Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8giYaPnGxOMoawRB3trFvYVMbF8.roa
File: 8giYaPnGxOMoawRB3trFvYVMbF8.roa (raw, json)
Hash identifier: y39KYul73i4c3PaTRoluoITgxYX6NuTButySQxorgvw=
Subject key identifier: F2:08:98:68:F9:C6:C4:E3:28:6B:04:41:DE:DA:C5:BD:85:4C:6C:5F
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01877989E0143D991D7A5A1759AFA78EC405
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8giYaPnGxOMoawRB3trFvYVMbF8.roa
Signing time: Thu 13 Apr 2023 07:34:51 +0000
ROA not before: Thu 13 Apr 2023 07:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.163.0/24 maxlen: 24
62.72.164.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
176.57.61.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Apr 2023 17:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:89:e0:14:3d:99:1d:7a:5a:17:59:af:a7:8e:c4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 13 07:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2089868f9c6c4e3286b0441dedac5bd854c6c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:12:4d:a9:66:1f:12:11:5e:a1:10:a7:c9:
6b:c0:0e:05:cc:8c:1b:83:d3:ff:7d:46:47:75:59:
f6:20:8b:ee:b6:92:16:11:f6:ad:d2:47:15:90:49:
6b:36:02:36:1c:ec:5a:ab:09:8e:13:28:f4:26:10:
e6:6e:d8:53:e5:16:79:54:e3:09:03:f6:fb:cd:21:
d7:31:f9:22:6a:6a:6b:93:06:25:a0:1b:47:ff:4a:
74:9d:fa:2e:36:fa:29:8a:b9:08:cd:db:1c:3e:e1:
1b:97:4f:4e:f7:99:9b:cf:5e:67:d6:c6:a9:77:0e:
c6:93:01:5d:30:a0:8c:c7:ed:5a:80:97:e2:6a:4e:
03:a3:e9:8f:48:d0:54:75:55:9d:a9:c5:d9:01:da:
13:14:81:61:a8:54:cf:2f:3e:25:50:0a:fc:a4:a5:
b1:c8:7c:27:6d:38:54:32:11:3d:ae:20:d2:76:76:
0e:07:d6:2c:a0:17:6d:51:67:43:a4:3d:6f:7a:f0:
2a:4b:06:4c:5e:6f:00:09:62:85:53:d7:4d:36:f0:
56:5b:cf:04:9a:90:68:0f:28:f3:e1:91:a1:1c:32:
7b:98:7e:86:5e:8e:2e:84:0a:3c:03:40:45:39:41:
ee:dc:a4:70:cd:db:ab:e0:6a:b5:1b:30:59:22:3c:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:98:68:F9:C6:C4:E3:28:6B:04:41:DE:DA:C5:BD:85:4C:6C:5F
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8giYaPnGxOMoawRB3trFvYVMbF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.163.0-62.72.164.255
62.72.168.0/24
62.72.177.0/24
176.57.61.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:6c:02:77:c8:5f:78:38:ba:d2:90:7e:8f:1c:6c:21:fd:06:
3a:f3:37:7d:a0:85:26:65:88:60:c6:ab:82:de:c9:ad:1a:1e:
a4:19:51:2e:90:30:12:0b:51:92:dd:b9:08:c5:10:05:c2:77:
71:ca:ff:41:08:5f:99:f5:89:7b:87:38:dd:79:92:8a:1b:95:
0d:69:84:38:96:2b:4f:2b:fc:88:82:98:4b:6f:cd:dd:28:e7:
2b:7a:c8:5b:d5:70:c3:1b:38:08:7e:8b:d0:ea:5e:6f:4b:00:
df:13:1d:26:5a:9c:95:39:e7:91:ac:1b:2e:0f:40:2b:e7:27:
51:d7:f6:00:81:3d:54:aa:ea:8b:17:b1:ab:63:eb:a4:ee:18:
df:18:67:4b:e5:bc:ec:c9:d9:1b:12:d6:b9:13:ba:32:ae:d4:
1c:42:71:a2:db:69:ac:0c:09:5c:86:50:85:ac:81:2b:14:3e:
8f:b4:da:27:5e:4a:87:78:a3:97:c9:80:23:79:6a:c2:ac:96:
bc:1b:bb:f5:2f:bd:d8:6c:bd:cb:24:39:49:fc:f0:56:74:1e:
93:96:ed:f1:64:19:b5:61:db:55:78:b4:dc:6a:5f:21:22:2a:
18:8c:11:24:28:b2:ec:ab:fb:3b:a2:fc:b1:6d:f3:f1:4c:bb:
aa:55:e9:b2
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYd5ieAUPZkdeloXWa+njsQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwNDEzMDczNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjA4OTg2OGY5YzZjNGUzMjg2YjA0NDFkZWRhYzViZDg1NGM2YzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlisSTalmHxIRXqEQp8lrwA4FzIwb
g9P/fUZHdVn2IIvutpIWEfat0kcVkElrNgI2HOxaqwmOEyj0JhDmbthT5RZ5VOMJ
A/b7zSHXMfkiamprkwYloBtH/0p0nfouNvopirkIzdscPuEbl09O95mbz15n1sap
dw7GkwFdMKCMx+1agJfiak4Do+mPSNBUdVWdqcXZAdoTFIFhqFTPLz4lUAr8pKWx
yHwnbThUMhE9riDSdnYOB9YsoBdtUWdDpD1vevAqSwZMXm8ACWKFU9dNNvBWW88E
mpBoDyjz4ZGhHDJ7mH6GXo4uhAo8A0BFOUHu3KRwzdur4Gq1GzBZIjyCkwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFPIImGj5xsTjKGsEQd7axb2FTGxfMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvOGdpWWFQbkd4T01vYXdSQjN0ckZ2WVZNYkY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAA+SKMD
BAA+SKQDBAA+SKgDBAA+SLEDBACwOT0DBACwOT8wDQYJKoZIhvcNAQELBQADggEB
AMhsAnfIX3g4utKQfo8cbCH9BjrzN32ghSZliGDGq4Leya0aHqQZUS6QMBILUZLd
uQjFEAXCd3HK/0EIX5n1iXuHON15kooblQ1phDiWK08r/IiCmEtvzd0o5yt6yFvV
cMMbOAh+i9DqXm9LAN8THSZanJU555GsGy4PQCvnJ1HX9gCBPVSq6osXsatj66Tu
GN8YZ0vlvOzJ2RsS1rkTujKu1BxCcaLbaawMCVyGUIWsgSsUPo+02ideSod4o5fJ
gCN5asKslrwbu/UvvdhsvcskOUn88FZ0HpOW7fFkGbVh21V4tNxqXyEiKhiMESQo
suyr+zui/LFt8/FMu6pV6bI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org