Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1BWtAdRa2rf41Np052fKn6w9S5Q.roa
File: 1BWtAdRa2rf41Np052fKn6w9S5Q.roa (raw, json)
Hash identifier: p6vxRrwizyRvwtxd7IGrguFXu1PAA6V6TKft/wMLZvQ=
Subject key identifier: D4:15:AD:01:D4:5A:DA:B7:F8:D4:DA:74:E7:67:CA:9F:AC:3D:4B:94
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01876A69F7B1181E66BAB99EDA7E058C8E9B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1BWtAdRa2rf41Np052fKn6w9S5Q.roa
Signing time: Mon 10 Apr 2023 09:05:42 +0000
ROA not before: Mon 10 Apr 2023 09:05:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.163.0/24 maxlen: 24
62.72.164.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Apr 2023 06:59:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:69:f7:b1:18:1e:66:ba:b9:9e:da:7e:05:8c:8e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 10 09:05:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d415ad01d45adab7f8d4da74e767ca9fac3d4b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:14:37:38:f2:14:fc:fd:29:83:40:e4:56:
5d:a2:f6:66:58:25:90:27:33:84:fa:37:8b:47:bb:
77:8b:bc:ac:a5:71:a8:42:5b:57:e6:6a:7d:df:d0:
8f:1f:61:a7:47:f8:f9:c5:bc:5e:d3:80:77:21:d9:
7c:9a:36:dc:9e:7a:2b:0c:91:25:88:8b:0b:7f:ca:
17:5c:ae:f7:16:69:c0:d6:32:0f:e5:89:29:4a:eb:
70:a3:eb:fb:e4:97:49:e0:2e:55:de:0e:bd:51:77:
1f:12:0f:af:f3:0a:89:17:d5:d0:3f:81:58:f9:40:
13:cd:66:17:e8:24:e8:04:a6:a8:b3:18:21:bb:a0:
8c:bb:60:3a:46:c9:2f:c2:9d:18:a0:03:fb:54:44:
35:93:e0:39:b7:2d:15:96:5b:af:5e:80:6c:5c:22:
21:3b:df:a6:67:00:9d:7c:95:b1:77:9f:d8:23:bb:
7c:55:bd:24:07:89:79:67:9f:0e:b5:61:d6:d0:4f:
71:55:3a:c5:7d:2d:7a:bc:f5:9d:48:90:60:36:80:
1d:77:d4:72:7a:75:eb:16:e1:35:9e:a8:58:b0:67:
4b:01:e9:2d:0a:c1:fc:ec:9d:f0:f4:4c:af:62:c8:
0e:95:fc:2a:25:26:84:45:1e:98:28:99:3c:33:e7:
80:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:15:AD:01:D4:5A:DA:B7:F8:D4:DA:74:E7:67:CA:9F:AC:3D:4B:94
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1BWtAdRa2rf41Np052fKn6w9S5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.164.255
62.72.168.0/24
62.72.191.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:fb:15:26:cb:ff:b8:5d:51:6d:38:b6:e6:bd:39:df:0c:f3:
8c:42:7c:3f:34:12:41:9b:91:6d:36:52:1e:be:74:d7:5e:ed:
4a:89:aa:a8:c6:8c:6e:1d:8f:23:22:a6:35:68:91:6f:78:67:
45:1b:04:16:dc:78:0a:9d:bb:a7:12:34:61:c4:6e:95:5f:9b:
c8:14:62:38:ca:27:8a:42:2e:15:68:7e:a0:d1:59:ba:0c:c7:
c2:de:9e:26:c6:39:c2:37:c6:0a:0a:1b:fc:46:34:6c:9b:5b:
e1:e6:6b:6c:22:99:53:19:9f:fe:c5:a4:1e:61:1b:e3:2a:cf:
00:81:5e:78:02:13:02:fb:6e:5a:ac:57:d9:b1:54:e2:b1:fb:
06:32:03:30:c0:3a:4f:eb:c6:ea:62:e8:8d:08:e6:31:39:05:
f3:c9:e7:e5:c8:d9:86:60:26:47:2f:2d:6a:03:92:53:af:e7:
aa:1f:3e:90:1f:3a:9d:24:4e:7b:5f:fd:87:36:b0:52:b6:6f:
75:a4:36:22:af:6e:dd:d7:ad:79:94:2b:6f:fe:d7:10:44:f4:
8c:24:3c:da:00:9f:8a:10:19:cd:b9:de:78:30:f4:6d:79:a1:
89:97:c5:96:08:d7:40:cc:f6:c2:1e:3c:6e:dc:9e:00:78:93:
68:59:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org