Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/GMwjFmdIpkQyLm_Obj4Uv50bucA.roa
File: GMwjFmdIpkQyLm_Obj4Uv50bucA.roa (raw, json)
Hash identifier: 8vrPHY8qcC+msnwsYfbvD4AM8wUuR3XbOb5ho2vJTu4=
Subject key identifier: 18:CC:23:16:67:48:A6:44:32:2E:6F:CE:6E:3E:14:BF:9D:1B:B9:C0
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01882D6CF1D4A8BB131143B8A058CD166430
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/GMwjFmdIpkQyLm_Obj4Uv50bucA.roa
Signing time: Thu 18 May 2023 05:54:54 +0000
ROA not before: Thu 18 May 2023 05:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 May 2023 07:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2d:6c:f1:d4:a8:bb:13:11:43:b8:a0:58:cd:16:64:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 18 05:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18cc23166748a644322e6fce6e3e14bf9d1bb9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:16:77:42:93:4e:dc:d6:4e:59:82:7c:99:e2:
f2:19:ef:86:e7:81:0d:bd:5d:f8:48:66:c5:f6:5b:
11:8f:c5:fa:1c:e5:40:bf:e6:19:fa:50:cc:5b:9d:
7a:a1:3b:75:26:b0:73:90:ec:96:5e:b7:f1:3c:3e:
0b:33:49:39:5e:0d:97:c8:73:e8:61:35:ba:c4:ce:
93:de:37:2b:91:b5:3d:fd:5e:1f:f5:c9:40:5d:65:
26:18:be:b6:99:6f:62:61:c4:49:ca:a2:37:ea:06:
83:96:72:6f:46:59:d9:3e:fd:c2:e4:d9:15:2e:18:
36:50:26:a0:3a:c3:ef:c7:e7:d3:af:e5:3d:04:3f:
c0:2f:6b:71:76:00:bd:ed:77:f6:e4:7f:24:03:43:
02:97:ad:a1:74:5b:2e:71:19:80:02:dc:29:fc:91:
44:81:11:86:f3:b1:e8:ee:c8:83:9e:28:c3:1e:4c:
b2:e2:17:5e:0d:4f:99:48:7d:3c:7c:2c:be:d4:0a:
3a:46:08:b0:9a:db:28:1f:d3:a6:2e:4c:03:23:f0:
d4:07:15:4d:4b:a3:15:c5:3e:e3:01:3f:49:0b:f1:
bd:03:1c:a4:7b:dc:b5:f9:7c:88:d4:85:4b:7e:ce:
a2:a6:94:67:b8:0a:95:ae:db:f1:bb:08:bf:ea:8c:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CC:23:16:67:48:A6:44:32:2E:6F:CE:6E:3E:14:BF:9D:1B:B9:C0
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/GMwjFmdIpkQyLm_Obj4Uv50bucA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0/24
62.72.177.0/24
62.72.183.0/24
62.72.191.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:7a:cf:a7:79:8d:1b:f0:04:87:31:a6:02:66:2f:73:ba:f3:
ec:a1:68:bb:a4:cd:f1:01:f5:3c:fb:7f:f9:90:6e:34:78:42:
6a:af:d6:9b:07:81:0d:7a:25:97:8d:3f:9a:db:32:3e:41:39:
11:4a:8d:0c:e3:61:66:10:c0:98:17:f5:47:a3:f8:ff:5a:db:
0b:d5:eb:28:56:dd:59:9c:b7:d5:a9:bf:d0:f0:af:00:90:8a:
09:42:b9:a7:6c:7e:9e:9a:ca:61:c2:51:e4:f8:eb:6b:33:1a:
28:f0:6e:b3:e3:e8:a0:91:ae:81:16:54:ad:3d:a1:19:79:53:
8f:28:28:ee:37:64:f0:35:7f:35:8b:cf:02:eb:32:3a:1a:2d:
5a:14:70:6d:b9:fb:ad:ed:62:33:d0:08:34:9c:45:82:44:36:
df:5a:fd:84:25:1d:49:28:34:c2:dc:73:2c:57:10:71:7f:da:
40:43:0d:e6:45:90:17:67:d6:fd:7c:cd:70:da:35:1a:cc:0b:
38:de:5c:ac:bd:5a:63:33:1f:1b:2b:a8:a9:7e:52:b3:c1:e4:
6f:f6:bb:a2:83:4b:e1:d6:32:41:67:b1:d7:60:da:21:24:fd:
c1:06:2d:0b:a2:cd:fe:b6:8f:7d:47:7d:18:70:90:44:e5:ad:
a8:b3:df:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org