Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/NX9X7UMvlf3yCBwQZ73iW2IvKLQ.roa
File: NX9X7UMvlf3yCBwQZ73iW2IvKLQ.roa (raw, json)
Hash identifier: 6qW3ffijbtTNaJdaHUo9XrcON3tLEI6xKo052aaq4Mc=
Subject key identifier: 35:7F:57:ED:43:2F:95:FD:F2:08:1C:10:67:BD:E2:5B:62:2F:28:B4
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01874B1F4B0C5C85874B7436843EF21EAC6E
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/NX9X7UMvlf3yCBwQZ73iW2IvKLQ.roa
Signing time: Tue 04 Apr 2023 07:15:54 +0000
ROA not before: Tue 04 Apr 2023 07:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213305
IP address blocks: 62.72.163.0/24 maxlen: 24
62.72.164.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.160.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 09:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:1f:4b:0c:5c:85:87:4b:74:36:84:3e:f2:1e:ac:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 4 07:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=357f57ed432f95fdf2081c1067bde25b622f28b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a9:93:4a:08:a6:70:30:be:10:ed:72:b8:ca:
9e:63:e4:38:83:c8:b2:6a:00:9d:95:a6:bb:16:e5:
38:02:e9:19:8a:d0:79:eb:29:45:f8:d7:89:d1:15:
54:1b:bc:02:3b:ca:6f:23:ed:ff:64:63:54:b0:f2:
cb:6f:f9:1d:84:09:55:f0:e5:83:4f:a9:25:2f:ce:
3d:14:7f:be:16:25:78:7d:42:c5:97:69:99:ce:0e:
09:8d:9c:ab:d4:32:ce:63:f7:64:74:da:d0:fd:b7:
a9:07:20:63:ea:46:ef:f5:c6:b9:39:62:0a:ae:9d:
a4:d5:dc:bd:c0:d0:98:10:ce:3f:d7:c0:90:d1:d4:
83:0e:97:93:fe:a9:f7:54:4e:d3:bc:b9:ca:ac:82:
03:83:94:08:0a:17:aa:f0:c6:f4:d9:c8:3f:cc:54:
a6:c7:2a:23:88:01:ea:ea:41:90:91:06:a2:87:53:
a4:ca:27:1f:cb:a0:cc:a2:e8:63:27:50:9e:13:43:
56:c6:53:dc:dc:48:19:1f:52:d1:da:cc:d1:49:7d:
03:bb:97:7f:57:33:23:e5:ed:a8:07:d1:6b:17:f8:
5f:01:2b:25:f9:9e:77:1c:36:da:fe:1e:1c:a8:c1:
6a:e3:7d:01:65:40:6c:c7:29:63:fb:25:ad:ea:fb:
cd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7F:57:ED:43:2F:95:FD:F2:08:1C:10:67:BD:E2:5B:62:2F:28:B4
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/NX9X7UMvlf3yCBwQZ73iW2IvKLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0/23
62.72.163.0-62.72.164.255
62.72.168.0/23
Signature Algorithm: sha256WithRSAEncryption
70:40:b9:21:4c:6e:13:75:76:8d:a4:47:1d:cb:64:39:d3:25:
64:71:80:f7:a0:af:07:20:88:0f:2e:b6:a7:fb:ba:1e:5b:6c:
43:df:20:f1:e8:03:76:25:13:46:34:99:c2:7d:4d:ab:62:c7:
97:8e:ab:6d:d8:12:eb:13:2c:9e:f2:05:ee:a8:1f:82:31:63:
1e:87:9a:bb:11:a2:40:9e:a1:01:18:11:65:dd:4e:d1:a4:53:
fa:e7:a4:4b:22:03:d5:1c:14:cd:bb:2c:9a:6d:53:28:70:b4:
79:6a:bd:41:60:a7:c1:6d:85:f4:8a:ea:ec:91:d8:fa:cc:2b:
34:d1:2c:9d:db:1b:f9:4f:07:6e:e6:b3:b1:b6:fa:90:1e:0a:
a0:ec:c1:92:12:b3:58:d1:eb:86:65:5c:16:04:68:0b:2d:84:
67:ef:6f:87:f8:b5:19:94:95:fb:78:37:7a:ed:4d:6d:6d:f9:
aa:c2:4e:8d:be:e2:50:29:36:76:5d:41:48:cf:e4:27:9e:f0:
34:06:4c:54:a9:41:a1:4b:27:c9:17:b1:2d:de:b3:3a:22:db:
37:3b:dd:f4:6d:56:36:e7:51:b4:75:e6:3b:df:fb:03:69:71:
63:bd:b8:9d:f2:c0:21:9d:80:71:86:5e:f6:c0:e1:f7:ae:f6:
15:ec:dd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org