Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ILSl5AdQbSrHc7bdn2J8ZpVh7a4.roa
File: ILSl5AdQbSrHc7bdn2J8ZpVh7a4.roa (raw, json)
Hash identifier: T2P5aVqmEkoXXgximJ4qE3c4j7uDZqNj5yesrNQsOEw=
Subject key identifier: 20:B4:A5:E4:07:50:6D:2A:C7:73:B6:DD:9F:62:7C:66:95:61:ED:AE
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0188245F41D2EA4DED1CB49AB98EF0A82E9C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ILSl5AdQbSrHc7bdn2J8ZpVh7a4.roa
Signing time: Tue 16 May 2023 11:43:22 +0000
ROA not before: Tue 16 May 2023 11:43:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 12:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:5f:41:d2:ea:4d:ed:1c:b4:9a:b9:8e:f0:a8:2e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 16 11:43:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20b4a5e407506d2ac773b6dd9f627c669561edae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b5:21:66:db:f3:25:f6:e2:a6:e6:53:ad:bf:
03:ec:cc:4b:78:44:f9:2a:6b:41:01:0a:0d:bd:6d:
83:ee:e0:87:92:80:d2:fa:99:c9:50:f1:50:00:76:
f7:d6:e5:d7:ef:21:d0:74:3b:52:dc:10:c5:55:10:
de:8d:12:65:52:8b:db:76:1a:85:e1:2a:23:e9:ed:
bd:0d:75:f8:44:2d:71:a3:22:12:b3:93:be:6c:a6:
98:c3:cf:bc:b7:41:82:f1:bb:c8:05:bb:ef:13:fd:
3d:52:94:0d:ab:67:1f:31:8d:e5:b0:5a:f3:04:38:
73:44:14:64:90:43:6f:9f:21:10:34:25:a7:03:8a:
07:94:b6:c6:10:5e:8b:9a:72:bf:17:f5:8f:99:f3:
39:49:90:57:44:fe:3b:64:83:9d:ad:36:ef:4f:c0:
cd:b5:12:a7:20:61:46:6f:d9:bd:de:70:07:eb:1d:
51:31:a9:15:cc:32:e4:7c:da:ad:d3:7c:58:9c:cf:
c7:2d:51:f3:ed:cb:bd:ec:34:27:9f:ee:f0:06:72:
c7:d5:0f:87:c4:c1:45:36:59:b9:83:15:2e:cd:3d:
84:55:6c:c9:5d:05:fb:fd:7b:aa:f2:5d:ea:f8:f1:
e6:da:bb:fc:14:28:d5:63:18:92:15:57:3f:d2:db:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B4:A5:E4:07:50:6D:2A:C7:73:B6:DD:9F:62:7C:66:95:61:ED:AE
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ILSl5AdQbSrHc7bdn2J8ZpVh7a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0/24
62.72.177.0/24
62.72.184.0/24
62.72.191.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
95:98:a9:49:06:20:9d:67:fd:fd:78:48:40:79:fa:d8:fd:90:
ff:f0:aa:35:c0:cd:e4:14:11:16:29:2b:d8:4d:11:68:50:93:
42:c1:05:a4:47:82:82:fa:77:35:bb:bf:f3:43:18:4b:24:0b:
32:a1:6c:c4:72:e2:41:72:d0:99:4e:fe:c3:9d:97:87:d1:79:
00:9c:61:e5:bb:65:c0:51:41:0f:71:e1:30:7c:41:fe:7a:75:
a2:5e:37:d2:d0:f9:b0:01:c1:98:12:06:49:4e:ac:17:4c:33:
68:66:96:ac:bb:d1:17:8f:4b:36:f7:43:65:c0:d5:2b:10:66:
28:12:89:23:31:3c:60:d5:91:ea:ea:3b:a4:95:de:12:a7:f8:
9e:2e:13:49:d4:cd:32:3c:b0:cd:63:27:03:f0:b1:4d:31:a8:
7a:48:46:5c:5f:05:c0:b6:df:e2:c9:3b:2c:b6:0b:d4:4e:e0:
3d:7e:5f:d3:c7:2c:d4:18:b5:d0:42:7f:f5:30:69:f2:cb:7b:
85:06:94:ad:1e:64:da:06:8f:88:7f:d9:0c:df:a6:cd:e5:e5:
b3:57:5c:6d:8d:49:fc:fd:e6:b2:16:e1:0b:4a:21:2b:64:e5:
d8:ea:cb:5c:d5:9c:4e:0f:84:03:87:1a:f5:95:de:7b:15:58:
60:22:c8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org