:da:e8:3c:70:a0:59:fc:13:0c:38:a0:c2:0c:
d5:3a:78:91:84:b4:fe:c3:6b:c4:da:9c:bc:ff:b2:79:c3:c9:
90:77:a4:6d:ac:83:d9:70:70:ff:98:ee:77:25:78:a3:3b:e3:
62:04:a2:45:c8:27:14:ce:6d:42:9b:64:56:9c:dd:81:80:f5:
3f:bb:b5:29:ee:de:00:93:bf:43:6d:42:ef:9c:65:f8:71:d3:
2f:21:ea:d8:75:93:83:8a:ab:81:f7:41:05:7d:2d:d9:d5:ca:
f7:5c:77:09:4e:f4:6a:e9:2e:c6:a3:f2:2b:61:ce:31:21:34:
1b:b1:16:de:a0:84:0a:9a:e7:4e:e7:f3:2b:d1:4c:d2:28:81:
3c:67:b4:22:a5:83:44:da:d1:33:9a:92:bf:ec:20:63:d9:b9:
9a:f0:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org