Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/U-vB5i3T_oEhj4PLzkIMXCGRufE.roa
File: U-vB5i3T_oEhj4PLzkIMXCGRufE.roa (raw, json)
Hash identifier: NMkZ7KrDJH27BuFSlyrcGvQuRYNRNLr5Ld9RqZfKiaA=
Subject key identifier: 53:EB:C1:E6:2D:D3:FE:81:21:8F:83:CB:CE:42:0C:5C:21:91:B9:F1
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018907E5F6534B8E7DA581A7C14579227173
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/U-vB5i3T_oEhj4PLzkIMXCGRufE.roa
Signing time: Thu 29 Jun 2023 16:04:18 +0000
ROA not before: Thu 29 Jun 2023 16:04:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.163.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Jun 2023 00:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:07:e5:f6:53:4b:8e:7d:a5:81:a7:c1:45:79:22:71:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 29 16:04:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53ebc1e62dd3fe81218f83cbce420c5c2191b9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:fa:04:f5:91:87:64:f3:f2:87:42:39:46:
3b:52:75:d9:25:3c:c8:ce:55:71:ab:5f:7b:0c:e4:
47:e7:7c:0f:46:12:76:9a:f5:a8:4e:4d:d1:59:31:
53:a3:d8:5e:76:e6:b1:96:ef:dc:3e:c3:b7:04:54:
4e:ac:30:ed:47:f9:30:ea:de:06:a4:a5:6b:05:bd:
7c:2b:ab:ab:4d:db:89:4f:5c:63:f8:a1:39:ba:9c:
23:ff:42:bc:08:16:69:c1:27:fe:5a:0f:ab:6e:f9:
23:21:ab:af:f1:df:21:20:0f:87:e2:bd:9b:e0:b6:
30:ba:d8:63:02:bc:a3:dd:d5:bb:58:11:50:52:57:
7e:84:25:8b:47:03:d9:41:32:2d:c2:67:f8:8c:7b:
16:58:72:7d:f6:19:26:03:c4:fb:f6:2f:10:b9:9d:
84:9b:c7:ec:d5:9e:fb:af:10:f4:63:f8:c6:94:5c:
4e:c4:71:5c:56:61:6d:40:c8:4e:a6:73:fc:cb:8a:
9e:8b:f0:ee:21:7f:3a:2f:f8:2f:04:00:79:1f:af:
b4:83:d6:08:90:7c:c6:ae:5b:90:c5:c0:b3:57:81:
1d:91:38:5c:bb:6d:10:9f:0e:af:20:fc:aa:1e:66:
0f:17:9f:a2:73:cc:19:73:92:04:f3:ce:31:2a:d0:
10:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EB:C1:E6:2D:D3:FE:81:21:8F:83:CB:CE:42:0C:5C:21:91:B9:F1
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/U-vB5i3T_oEhj4PLzkIMXCGRufE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.163.255
62.72.169.0-62.72.170.255
62.72.179.0/24
62.72.181.0-62.72.182.255
62.72.184.0/24
62.72.187.0-62.72.189.255
62.72.191.0/24
81.21.12.0/22
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
73:2b:0b:da:df:4b:c2:ac:ea:8a:cb:c6:12:2d:67:4d:14:5a:
cd:d7:07:bc:11:3c:40:c9:d7:0e:09:5d:fe:7d:f5:14:1d:6e:
ed:49:b9:34:19:01:47:cb:66:44:be:b1:21:16:d2:3b:16:55:
ae:f4:94:4f:f5:ce:5b:04:e5:22:ea:30:61:55:d5:b9:83:f5:
23:d9:dc:d3:67:0a:aa:47:91:ec:ba:85:a1:51:e7:bc:9e:1e:
44:c1:18:c8:61:7e:72:87:36:88:d5:d1:cd:9d:bd:b3:21:d5:
96:ba:fb:43:9b:0f:33:cf:b6:9e:b2:29:38:d0:16:a7:8d:c0:
0f:a0:20:b5:86:da:3e:c4:80:1e:2d:84:e4:c7:16:1a:e3:9d:
ef:5b:0b:e9:6b:0e:e0:2e:e7:27:ff:e6:dd:ac:a7:67:c5:a3:
c7:7d:71:f4:9d:5a:a2:94:35:b0:a7:81:ff:27:61:9b:16:df:
1f:60:9d:05:66:09:79:34:f1:ac:b7:c5:55:dd:92:db:80:04:
4b:dc:b6:5c:da:34:f4:11:a8:63:2c:2e:43:68:17:9c:f9:ab:
9e:e5:eb:62:15:2e:65:71:7b:6e:39:50:8d:16:3f:9b:f0:3c:
40:7f:70:42:09:aa:7d:7b:82:76:c5:da:03:13:ef:1f:27:14:
75:b2:ce:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org