Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HoBT5ymzClCL-1UgbGcWlx4V_EM.roa
File: HoBT5ymzClCL-1UgbGcWlx4V_EM.roa (raw, json)
Hash identifier: eGRLcZk2HTnCBjIBbLnIGcSMQXTdEvGzlu4e4c7lo7c=
Subject key identifier: 1E:80:53:E7:29:B3:0A:50:8B:FB:55:20:6C:67:16:97:1E:15:FC:43
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0186BB06F5C0B88A600D957E8DFE3E142C86
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HoBT5ymzClCL-1UgbGcWlx4V_EM.roa
Signing time: Tue 07 Mar 2023 07:44:00 +0000
ROA not before: Tue 07 Mar 2023 07:44:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 62.72.173.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 08:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:06:f5:c0:b8:8a:60:0d:95:7e:8d:fe:3e:14:2c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 7 07:44:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e8053e729b30a508bfb55206c6716971e15fc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:da:0d:05:cb:c3:6e:4a:83:40:02:a0:3a:
dc:29:a7:12:5e:ae:0b:cc:4f:c6:69:57:70:e7:48:
be:65:0f:83:2a:58:aa:aa:8b:cb:c3:c5:d1:04:90:
11:98:24:f2:f9:11:28:fc:d4:bf:a6:8e:15:a4:8f:
b1:89:06:77:3a:67:67:80:cb:e8:e4:93:f1:2e:c7:
cb:89:98:9e:b8:6f:8a:a6:e4:4c:ea:37:08:74:6d:
23:ab:fc:b6:f0:20:e7:45:e1:c3:14:3e:d7:5d:a6:
c9:13:9c:45:a3:cd:6b:95:06:cd:48:e9:df:d7:b4:
fe:a4:fe:80:43:5a:49:f7:90:8d:13:37:82:3f:cb:
9c:bd:64:91:17:33:81:79:4d:3f:91:52:90:71:46:
c2:be:1e:00:71:3e:fe:42:b8:f8:a9:e3:2c:d4:8f:
09:b3:09:1c:01:92:78:a6:3b:0d:9f:09:b8:f0:75:
55:73:21:a6:3f:09:f8:38:54:f9:ef:f8:bf:69:d7:
02:14:cd:1e:de:71:47:f0:dc:1a:dd:e0:f4:59:72:
66:a6:ea:25:a7:3c:18:8e:78:b1:3e:75:b7:e9:98:
c0:90:af:9c:3c:c7:be:07:2f:e8:bb:dd:42:eb:69:
3b:29:20:18:24:4d:a2:14:ad:79:4c:e1:12:16:86:
5b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:80:53:E7:29:B3:0A:50:8B:FB:55:20:6C:67:16:97:1E:15:FC:43
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HoBT5ymzClCL-1UgbGcWlx4V_EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.173.0-62.72.174.255
176.57.58.0/23
Signature Algorithm: sha256WithRSAEncryption
21:08:f7:36:7c:3c:38:14:6d:13:57:86:ba:1e:02:0d:12:25:
c8:02:41:c8:ec:ab:5a:5d:ad:68:40:65:24:b7:77:e9:e5:eb:
1b:6d:0f:32:b7:20:73:b8:2d:06:9a:66:93:25:0a:70:6e:f5:
e9:85:dd:2d:81:7f:78:eb:cc:8b:fd:09:3b:74:23:2b:01:77:
61:e5:3c:c5:f2:56:13:92:03:71:de:72:f2:0e:3c:ac:18:ba:
ab:6d:2b:db:ed:53:8a:d5:54:f2:43:f8:a8:db:27:b9:f1:34:
57:26:92:7a:a4:46:34:c7:4f:04:db:0b:ac:5a:bf:0f:13:a8:
dc:36:d0:34:ce:1d:a6:bd:67:aa:09:38:78:04:0a:65:d7:6f:
81:34:0f:83:21:df:0d:6b:74:2e:f8:e1:12:5a:4d:c1:f8:05:
8e:d9:f3:b9:07:14:19:ad:be:ca:53:74:13:bc:ac:9b:ac:67:
5e:b3:49:e1:2f:5a:2d:8d:f4:d2:54:3e:c7:4e:64:bf:69:f7:
8c:a6:33:57:af:27:bf:b7:18:14:e5:11:31:eb:92:e6:4b:8d:
99:ce:23:e1:43:bf:0b:25:9d:10:c7:5b:30:26:d8:e0:7e:c5:
5a:ba:7e:3f:5e:a5:af:dc:73:a4:1b:a5:6a:55:a0:7b:32:5f:
94:cc:ae:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org