Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JFcyB1cv4rJraLUgmmNhF6KnsQ0.roa
File: JFcyB1cv4rJraLUgmmNhF6KnsQ0.roa (raw, json)
Hash identifier: PTVbLNwai28i9vug8sI7gN7shlOihBxLcC2Yuda1C/c=
Subject key identifier: 24:57:32:07:57:2F:E2:B2:6B:68:B5:20:9A:63:61:17:A2:A7:B1:0D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01856F4B81967060C5A966AFBB0AC937B0C2
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JFcyB1cv4rJraLUgmmNhF6KnsQ0.roa
Signing time: Sun 01 Jan 2023 21:44:57 +0000
ROA not before: Sun 01 Jan 2023 21:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 62.72.177.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Feb 2023 06:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:81:96:70:60:c5:a9:66:af:bb:0a:c9:37:b0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 21:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24573207572fe2b26b68b5209a636117a2a7b10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:e1:b5:43:88:f6:08:0b:4e:ee:39:a0:e3:
9b:94:22:5f:48:60:c2:58:21:09:71:f2:a5:18:50:
c0:21:8e:f7:ce:5e:c1:46:1a:9f:87:1d:26:8b:7b:
b8:ec:7f:dc:cb:0f:77:6a:03:c1:81:1e:ff:57:69:
df:95:f5:01:00:5c:d9:9e:06:eb:8d:70:86:e3:ca:
1a:02:8e:08:c0:c2:e5:d3:04:c1:7a:03:aa:14:16:
4e:cd:e8:c7:06:b2:02:83:6d:07:31:93:53:cc:e8:
9f:5f:96:b2:23:f9:9e:f8:f9:48:3a:f6:66:68:38:
0c:29:33:bb:c3:b5:64:b4:9e:b7:65:8f:15:d1:eb:
5f:b0:36:3b:94:f3:c1:d4:5d:19:6c:cc:c9:8f:1e:
59:be:7c:69:14:f6:64:23:b7:10:6b:6f:e7:8a:b8:
f9:c0:90:b6:6a:8e:9d:8e:6c:80:d5:be:3f:ad:37:
b9:30:8c:18:49:48:be:2e:f5:83:dc:7f:08:44:90:
c9:16:ff:34:38:db:dc:d1:a1:06:f5:0f:e7:65:20:
c4:3c:06:4f:c3:a3:73:45:26:19:61:72:3f:93:bf:
35:71:62:c4:c2:f2:ad:b2:75:2e:e0:c7:67:6f:60:
6e:ad:06:12:37:d3:9e:4a:08:8a:3e:cb:b0:40:1d:
31:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:57:32:07:57:2F:E2:B2:6B:68:B5:20:9A:63:61:17:A2:A7:B1:0D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JFcyB1cv4rJraLUgmmNhF6KnsQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.177.0/24
62.72.190.0/23
Signature Algorithm: sha256WithRSAEncryption
30:21:27:26:51:44:b1:28:c5:57:2a:4f:51:e7:75:35:8b:5b:
0e:2a:3b:6c:42:29:bf:b7:0f:f1:34:00:a0:dc:20:67:5a:ad:
23:45:c7:f3:88:b9:39:19:da:f9:b8:79:03:0d:17:a1:f7:f7:
a9:d0:06:2a:9c:9a:8e:95:74:37:f8:03:a2:48:25:2c:43:7d:
30:5a:b8:53:13:7b:64:af:00:01:79:54:bb:d8:f5:e9:7a:91:
9a:20:1b:08:ca:99:22:5d:6d:51:bd:ee:7f:67:21:e0:8e:7f:
94:06:c6:0e:c3:a7:d3:3c:f8:2d:76:de:55:6d:b7:30:7b:23:
34:98:0f:02:3a:f9:89:66:e0:32:92:14:19:ed:de:ba:e9:11:
ac:a5:30:7d:4e:03:71:40:55:0d:a5:47:57:a6:9e:92:c7:fb:
22:df:b0:8f:b5:3c:c1:ae:42:a1:0b:b6:c9:ee:bb:b0:29:09:
00:fc:ae:9c:f9:19:2e:b3:60:f9:a0:ef:d7:38:92:2d:ad:0d:
5b:22:8b:33:0a:aa:7f:b1:53:81:47:ab:98:f0:7a:04:63:42:
fb:30:57:37:ce:43:63:6f:59:24:8d:73:90:69:51:af:c0:83:
62:e2:7e:eb:11:78:cf:f3:8b:63:84:45:29:c7:7e:cb:09:f2:
e0:fd:76:a5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvS4GWcGDFqWavuwrJN7DCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwMTAxMjE0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDU3MzIwNzU3MmZlMmIyNmI2OGI1MjA5YTYzNjExN2EyYTdiMTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR3htUOI9ggLTu45oOOblCJfSGDC
WCEJcfKlGFDAIY73zl7BRhqfhx0mi3u47H/cyw93agPBgR7/V2nflfUBAFzZngbr
jXCG48oaAo4IwMLl0wTBegOqFBZOzejHBrICg20HMZNTzOifX5ayI/me+PlIOvZm
aDgMKTO7w7VktJ63ZY8V0etfsDY7lPPB1F0ZbMzJjx5ZvnxpFPZkI7cQa2/nirj5
wJC2ao6djmyA1b4/rTe5MIwYSUi+LvWD3H8IRJDJFv80ONvc0aEG9Q/nZSDEPAZP
w6NzRSYZYXI/k781cWLEwvKtsnUu4Mdnb2BurQYSN9OeSgiKPsuwQB0xpwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCRXMgdXL+Kya2i1IJpjYReip7ENMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvSkZjeUIxY3Y0ckpyYUxVZ21tTmhGNktuc1EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkixAwQB
Pki+MA0GCSqGSIb3DQEBCwUAA4IBAQAwIScmUUSxKMVXKk9R53U1i1sOKjtsQim/
tw/xNACg3CBnWq0jRcfziLk5Gdr5uHkDDReh9/ep0AYqnJqOlXQ3+AOiSCUsQ30w
WrhTE3tkrwABeVS72PXpepGaIBsIypkiXW1Rve5/ZyHgjn+UBsYOw6fTPPgtdt5V
bbcweyM0mA8COvmJZuAykhQZ7d666RGspTB9TgNxQFUNpUdXpp6Sx/si37CPtTzB
rkKhC7bJ7ruwKQkA/K6c+Rkus2D5oO/XOJItrQ1bIoszCqp/sVOBR6uY8HoEY0L7
MFc3zkNjb1kkjXOQaVGvwINi4n7rEXjP84tjhEUpx37LCfLg/Xal
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org