Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OY9fQUTyu-jq3Nj72LFrIGsdqUQ.roa
File: OY9fQUTyu-jq3Nj72LFrIGsdqUQ.roa (raw, json)
Hash identifier: Aj2Mt8wD2GyGnNU6foz8ipTRDrnWnTlXJ+kXnFQlFRI=
Subject key identifier: 39:8F:5F:41:44:F2:BB:E8:EA:DC:D8:FB:D8:B1:6B:20:6B:1D:A9:44
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01857E658BDE657DB1673AA51346689D7511
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OY9fQUTyu-jq3Nj72LFrIGsdqUQ.roa
Signing time: Wed 04 Jan 2023 20:07:42 +0000
ROA not before: Wed 04 Jan 2023 20:07:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.160.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 20:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7e:65:8b:de:65:7d:b1:67:3a:a5:13:46:68:9d:75:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 4 20:07:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=398f5f4144f2bbe8eadcd8fbd8b16b206b1da944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5e:5a:b4:8a:5e:a2:59:87:40:eb:15:8b:d5:
c6:db:d6:4c:40:8a:8b:3b:99:fb:39:07:ef:42:e9:
77:99:0a:59:eb:d1:78:b3:f0:61:ee:e0:43:b5:f4:
d7:aa:11:ec:63:96:0b:20:a8:1a:3f:52:cf:2c:14:
a1:5b:82:ed:68:74:f1:d9:42:19:c9:86:1d:c5:4f:
d8:1f:ad:53:dd:b5:91:5e:d2:0d:01:66:02:c7:62:
61:3b:4d:bc:f4:7c:e4:8a:14:22:60:0c:65:6b:a9:
75:39:df:55:b5:28:e4:17:29:65:37:6e:3f:cf:76:
80:00:7d:36:62:0b:e2:37:5f:3a:13:16:4a:a3:ff:
c3:d4:83:7c:c9:21:c3:e7:f2:30:7b:63:1b:a8:30:
96:03:c6:0d:7a:6d:c8:f7:5e:54:41:e9:4d:5d:4b:
76:bb:0c:09:b9:ab:01:53:ff:f8:43:97:f0:3a:62:
96:28:d2:83:18:e0:79:fe:1f:57:ba:ba:29:bf:a0:
d8:25:ad:ba:21:a6:cb:3c:38:47:86:47:d8:96:4d:
e3:71:08:65:0d:a7:75:05:2a:9f:a6:65:0e:d4:7f:
2c:9b:ce:15:db:3c:01:92:45:d5:a9:82:09:ac:36:
bf:6d:ec:0a:96:34:4e:14:4b:9a:66:14:2a:4b:2a:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8F:5F:41:44:F2:BB:E8:EA:DC:D8:FB:D8:B1:6B:20:6B:1D:A9:44
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/OY9fQUTyu-jq3Nj72LFrIGsdqUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0-62.72.162.255
62.72.176.0/24
62.72.183.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ac:36:55:fd:57:fa:17:3c:d3:e1:ae:94:4d:54:32:bb:d0:
52:ad:df:d1:6f:04:ec:bd:a6:94:72:92:ac:00:80:6d:76:d6:
1a:b5:5f:46:f1:9a:57:38:a7:50:a1:a4:59:c4:c4:73:c9:c2:
1a:a8:19:00:02:c7:b4:d9:63:56:0c:6e:65:58:23:ea:f2:00:
bf:1b:f6:52:89:14:db:96:75:25:36:39:90:78:ce:ce:2c:55:
fc:11:ac:65:c2:4b:e9:d9:1e:af:f1:34:15:85:2a:1d:bb:3e:
ff:de:8d:69:84:d8:48:7f:a0:57:87:6f:d9:39:07:54:7c:3f:
a5:59:3b:e1:d8:a9:34:43:18:f4:64:37:3e:20:e6:89:10:f4:
ac:0f:35:7c:1b:02:43:f9:09:07:1d:92:e6:f1:a9:d9:6d:e3:
38:cc:5e:6a:cb:f6:6a:e4:fb:f2:2c:8e:af:59:c9:13:6c:61:
e9:ab:20:b2:2c:4c:4d:4d:16:31:0e:26:ec:db:f4:2f:e9:56:
39:13:5f:94:e5:49:3b:56:a4:76:26:40:67:03:67:df:66:83:
42:11:14:49:16:2c:d2:49:8a:ef:3a:c2:a0:96:b7:b9:b7:8b:
1b:9b:64:fa:78:86:46:5f:55:c4:ab:d2:d5:31:46:e4:0a:4e:
eb:ce:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org