Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/LlKsKFDRFDwfhvK8_UJNvuJuRUA.roa
File: LlKsKFDRFDwfhvK8_UJNvuJuRUA.roa (raw, json)
Hash identifier: cuVrg/1QGpgJmjyB05Fw+ymEu8/Dqa2NwX3gbp4ER04=
Subject key identifier: 2E:52:AC:28:50:D1:14:3C:1F:86:F2:BC:FD:42:4D:BE:E2:6E:45:40
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0185D4F3FABA99B4B7F83E1104518CA4FC7F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/LlKsKFDRFDwfhvK8_UJNvuJuRUA.roa
Signing time: Sat 21 Jan 2023 15:30:37 +0000
ROA not before: Sat 21 Jan 2023 15:30:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 62.72.164.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.163.0/24 maxlen: 24
62.72.160.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.171.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 06:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d4:f3:fa:ba:99:b4:b7:f8:3e:11:04:51:8c:a4:fc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 21 15:30:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e52ac2850d1143c1f86f2bcfd424dbee26e4540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:78:0a:b6:12:ee:63:3b:6c:e8:e1:ab:7d:
19:dc:d5:ae:32:1c:59:43:55:7a:d5:ed:f8:a7:29:
ee:15:20:a2:10:f9:5d:19:a2:b5:a7:34:68:a1:ed:
1e:b7:eb:17:9b:5d:4e:17:a6:68:45:b2:7b:c7:b5:
86:1c:a1:ed:d7:78:84:33:c3:c6:b1:c3:ae:2c:b4:
c2:cf:ab:58:d3:af:77:42:37:32:9e:08:cc:e6:ba:
6d:c0:f2:9c:f6:75:60:5e:d6:fe:5e:30:62:37:5b:
49:ac:a4:fe:6f:4d:64:94:ca:94:b7:37:0f:1c:29:
9e:79:03:9d:8c:88:cb:20:f6:86:8e:eb:74:22:f8:
9a:2b:c3:19:6d:03:30:bd:30:6a:91:a5:2f:dc:cc:
85:2b:a0:10:9d:79:8b:72:5a:17:10:cb:ff:21:17:
0a:a7:d3:85:c5:b6:8b:50:4b:81:89:7a:65:38:f5:
0b:05:4e:5b:98:05:2d:3c:77:d6:cd:1e:10:82:62:
25:98:1c:3e:21:49:22:18:7d:b2:91:09:b5:ec:14:
36:be:c2:bd:0f:9b:b8:42:1a:be:5d:4e:58:fa:77:
ee:f5:a0:3a:4c:85:c1:a6:10:f5:5b:a2:ff:36:bb:
2f:fe:24:65:45:58:b0:cc:ec:cc:49:71:61:99:5b:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:52:AC:28:50:D1:14:3C:1F:86:F2:BC:FD:42:4D:BE:E2:6E:45:40
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/LlKsKFDRFDwfhvK8_UJNvuJuRUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0-62.72.164.255
62.72.168.0/22
62.72.173.0-62.72.176.255
62.72.183.0-62.72.184.255
Signature Algorithm: sha256WithRSAEncryption
96:4e:64:e7:16:8e:1e:74:22:6a:6a:f7:1a:a8:86:12:cd:5d:
d6:d2:98:cf:9e:56:9e:55:6a:6d:72:c8:37:bd:c1:5c:45:4b:
2f:6b:42:e1:65:e4:4b:3f:5a:94:a2:53:49:50:76:68:3a:c9:
ac:a3:89:dd:16:d7:82:b9:a0:31:8c:12:99:47:f9:ed:18:15:
74:a8:85:13:f9:8d:a4:34:5a:13:96:be:7a:d5:63:3a:f3:af:
b0:c5:d3:e7:53:a0:2c:df:b5:88:67:1e:1c:28:3c:b8:52:7e:
4f:1b:28:b3:ba:2e:2d:d8:89:f7:a4:da:d1:d3:37:f3:2f:95:
4f:33:e3:49:d8:be:83:f0:a1:1d:c3:1b:32:a2:10:57:1c:62:
39:fe:2e:93:bc:d6:20:a0:ca:41:08:0b:da:b5:e4:47:54:31:
ca:a7:5a:5d:06:ab:79:2f:3b:cd:d1:aa:24:27:66:27:59:03:
88:57:f8:df:23:05:7a:db:87:d2:61:49:95:f7:f1:bf:60:e1:
59:9e:4c:34:a5:fe:9a:16:b5:4f:77:00:16:58:ec:c4:ef:80:
6d:db:e4:93:a1:ae:ef:00:04:90:30:a7:6b:76:61:d5:d6:d9:
54:bc:d9:7f:12:7d:d5:bb:31:35:cb:22:b2:53:54:6c:93:f5:
34:3f:51:b6
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYXU8/q6mbS3+D4RBFGMpPx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwMTIxMTUzMDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTUyYWMyODUwZDExNDNjMWY4NmYyYmNmZDQyNGRiZWUyNmU0NTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaZ4CrYS7mM7bOjhq30Z3NWuMhxZ
Q1V61e34pynuFSCiEPldGaK1pzRooe0et+sXm11OF6ZoRbJ7x7WGHKHt13iEM8PG
scOuLLTCz6tY0693QjcyngjM5rptwPKc9nVgXtb+XjBiN1tJrKT+b01klMqUtzcP
HCmeeQOdjIjLIPaGjut0IviaK8MZbQMwvTBqkaUv3MyFK6AQnXmLcloXEMv/IRcK
p9OFxbaLUEuBiXplOPULBU5bmAUtPHfWzR4QgmIlmBw+IUkiGH2ykQm17BQ2vsK9
D5u4Qhq+XU5Y+nfu9aA6TIXBphD1W6L/Nrsv/iRlRViwzOzMSXFhmVtw3wIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFC5SrChQ0RQ8H4byvP1CTb7ibkVAMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvTGxLc0tGRFJGRHdmaHZLOF9VSk52dUp1UlVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAU+SKAD
BAA+SKQDBAI+SKgwDAMEAD5IrQMEAD5IsDAMAwQAPki3AwQAPki4MA0GCSqGSIb3
DQEBCwUAA4IBAQCWTmTnFo4edCJqavcaqIYSzV3W0pjPnlaeVWptcsg3vcFcRUsv
a0LhZeRLP1qUolNJUHZoOsmso4ndFteCuaAxjBKZR/ntGBV0qIUT+Y2kNFoTlr56
1WM686+wxdPnU6As37WIZx4cKDy4Un5PGyizui4t2In3pNrR0zfzL5VPM+NJ2L6D
8KEdwxsyohBXHGI5/i6TvNYgoMpBCAvateRHVDHKp1pdBqt5LzvN0aokJ2YnWQOI
V/jfIwV624fSYUmV9/G/YOFZnkw0pf6aFrVPdwAWWOzE74Bt2+SToa7vAASQMKdr
dmHV1tlUvNl/En3VuzE1yyKyU1Rsk/U0P1G2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org