Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/R5g41TdKhkEgoyUg2s8ZYIpbPlU.roa
File: R5g41TdKhkEgoyUg2s8ZYIpbPlU.roa (raw, json)
Hash identifier: 3mN2bqO5QJGAyX9+lPb9wHcXEEae74TughE/niCean8=
Subject key identifier: 47:98:38:D5:37:4A:86:41:20:A3:25:20:DA:CF:19:60:8A:5B:3E:55
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01876A69F81559C92E02F685517482D24F4D
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/R5g41TdKhkEgoyUg2s8ZYIpbPlU.roa
Signing time: Mon 10 Apr 2023 09:05:42 +0000
ROA not before: Mon 10 Apr 2023 09:05:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.72.160.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Apr 2023 10:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:69:f8:15:59:c9:2e:02:f6:85:51:74:82:d2:4f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 10 09:05:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=479838d5374a864120a32520dacf19608a5b3e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:56:15:4e:b4:a7:35:d5:a6:4b:a6:98:4a:
16:1a:0a:bb:a5:54:67:d9:e0:87:93:0f:58:74:3a:
30:b2:f7:81:ea:c3:74:2c:04:6b:50:16:b2:b5:31:
76:43:63:92:f9:56:2a:e0:3d:80:78:48:ae:b3:40:
c6:89:62:26:40:dd:8f:3f:11:80:3b:cf:97:19:9e:
98:60:72:b0:41:f6:d0:2a:a0:a2:b0:29:4b:1f:32:
69:f7:a8:8b:1e:bf:07:69:f8:fa:8d:c6:06:5d:2d:
67:43:a8:89:de:45:85:8d:c7:41:04:32:f0:0e:f4:
0d:f2:b3:8b:95:4e:e1:d9:cf:b6:d7:7c:00:5d:55:
e4:08:74:2b:2e:05:fb:b3:94:5c:25:d1:78:a9:de:
1b:2b:89:51:05:7a:40:63:dd:5d:15:6e:04:61:b9:
59:e4:78:a4:24:31:74:8b:7e:f3:3f:53:35:42:d7:
a8:32:8b:02:10:fa:c5:d4:00:26:e1:b0:26:f8:7b:
fa:62:43:c0:84:7b:f7:21:2d:42:c0:29:67:e2:fc:
77:9f:98:22:c6:f8:cd:12:a8:85:d5:ab:d1:e1:ed:
f2:20:23:da:4b:a6:19:e0:17:44:f4:11:1f:ee:b5:
b8:db:eb:7a:01:f8:19:9b:39:72:32:a7:6d:6e:71:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:98:38:D5:37:4A:86:41:20:A3:25:20:DA:CF:19:60:8A:5B:3E:55
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/R5g41TdKhkEgoyUg2s8ZYIpbPlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0/24
62.72.185.0-62.72.187.255
Signature Algorithm: sha256WithRSAEncryption
97:fc:81:24:97:86:48:71:0f:53:7a:cd:93:0f:34:f1:3b:5d:
7b:1d:6f:8f:50:be:8a:43:4e:f2:de:b2:3e:d5:b0:7e:67:24:
b9:43:51:35:1b:c3:2a:d6:4c:58:31:24:a4:c4:a8:6e:bb:19:
f7:92:cb:0b:7b:84:5b:33:3f:30:50:2d:da:d5:ec:0b:8e:13:
02:b2:ed:98:5f:d8:dc:01:7b:b5:04:93:ef:57:a2:01:69:45:
5a:4d:36:14:29:38:b6:a2:bf:2e:a5:6f:c7:be:e5:d3:82:d7:
2b:48:5d:ff:51:62:bc:d8:14:44:50:e8:65:e3:22:ef:06:68:
70:1d:91:83:e7:33:7d:aa:b3:20:65:7c:7b:df:4c:22:36:69:
02:4a:51:05:b3:b4:bd:4c:8f:73:7f:76:bb:2d:e3:1e:af:ca:
ed:f3:52:8c:0e:39:2d:c6:ef:0d:4d:dd:c2:ee:92:68:e8:34:
bc:21:53:f1:85:7f:db:34:58:a4:56:a0:86:62:2e:20:5a:4c:
48:b4:fd:fd:d7:3c:e5:c9:fe:fe:3d:c2:af:54:fb:11:3d:07:
97:2e:26:8a:f0:f8:6c:28:a1:b8:3b:bc:3c:af:d8:c3:81:8e:
c5:c1:58:75:31:d9:cc:4d:70:ad:6b:9a:d7:d5:28:87:f7:96:
96:7a:7d:3b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYdqafgVWckuAvaFUXSC0k9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwNDEwMDkwNTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Nzk4MzhkNTM3NGE4NjQxMjBhMzI1MjBkYWNmMTk2MDhhNWIzZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS5WFU60pzXVpkummEoWGgq7pVRn
2eCHkw9YdDowsveB6sN0LARrUBaytTF2Q2OS+VYq4D2AeEius0DGiWImQN2PPxGA
O8+XGZ6YYHKwQfbQKqCisClLHzJp96iLHr8Hafj6jcYGXS1nQ6iJ3kWFjcdBBDLw
DvQN8rOLlU7h2c+213wAXVXkCHQrLgX7s5RcJdF4qd4bK4lRBXpAY91dFW4EYblZ
5HikJDF0i37zP1M1QteoMosCEPrF1AAm4bAm+Hv6YkPAhHv3IS1CwCln4vx3n5gi
xvjNEqiF1avR4e3yICPaS6YZ4BdE9BEf7rW42+t6AfgZmzlyMqdtbnG4cQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFEeYONU3SoZBIKMlINrPGWCKWz5VMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvUjVnNDFUZEtoa0Vnb3lVZzJzOFpZSXBiUGxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAPkigMAwD
BAA+SLkDBAI+SLgwDQYJKoZIhvcNAQELBQADggEBAJf8gSSXhkhxD1N6zZMPNPE7
XXsdb49QvopDTvLesj7VsH5nJLlDUTUbwyrWTFgxJKTEqG67GfeSywt7hFszPzBQ
LdrV7AuOEwKy7Zhf2NwBe7UEk+9XogFpRVpNNhQpOLaivy6lb8e+5dOC1ytIXf9R
YrzYFERQ6GXjIu8GaHAdkYPnM32qsyBlfHvfTCI2aQJKUQWztL1Mj3N/drst4x6v
yu3zUowOOS3G7w1N3cLukmjoNLwhU/GFf9s0WKRWoIZiLiBaTEi0/f3XPOXJ/v49
wq9U+xE9B5cuJorw+Gwoobg7vDyv2MOBjsXBWHUx2cxNcK1rmtfVKIf3lpZ6fTs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org