Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7nyC0Ky-j2J-GeCvNPkvyyryiVg.roa
File: 7nyC0Ky-j2J-GeCvNPkvyyryiVg.roa (raw, json)
Hash identifier: cRy7Ftr34I3Mn7roLtjqjLCA+rS8nMywzkjgxWH3JKc=
Subject key identifier: EE:7C:82:D0:AC:BE:8F:62:7E:19:E0:AF:34:F9:2F:CB:2A:F2:89:58
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0187A887BFF08F2CB411FB95B7F79A4B3DCD
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7nyC0Ky-j2J-GeCvNPkvyyryiVg.roa
Signing time: Sat 22 Apr 2023 10:34:41 +0000
ROA not before: Sat 22 Apr 2023 10:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 62.72.176.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 12:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:87:bf:f0:8f:2c:b4:11:fb:95:b7:f7:9a:4b:3d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 22 10:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee7c82d0acbe8f627e19e0af34f92fcb2af28958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:b3:e4:38:16:0d:fa:23:b6:c3:3f:84:5c:
46:03:a2:d8:23:f8:2d:b5:ac:4e:62:32:d6:99:f8:
4f:b0:04:3d:5e:36:fe:bf:8f:91:c6:c6:75:92:c5:
99:9a:a8:0a:e7:b6:be:48:b9:5a:ba:be:a2:50:e0:
c2:fe:a7:53:10:04:2a:ba:26:cf:2d:78:51:b4:1a:
1d:53:7a:f7:03:55:53:75:a9:10:a3:22:44:51:64:
18:1b:23:f2:22:64:16:4d:3d:b6:e8:3c:bf:60:c1:
57:9a:83:2f:5b:8d:b1:4f:e0:49:d9:23:77:a1:95:
3f:1f:5c:56:e8:d6:d3:b2:1a:83:c2:d7:1f:8f:d5:
94:f9:a7:18:bc:cc:a3:34:98:8c:d7:d7:56:2b:ae:
fa:dc:d8:bb:1a:a0:a1:77:da:33:7e:9f:17:4b:38:
14:ee:90:a4:2a:e6:54:3a:3f:52:4c:53:99:8c:ba:
66:0d:fb:bc:7d:da:5d:2d:32:bd:93:d1:4c:93:ed:
6b:ba:81:c6:bf:94:0c:75:9f:7d:d8:4e:9e:49:fb:
75:14:ba:d0:a7:36:e6:c4:0e:d7:f6:38:34:f4:db:
8a:2c:e0:6a:60:b7:df:98:9e:f2:6d:8b:7b:0d:19:
8e:0d:ff:c3:5a:c0:08:56:d6:01:81:72:39:b3:e6:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7C:82:D0:AC:BE:8F:62:7E:19:E0:AF:34:F9:2F:CB:2A:F2:89:58
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7nyC0Ky-j2J-GeCvNPkvyyryiVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/24
62.72.183.0/24
62.72.190.0/24
176.57.62.0/24
Signature Algorithm: sha256WithRSAEncryption
78:74:26:40:75:bf:de:3b:0d:d9:45:9b:80:6b:2f:d8:bf:5b:
66:2b:e2:24:99:4c:9d:39:b2:3d:b1:e6:3c:15:92:f7:79:e6:
cd:88:87:55:25:ed:ac:cf:cb:48:6c:f6:5b:88:fe:ae:95:80:
be:00:02:83:aa:b3:e6:fc:63:a1:84:0c:a9:7c:67:9d:f0:5f:
05:52:1c:89:75:df:ca:08:9d:76:e2:d2:b0:79:53:23:e4:5a:
06:6c:ef:50:5f:f9:61:a5:21:fd:7d:4b:9e:be:51:7b:bd:ee:
6a:58:a4:13:4a:82:a9:bd:04:46:32:76:97:2d:90:e1:d5:bd:
cc:c4:4c:aa:a2:40:1a:41:23:2f:cd:42:36:b2:fe:80:0d:24:
da:d1:f7:89:01:7f:b6:b5:70:b1:86:a8:62:3d:54:e9:b8:e2:
1c:97:ad:29:ad:c5:8c:2a:12:df:ce:0c:79:a7:c5:8e:44:cb:
4f:9c:77:01:6c:14:56:b1:38:33:a7:5e:ae:92:9c:43:d4:82:
e6:31:86:c1:b1:c7:9b:4d:76:6b:9c:97:34:71:4a:2e:ec:f6:
cb:45:c2:53:70:62:97:9f:d3:46:0e:06:75:7e:12:f1:1c:0c:
0a:52:12:fc:ff:8d:9d:8d:33:42:5e:d4:3d:9d:cb:f5:99:cb:
17:2f:8d:dd
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYeoh7/wjyy0EfuVt/eaSz3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwNDIyMTAzNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTdjODJkMGFjYmU4ZjYyN2UxOWUwYWYzNGY5MmZjYjJhZjI4OTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAOz5DgWDfojtsM/hFxGA6LYI/gt
taxOYjLWmfhPsAQ9Xjb+v4+RxsZ1ksWZmqgK57a+SLlaur6iUODC/qdTEAQquibP
LXhRtBodU3r3A1VTdakQoyJEUWQYGyPyImQWTT226Dy/YMFXmoMvW42xT+BJ2SN3
oZU/H1xW6NbTshqDwtcfj9WU+acYvMyjNJiM19dWK6763Ni7GqChd9ozfp8XSzgU
7pCkKuZUOj9STFOZjLpmDfu8fdpdLTK9k9FMk+1ruoHGv5QMdZ992E6eSft1FLrQ
pzbmxA7X9jg09NuKLOBqYLffmJ7ybYt7DRmODf/DWsAIVtYBgXI5s+YIrwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFO58gtCsvo9ifhngrzT5L8sq8olYMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvN255QzBLeS1qMkotR2VDdk5Qa3Z5eXJ5aVZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPkiwAwQA
Pki3AwQAPki+AwQAsDk+MA0GCSqGSIb3DQEBCwUAA4IBAQB4dCZAdb/eOw3ZRZuA
ay/Yv1tmK+IkmUydObI9seY8FZL3eebNiIdVJe2sz8tIbPZbiP6ulYC+AAKDqrPm
/GOhhAypfGed8F8FUhyJdd/KCJ124tKweVMj5FoGbO9QX/lhpSH9fUuevlF7ve5q
WKQTSoKpvQRGMnaXLZDh1b3MxEyqokAaQSMvzUI2sv6ADSTa0feJAX+2tXCxhqhi
PVTpuOIcl60prcWMKhLfzgx5p8WORMtPnHcBbBRWsTgzp16ukpxD1ILmMYbBsceb
TXZrnJc0cUou7PbLRcJTcGKXn9NGDgZ1fhLxHAwKUhL8/42djTNCXtQ9ncv1mcsX
L43d
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org