Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FqqYf8gEvruQR8ldcA5oCRsW5-I.roa
File: FqqYf8gEvruQR8ldcA5oCRsW5-I.roa (raw, json)
Hash identifier: tz0FjY11flsOjWNKJk9318WBdLGvfORrJa515uHdDx4=
Subject key identifier: 16:AA:98:7F:C8:04:BE:BB:90:47:C9:5D:70:0E:68:09:1B:16:E7:E2
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0187A888AADB57E409E8EA0A110CDC177AB1
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FqqYf8gEvruQR8ldcA5oCRsW5-I.roa
Signing time: Sat 22 Apr 2023 10:35:41 +0000
ROA not before: Sat 22 Apr 2023 10:35:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.163.0/24 maxlen: 24
62.72.164.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Apr 2023 10:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:88:aa:db:57:e4:09:e8:ea:0a:11:0c:dc:17:7a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 22 10:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16aa987fc804bebb9047c95d700e68091b16e7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:e7:e8:31:7c:44:e4:2d:7f:dc:c1:25:3f:
c6:34:07:ac:64:a4:82:02:47:20:a9:5f:d2:09:c5:
51:4f:07:d2:45:82:4e:10:91:11:f1:73:86:75:82:
41:d8:2a:d3:8e:14:00:5d:58:b2:77:98:49:26:c9:
8e:c7:11:1a:14:0b:85:d0:c8:2c:30:75:43:8f:0e:
82:97:aa:01:79:cf:0d:86:78:b8:62:5c:31:0b:f0:
0a:c9:87:8d:d3:c3:84:9b:7c:67:c4:19:88:f9:ac:
26:bb:22:2b:66:52:08:79:b0:9b:b7:31:40:22:1d:
61:c0:2b:94:23:07:0c:75:ab:31:67:86:69:44:df:
90:5b:fe:11:34:0c:70:bd:5b:e9:7e:c3:c6:6d:e3:
e8:54:69:b4:35:fc:4e:c0:5d:ee:7c:51:eb:7e:b4:
99:4f:8a:e6:75:ad:a0:ea:11:11:84:dc:d9:5d:22:
97:c0:b6:8f:e1:0e:ac:83:cd:cd:1c:36:5c:ec:1a:
2a:bd:0e:49:64:3b:dc:e5:3f:e2:0b:17:69:ba:00:
76:e0:b9:6c:0d:7f:a9:cc:55:77:93:3e:44:ee:d0:
59:2c:78:e6:8b:cc:aa:89:ae:f6:7b:8d:ab:73:26:
97:ae:18:97:47:30:52:f3:f0:01:7b:6c:c1:fd:23:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AA:98:7F:C8:04:BE:BB:90:47:C9:5D:70:0E:68:09:1B:16:E7:E2
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FqqYf8gEvruQR8ldcA5oCRsW5-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.163.0-62.72.164.255
62.72.168.0/23
62.72.177.0/24
62.72.184.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:4d:33:8e:a3:1f:b5:58:a7:88:4c:5c:40:fb:91:5a:73:c4:
67:33:60:30:a9:ef:51:e9:97:07:80:be:ff:c9:32:54:d5:03:
22:5a:c1:ab:30:ca:ff:44:d9:d8:42:47:a7:23:5a:a9:0c:99:
0e:a4:57:f6:15:d1:14:72:aa:d0:6d:a1:14:bc:f3:b1:76:62:
8f:03:97:a4:f9:e0:5f:49:7c:54:a9:81:22:60:24:23:ac:01:
42:69:48:fb:11:2d:9f:3f:e3:0c:1c:9f:87:de:77:7f:1c:cd:
be:bb:26:7d:a0:6d:37:b6:f7:a2:1b:66:46:d6:99:b1:36:c6:
42:ce:fd:6d:c8:8a:d0:9e:4d:bd:80:af:3f:a6:ab:9f:3c:c5:
be:0a:0a:d6:8a:f5:83:cd:4d:60:15:96:00:07:c9:4c:df:b4:
3e:47:4e:fb:15:af:52:e7:b0:b0:55:85:c7:3d:88:7b:60:ea:
18:92:88:16:57:fc:05:d9:26:73:f5:62:5b:a9:21:6a:50:da:
56:32:e5:be:b4:fe:7a:b5:ca:45:a4:06:2a:d9:01:5a:79:25:
58:3f:89:60:37:0c:26:1c:f2:75:94:50:91:fd:83:d2:83:e2:
0c:26:5c:dc:16:f3:6f:b6:c3:6a:39:a3:77:72:11:40:2d:81:
ab:5c:1b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org