Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VPZUxxk465KvgKCsRKelIfzSCQo.roa
File: VPZUxxk465KvgKCsRKelIfzSCQo.roa (raw, json)
Hash identifier: X8QROWXjXKThUQuNEqrkL9wv+BEIttFvdtbFf/XfyaQ=
Subject key identifier: 54:F6:54:C7:19:38:EB:92:AF:80:A0:AC:44:A7:A5:21:FC:D2:09:0A
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0188AC626FC2681FD13DDC6281F05770BAD5
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VPZUxxk465KvgKCsRKelIfzSCQo.roa
Signing time: Sun 11 Jun 2023 21:35:12 +0000
ROA not before: Sun 11 Jun 2023 21:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 12:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ac:62:6f:c2:68:1f:d1:3d:dc:62:81:f0:57:70:ba:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 11 21:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54f654c71938eb92af80a0ac44a7a521fcd2090a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:aa:da:16:48:75:af:79:71:ef:62:62:ba:
a1:a6:73:d1:fa:c5:e2:cd:fb:52:49:c2:55:dc:10:
81:26:f4:5b:54:20:f6:eb:6b:dc:be:61:15:94:e4:
ba:79:55:01:dd:27:51:21:cb:cd:c3:34:e9:dc:54:
18:9e:06:82:48:92:04:ce:53:e6:9d:60:ed:c5:92:
ab:3d:42:55:ad:c7:40:a9:7a:3a:69:71:5a:18:fe:
a7:1e:c0:a7:f0:94:48:73:31:2d:2c:d4:82:9b:78:
0c:34:7d:be:ba:09:9d:29:1b:9e:2f:55:17:6a:41:
c1:83:de:2c:47:98:f9:a0:6a:1d:c2:e6:b4:ba:bb:
66:1b:da:47:22:8c:bd:06:69:c5:59:e1:74:54:77:
8b:1d:62:83:6f:bc:e8:bb:40:fe:20:3b:03:42:60:
df:55:18:7e:0e:4e:2d:8b:35:a2:46:c0:8b:77:e8:
5c:2e:4b:fe:33:3e:e7:20:ca:95:cf:89:c5:5d:77:
a6:07:6b:f8:a0:35:64:57:c4:77:b2:6b:28:56:09:
33:92:08:de:b1:16:69:d3:b4:f8:b4:eb:6a:59:fe:
57:4c:f9:6c:72:be:8e:cc:64:95:98:84:2f:7a:14:
21:74:72:39:2a:57:45:41:45:1e:ef:e0:ed:89:f1:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F6:54:C7:19:38:EB:92:AF:80:A0:AC:44:A7:A5:21:FC:D2:09:0A
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VPZUxxk465KvgKCsRKelIfzSCQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0/24
62.72.185.0-62.72.187.255
62.72.190.0/23
81.21.12.0/22
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
67:75:cc:fb:6a:59:9b:2b:c8:d2:dd:e1:12:48:af:48:26:48:
77:4a:48:68:80:f6:30:19:40:ec:52:b1:0b:01:59:b8:af:85:
68:db:d3:10:30:ad:d0:b1:8c:58:91:ca:d4:72:78:96:b3:e9:
dc:78:3c:f9:a9:6c:47:d6:0e:7d:67:40:95:cc:93:1b:7e:7a:
1a:e1:35:4b:86:f6:09:cf:a4:c8:00:2c:8e:6d:b2:99:b3:19:
aa:59:3f:56:7f:91:e3:ef:7c:c4:4c:ea:57:10:cd:cd:18:4b:
31:8e:98:90:78:f7:a6:f9:f8:4c:87:09:4c:2b:31:1a:25:ab:
87:92:c5:dd:fc:8c:a2:e8:f4:53:7b:10:a5:e1:6e:b8:ed:ee:
92:0f:f7:b9:cd:a6:34:df:64:22:c6:7f:9e:22:0f:81:76:44:
e0:d3:08:04:f9:38:a1:58:e9:25:ad:f6:41:88:51:7f:54:50:
8e:70:95:5b:af:71:0c:d6:4c:ee:c9:8f:b0:a9:52:6c:4c:f6:
47:33:b1:28:32:fd:02:86:0f:20:bf:c8:46:ab:4f:97:df:aa:
30:14:6c:b0:46:c5:99:f7:4f:20:87:09:94:65:e8:fb:53:f9:
c7:4e:ec:99:6e:ce:82:f3:bd:0b:ed:11:7b:4c:7f:ee:04:bb:
4a:8e:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org