Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/T1eOAAy-cVkrtX2RZKMIhJbDono.roa
File: T1eOAAy-cVkrtX2RZKMIhJbDono.roa (raw, json)
Hash identifier: Q/jvl6X1B+K/CyqXYn0jdqxmMCKHQXcvfWte66FyzVs=
Subject key identifier: 4F:57:8E:00:0C:BE:71:59:2B:B5:7D:91:64:A3:08:84:96:C3:A2:7A
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01887C1467C2A86706BC3D1B1E8ED9F04EC8
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/T1eOAAy-cVkrtX2RZKMIhJbDono.roa
Signing time: Fri 02 Jun 2023 12:28:12 +0000
ROA not before: Fri 02 Jun 2023 12:28:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Jun 2023 19:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:14:67:c2:a8:67:06:bc:3d:1b:1e:8e:d9:f0:4e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 2 12:28:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f578e000cbe71592bb57d9164a3088496c3a27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:35:3c:1e:8a:6c:73:16:0d:fb:3a:af:fd:
d2:c2:db:fd:14:f8:c7:07:70:f8:75:87:94:6c:c9:
92:0b:7b:7b:f5:a3:00:cf:81:ee:24:b7:5e:bd:23:
ab:eb:ec:29:55:b0:3e:43:b9:47:f3:1e:81:d2:fc:
26:e7:4c:e9:9d:b6:55:67:8d:e5:b9:c8:da:ae:fc:
e7:3d:93:a9:80:dc:89:94:6a:09:30:a4:c9:01:bb:
28:a9:0f:6a:2f:95:95:d5:fe:4d:7d:33:01:a3:55:
8b:bf:10:1a:72:25:55:a6:24:e3:24:f8:fd:95:ad:
81:66:b5:cb:fd:5a:73:cf:63:43:3d:7b:95:6b:cf:
5a:39:42:c4:a0:b7:8a:1c:55:f8:52:23:a1:55:15:
02:35:21:eb:cf:ef:5b:1a:be:58:39:1c:81:06:c5:
ea:80:2b:c6:25:65:72:c2:ff:8e:2d:cc:62:64:e5:
0a:dd:30:72:d2:43:75:2f:5b:2a:b1:95:18:5d:8b:
14:1c:6c:90:97:7d:4c:10:d4:48:91:9c:c0:57:b7:
b7:28:5b:21:9b:e7:66:d8:5e:24:55:79:6b:22:46:
60:af:b7:fe:87:f9:c3:29:f4:74:ff:df:2c:fa:39:
0d:ad:31:8b:f7:f1:96:68:6f:1c:09:ce:eb:0a:fa:
ff:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:57:8E:00:0C:BE:71:59:2B:B5:7D:91:64:A3:08:84:96:C3:A2:7A
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/T1eOAAy-cVkrtX2RZKMIhJbDono.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0/24
62.72.185.0-62.72.187.255
62.72.190.0/23
81.21.12.0/22
176.57.62.0/23
Signature Algorithm: sha256WithRSAEncryption
05:09:9e:f9:aa:48:90:94:8b:85:4b:87:02:d4:77:51:5e:44:
16:cc:ef:5b:82:5d:7d:63:4b:69:07:85:e8:96:1f:65:41:31:
3f:e0:e4:7a:23:c0:c0:0d:50:9c:e4:61:0f:16:0f:f1:d4:99:
a5:13:d8:46:9c:7e:b2:5e:8c:00:86:9a:50:35:19:2a:32:55:
d5:eb:fc:7a:f2:2f:96:6a:c4:65:15:19:5a:bf:1d:20:c5:77:
08:40:c0:21:01:4c:b2:df:29:d6:b3:0e:99:4f:2c:24:40:31:
f7:3b:79:51:75:39:3d:6b:5b:78:c1:f5:1b:4c:55:10:af:90:
1e:68:b9:20:80:8b:d9:e1:08:9f:88:cb:6e:53:de:fc:4e:0a:
00:71:ea:63:1e:9e:9f:b0:76:03:11:7d:9c:64:5d:13:ad:4b:
fa:a0:3a:a5:e3:52:22:a5:03:a8:67:90:69:3a:17:71:58:83:
5f:d7:1a:b0:4b:a6:60:d9:38:d9:f0:1a:0b:70:da:5f:a8:82:
ea:a2:45:5b:b4:fb:cb:55:0e:9d:dc:73:c5:d1:7c:21:9c:fa:
86:d0:72:5a:56:b3:b9:e1:c6:2c:21:23:2a:df:b2:50:00:10:
5f:7d:5f:46:af:fa:5e:d0:ee:98:40:eb:28:62:93:9d:40:f1:
4d:83:84:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org