Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/I3EtjS4X5r2OtdG5qiWQgFhPMNY.roa
File: I3EtjS4X5r2OtdG5qiWQgFhPMNY.roa (raw, json)
Hash identifier: veaijEygrKmmqW3G2JHOKroc9TFa8qQUFm2waP4GDGk=
Subject key identifier: 23:71:2D:8D:2E:17:E6:BD:8E:B5:D1:B9:AA:25:90:80:58:4F:30:D6
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018760D545320265661E7C7F614B667833EE
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/I3EtjS4X5r2OtdG5qiWQgFhPMNY.roa
Signing time: Sat 08 Apr 2023 12:26:42 +0000
ROA not before: Sat 08 Apr 2023 12:26:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 62.72.176.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Apr 2023 10:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:60:d5:45:32:02:65:66:1e:7c:7f:61:4b:66:78:33:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 8 12:26:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23712d8d2e17e6bd8eb5d1b9aa259080584f30d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:1d:06:83:5f:bb:c1:c7:6c:22:d9:f8:c6:
8d:cc:d5:60:52:e8:0e:b1:51:09:a7:0c:c8:17:6c:
b8:89:95:0b:c2:d8:71:b0:76:66:b1:3c:0a:2a:f3:
fe:6e:5d:4e:4b:a5:a6:d7:a1:b7:bf:e1:cf:ce:7a:
07:96:7d:32:84:d2:b9:ac:16:97:d9:92:0e:0a:79:
8f:60:cb:ca:6e:8f:5a:a7:a9:32:43:49:b9:fd:66:
5e:2b:53:b6:ea:dd:f7:30:43:8e:d2:c7:19:99:ba:
ec:d5:3c:68:2f:7e:05:65:f5:8b:1f:66:dc:9c:d5:
c1:78:fd:58:da:73:04:f6:98:29:4c:60:ea:80:90:
19:e8:46:56:e2:33:f1:44:9f:c0:e4:af:e0:0b:db:
f2:7b:ea:d3:eb:e9:ee:18:5e:93:35:53:d0:d6:55:
c3:f4:e4:de:40:71:ff:0a:3a:6e:51:a2:ad:f8:5f:
a5:13:3e:9a:33:a3:60:2e:3f:05:f9:2f:dd:78:22:
cc:44:ce:cd:b3:b7:80:42:62:16:92:40:22:db:2f:
f8:fb:ae:e0:ba:65:78:28:c5:cc:b8:c1:5f:af:1e:
f2:68:37:4e:4d:d4:f7:90:2d:13:43:15:65:a9:27:
3b:63:58:c3:64:6f:a6:aa:32:c2:20:c3:3b:53:3c:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:71:2D:8D:2E:17:E6:BD:8E:B5:D1:B9:AA:25:90:80:58:4F:30:D6
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/I3EtjS4X5r2OtdG5qiWQgFhPMNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/24
62.72.183.0-62.72.184.255
62.72.190.0/24
176.57.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:8d:be:e7:d9:94:42:ab:e7:1c:8a:8e:f9:43:40:b7:5b:82:
03:25:85:de:96:03:b5:05:93:c4:25:66:2d:7c:e2:9f:8c:d5:
9e:de:e6:c6:f9:7f:f3:c0:4e:6c:e4:ad:09:7f:9a:06:08:3f:
37:4f:48:d0:fd:d0:61:fd:11:76:71:7c:11:e9:21:da:fd:84:
1c:c3:54:d5:4f:e6:dc:fb:51:10:12:91:53:d3:94:27:dc:2f:
01:d1:3d:d6:6b:e1:ac:24:9a:38:3a:37:95:5a:3e:f9:0b:5b:
29:4a:9b:bf:e0:24:5e:b6:f0:ee:f5:43:a9:32:8b:c1:2f:e7:
aa:b8:ef:a8:02:20:20:b2:37:3c:b5:4d:1e:63:f4:44:5a:2a:
bf:da:39:0c:28:e8:a8:db:ee:32:45:9b:6c:90:5e:d8:e3:49:
33:23:d0:87:da:fe:66:d4:e7:6b:39:ef:10:ca:3e:80:cc:1e:
cf:86:e8:fa:19:3e:3e:d7:fa:a3:b6:a0:ee:51:1b:88:a0:51:
05:a5:43:d0:47:11:7a:7c:78:5a:fb:74:6d:c3:5d:8a:ac:3d:
68:c4:42:41:1c:f5:0c:2b:ce:8e:8e:94:82:cd:da:f4:7f:90:
03:f0:f0:02:a8:53:78:03:65:64:00:9c:11:2e:4b:60:1c:eb:
43:57:07:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org