Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Gp7FtOSgxSeRjANaYOmXL_fES9I.roa
File: Gp7FtOSgxSeRjANaYOmXL_fES9I.roa (raw, json)
Hash identifier: RiWUE4Ax1USF24MzTO2TUuTkhDd+Gu3vyyPvKMRrIJo=
Subject key identifier: 1A:9E:C5:B4:E4:A0:C5:27:91:8C:03:5A:60:E9:97:2F:F7:C4:4B:D2
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018625CEB6A8B055218DF2541F520D1B8744
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Gp7FtOSgxSeRjANaYOmXL_fES9I.roa
Signing time: Mon 06 Feb 2023 08:19:09 +0000
ROA not before: Mon 06 Feb 2023 08:19:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 62.72.164.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.163.0/24 maxlen: 24
62.72.160.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.171.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
176.57.61.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
176.57.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Mar 2023 09:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:25:ce:b6:a8:b0:55:21:8d:f2:54:1f:52:0d:1b:87:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 6 08:19:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a9ec5b4e4a0c527918c035a60e9972ff7c44bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:84:d8:bc:b1:92:fb:dc:f0:83:75:0d:af:
8c:55:5d:12:f3:b0:6d:7d:70:15:df:4a:2a:4f:a9:
e2:2b:ea:43:35:af:ac:d5:b0:7b:0c:3c:c3:14:67:
a1:1e:01:c6:3c:08:36:21:29:3f:f1:95:69:b5:d7:
de:c2:89:70:2b:c8:5e:e0:6b:79:58:6b:e1:fc:6b:
85:ec:0c:55:12:54:9b:a2:82:9e:eb:e8:1c:43:48:
0c:3f:dd:bf:25:d3:06:08:09:79:52:5c:21:01:1f:
69:a2:86:8a:c9:6e:4c:5f:09:5f:96:34:45:9b:f2:
cc:ea:c0:33:39:32:35:d7:b0:3d:4e:02:35:a9:09:
70:8b:63:2f:ff:a1:1c:88:9f:01:38:d5:b2:8c:65:
5e:55:f9:6f:e8:16:c2:ff:65:35:93:26:a7:75:77:
51:ff:08:bb:98:cf:d2:13:e4:8f:70:dd:f7:5d:c7:
a0:3d:05:ff:bc:99:ae:e2:01:83:f2:e6:f1:ad:a7:
c4:d3:4b:5a:2a:a2:bf:ce:19:c4:da:7d:e4:0a:62:
6d:a6:37:c6:bb:c1:47:60:06:cf:0b:de:21:77:b5:
a9:70:01:2f:e3:65:11:00:c1:ce:ae:c4:c7:67:04:
92:bc:00:f8:cb:e2:5d:45:0b:1b:51:f3:ed:f7:7d:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9E:C5:B4:E4:A0:C5:27:91:8C:03:5A:60:E9:97:2F:F7:C4:4B:D2
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Gp7FtOSgxSeRjANaYOmXL_fES9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0-62.72.164.255
62.72.168.0/22
62.72.173.0-62.72.176.255
62.72.183.0-62.72.184.255
62.72.190.0/24
176.57.60.0-176.57.62.255
Signature Algorithm: sha256WithRSAEncryption
2e:72:95:55:69:ce:8c:da:6f:2c:09:bd:42:ae:6f:a5:ef:32:
c1:39:c8:08:bc:c1:42:74:c4:15:3a:af:35:28:db:c2:9d:dc:
bc:b7:c4:8d:47:d4:e6:59:7d:78:d7:a8:f9:8c:b5:4b:8d:66:
54:77:69:76:f7:7c:56:46:86:3e:71:95:fd:0b:ca:c3:4c:b1:
c6:35:f2:07:09:68:54:1d:61:47:c2:7b:b2:88:be:1c:ed:96:
46:24:b5:2d:91:ba:ff:9c:cb:84:59:b8:d0:13:66:43:26:9c:
cb:12:53:82:55:e8:85:91:7a:81:e1:7c:b2:aa:2d:88:f0:76:
cc:69:90:db:b0:b8:33:2a:9b:30:38:93:29:15:48:31:a3:c4:
61:06:5f:76:75:07:bb:aa:f5:14:f5:d5:c7:73:b4:71:2a:88:
2c:50:01:7b:57:be:91:39:22:ed:5b:d9:0c:9e:0b:86:0c:ae:
9c:e5:3e:d0:e5:1c:b6:98:e9:91:90:ae:93:29:a4:53:a3:bb:
6b:0d:37:5d:e1:98:13:21:df:95:40:bc:65:89:d4:aa:35:aa:
9c:df:ab:39:e8:e6:6b:c3:6a:04:94:53:f2:ce:e9:64:c6:09:
64:3c:69:4b:c5:1f:8a:45:94:4b:89:34:dc:bf:1e:dd:fc:19:
b3:cd:ec:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org