Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/DyHNIDoXuv_kNul_qWZHJwu8xHs.roa
File: DyHNIDoXuv_kNul_qWZHJwu8xHs.roa (raw, json)
Hash identifier: ejjez8r54jJAngZdOumkvVytKWdVFRJ64AAwg558UEg=
Subject key identifier: 0F:21:CD:20:3A:17:BA:FF:E4:36:E9:7F:A9:66:47:27:0B:BC:C4:7B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01894DA8BEA5EF779BAFE8E655338C332F35
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/DyHNIDoXuv_kNul_qWZHJwu8xHs.roa
Signing time: Thu 13 Jul 2023 05:10:51 +0000
ROA not before: Thu 13 Jul 2023 05:10:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 07:15:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4d:a8:be:a5:ef:77:9b:af:e8:e6:55:33:8c:33:2f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jul 13 05:10:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f21cd203a17baffe436e97fa96647270bbcc47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:38:84:b1:cf:e1:ea:53:24:b7:df:f6:2a:
cd:69:69:33:ae:9b:89:f4:2d:ae:3f:58:5c:09:62:
c3:12:54:c2:73:90:ac:8a:6e:dc:77:f3:96:41:f1:
69:b6:bd:f8:77:15:92:bc:7c:24:3c:58:6d:5c:de:
cb:5b:31:8f:00:db:5d:e6:26:84:02:dc:b7:9b:19:
0e:0a:9b:4c:12:21:8a:a2:1f:15:b6:95:91:73:ec:
b1:d4:bc:d6:1d:6a:c2:8a:f7:29:a6:5a:b8:5c:51:
f2:de:1b:e2:05:ce:61:b0:aa:72:53:7f:f8:93:86:
82:7c:60:38:96:cd:9a:21:c8:fa:e9:ad:25:c1:15:
3d:46:31:17:58:fa:da:03:63:ae:26:3b:c2:da:d5:
c4:ea:ff:ef:6c:a9:de:7c:3f:79:d6:10:a0:9b:e8:
56:e9:66:6a:62:fc:0f:67:f4:3e:7b:ef:0e:dd:ce:
19:51:cb:ae:7e:7e:7b:35:81:7f:8d:aa:26:09:b8:
c2:ba:66:b6:9b:d2:2e:29:f6:1d:4b:d4:6e:39:29:
72:cb:23:f5:6a:95:78:fc:60:b5:38:f7:5f:4b:06:
90:fe:03:df:a0:20:da:09:f0:43:bd:16:3b:92:49:
ca:eb:e2:ca:62:fe:f4:7a:53:ee:9b:d9:6d:30:29:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:21:CD:20:3A:17:BA:FF:E4:36:E9:7F:A9:66:47:27:0B:BC:C4:7B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/DyHNIDoXuv_kNul_qWZHJwu8xHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.163.255
62.72.169.0/24
62.72.177.0/24
62.72.179.0/24
62.72.181.0-62.72.182.255
62.72.185.0/24
62.72.187.0-62.72.189.255
62.72.191.0/24
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:f9:e2:b0:58:8b:4a:c7:87:3c:43:f6:d2:a9:bf:fa:f1:54:
e0:89:b4:c0:46:23:35:42:d8:54:11:8c:55:6a:6f:fc:66:f8:
e5:5d:8e:f8:10:5c:3c:23:cc:c1:b8:c2:0e:c6:9e:8e:46:b2:
e7:6c:1f:3c:28:e9:43:b1:c4:2d:84:bd:fc:c2:4e:f3:60:b1:
03:49:3c:59:94:5b:6e:d2:4e:c7:37:df:de:aa:d7:3f:17:4a:
66:43:64:28:3f:d7:ce:c0:47:82:4d:5a:fd:a8:36:cd:fc:60:
64:c3:9e:69:f6:24:d8:3a:0c:3a:0b:6f:75:fc:26:00:05:6d:
79:6f:17:93:e1:ee:4a:ab:45:ea:b5:31:a0:a6:bb:05:d5:9f:
b1:fb:b2:67:03:4b:48:0b:bb:6c:7a:2e:32:10:7a:3b:81:48:
be:b5:73:54:d5:31:a6:bb:8a:d2:32:f8:57:9d:56:65:16:71:
39:23:d1:0d:61:cf:fc:fb:8b:22:43:ab:9c:6d:b5:cf:f9:96:
fb:2a:f8:6a:53:d3:df:ad:90:5d:ac:cb:32:a7:ce:77:2c:71:
3a:e9:77:14:6b:06:0c:c7:6c:ca:08:7b:f7:68:8c:66:9b:88:
83:52:a5:ff:75:46:fc:49:3b:43:99:61:52:03:a1:4f:dc:c2:
6d:8f:b4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org