Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8kJ0lqFfO5-3RcKbZDD9A_flBN0.roa
File: 8kJ0lqFfO5-3RcKbZDD9A_flBN0.roa (raw, json)
Hash identifier: LOnmAKRWSMioHenyYscFLFkU1lwpyU34PtjSDEsYCTI=
Subject key identifier: F2:42:74:96:A1:5F:3B:9F:B7:45:C2:9B:64:30:FD:03:F7:E5:04:DD
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01901685536FF1418D8605E3010432A94A97
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8kJ0lqFfO5-3RcKbZDD9A_flBN0.roa
Signing time: Fri 14 Jun 2024 11:32:34 +0000
ROA not before: Fri 14 Jun 2024 11:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 62.72.173.0/24 maxlen: 24
62.72.180.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Jun 2024 13:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:16:85:53:6f:f1:41:8d:86:05:e3:01:04:32:a9:4a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 14 11:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2427496a15f3b9fb745c29b6430fd03f7e504dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:aa:5b:94:53:7f:a8:35:c4:e7:98:11:b0:
0d:9e:a1:6e:8d:3b:e6:69:9e:c6:3c:48:a1:ef:d1:
5d:c8:b5:5e:5b:01:86:fb:e7:69:ea:80:8b:c9:93:
a9:ec:82:06:75:02:bd:bb:38:a9:35:89:c8:32:a0:
42:95:92:d9:82:62:0b:ae:a9:10:df:13:c4:5e:8d:
e6:e1:ad:7f:f3:c9:59:98:07:7d:68:82:e9:10:40:
6f:52:d5:86:74:46:d7:3e:41:ce:1c:6a:a3:96:46:
05:dc:ce:8b:bb:3e:70:a7:3e:e3:3e:a8:c6:92:97:
af:59:d1:0e:a3:78:06:9d:a6:22:28:cb:dd:f8:5e:
da:e1:ea:6e:31:28:bc:5e:8a:47:f3:a6:24:32:9a:
6e:a3:84:cf:d9:b9:57:a6:ce:08:0b:de:18:43:dc:
34:4b:0f:1a:a0:2e:47:25:00:fd:88:f1:24:4b:43:
20:ee:34:de:de:ea:75:d0:04:f7:d9:35:6d:31:2c:
38:85:39:5f:86:b0:70:11:6d:6c:50:8f:8a:4d:eb:
4b:80:6f:01:26:8a:86:29:e0:52:cb:de:cf:71:4e:
ec:03:30:92:95:18:43:3d:8b:61:f1:4a:87:53:17:
89:35:cd:f8:ab:36:10:f9:4d:23:40:96:73:26:97:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:42:74:96:A1:5F:3B:9F:B7:45:C2:9B:64:30:FD:03:F7:E5:04:DD
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8kJ0lqFfO5-3RcKbZDD9A_flBN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.173.0/24
62.72.180.0/24
62.72.185.0/24
Signature Algorithm: sha256WithRSAEncryption
54:86:72:14:da:56:f5:8c:c8:95:5f:09:fc:a5:01:e4:6d:81:
bb:b0:84:04:9b:27:fd:f0:b7:72:f8:97:ae:ae:65:65:d7:d6:
2f:a3:35:9f:c6:ea:9d:50:5e:49:a3:26:a0:16:bd:0d:8e:21:
f8:b3:26:b2:a0:33:da:dd:cc:54:55:69:07:71:c5:30:b5:77:
c5:9c:a0:6f:38:56:43:da:dd:e1:7b:53:43:8f:08:c1:f0:8b:
a2:21:48:19:59:7c:bc:b1:25:6d:db:0a:a1:c2:10:ad:32:a6:
17:f4:f5:3e:35:96:65:c7:7a:94:c3:04:16:77:75:f0:78:61:
63:fb:a4:d1:b7:11:8a:b6:fe:b1:b6:74:65:c5:4b:a5:80:ca:
d6:73:3e:8f:18:54:93:44:39:ff:ad:49:74:ea:96:2a:8c:52:
c2:c2:d7:74:d3:9f:5c:0c:57:14:a3:73:4b:d9:5d:b5:b5:b0:
e7:bf:32:cf:f0:6f:d1:5f:74:23:71:8d:ae:7f:f2:53:32:47:
4f:02:b3:94:00:8e:e8:bc:bc:c3:42:e2:b8:2d:f9:b6:b3:b8:
d9:d1:90:37:b6:31:93:37:33:19:8d:1f:8f:66:ec:48:60:5f:
4d:42:2d:d8:3f:55:33:2a:b3:66:2c:ef:38:72:ec:27:c1:eb:
2e:89:3c:67
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZAWhVNv8UGNhgXjAQQyqUqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwNjE0MTEzMjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjQyNzQ5NmExNWYzYjlmYjc0NWMyOWI2NDMwZmQwM2Y3ZTUwNGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs6qW5RTf6g1xOeYEbANnqFujTvm
aZ7GPEih79FdyLVeWwGG++dp6oCLyZOp7IIGdQK9uzipNYnIMqBClZLZgmILrqkQ
3xPEXo3m4a1/88lZmAd9aILpEEBvUtWGdEbXPkHOHGqjlkYF3M6Luz5wpz7jPqjG
kpevWdEOo3gGnaYiKMvd+F7a4epuMSi8XopH86YkMppuo4TP2blXps4IC94YQ9w0
Sw8aoC5HJQD9iPEkS0Mg7jTe3up10AT32TVtMSw4hTlfhrBwEW1sUI+KTetLgG8B
JoqGKeBSy97PcU7sAzCSlRhDPYth8UqHUxeJNc34qzYQ+U0jQJZzJpfBFwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPJCdJahXzuft0XCm2Qw/QP35QTdMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvOGtKMGxxRmZPNS0zUmNLYlpERDlBX2ZsQk4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPkitAwQA
Pki0AwQAPki5MA0GCSqGSIb3DQEBCwUAA4IBAQBUhnIU2lb1jMiVXwn8pQHkbYG7
sIQEmyf98Ldy+JeurmVl19YvozWfxuqdUF5JoyagFr0NjiH4syayoDPa3cxUVWkH
ccUwtXfFnKBvOFZD2t3he1NDjwjB8IuiIUgZWXy8sSVt2wqhwhCtMqYX9PU+NZZl
x3qUwwQWd3XweGFj+6TRtxGKtv6xtnRlxUulgMrWcz6PGFSTRDn/rUl06pYqjFLC
wtd0059cDFcUo3NL2V21tbDnvzLP8G/RX3QjcY2uf/JTMkdPArOUAI7ovLzDQuK4
Lfm2s7jZ0ZA3tjGTNzMZjR+PZuxIYF9NQi3YP1UzKrNmLO84cuwnwesuiTxn
-----END CERTIFICATE-----
Generated at Sun Jun 23 19:21:42 2024 by rpki-client on console-ams.rpki-client.org