Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_LtgdUcu7zginvTyxzPpcACrhOk.roa
File: _LtgdUcu7zginvTyxzPpcACrhOk.roa (raw, json)
Hash identifier: iBJdEXh97VxnZ/BVnKSf9x14+j5ckuabM3tw6t5RIag=
Subject key identifier: FC:BB:60:75:47:2E:EF:38:22:9E:F4:F2:C7:33:E9:70:00:AB:84:E9
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018F1BDDB9DD0A93FCF4BE73DB2C7D15E128
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_LtgdUcu7zginvTyxzPpcACrhOk.roa
Signing time: Fri 26 Apr 2024 19:24:26 +0000
ROA not before: Fri 26 Apr 2024 19:24:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 62.72.176.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 May 2024 06:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1b:dd:b9:dd:0a:93:fc:f4:be:73:db:2c:7d:15:e1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 26 19:24:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcbb6075472eef38229ef4f2c733e97000ab84e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:f3:7f:bf:f8:8d:bd:c5:0c:f3:0b:1e:12:
67:85:8e:2c:28:20:3e:8d:85:a6:1f:3f:27:5b:69:
f3:17:be:f9:a5:fa:2f:cc:08:21:e3:29:aa:2f:2a:
55:7a:e4:ce:0e:ea:b4:a6:22:2e:b2:fd:ae:25:30:
a9:73:d8:e1:83:64:cb:70:f9:07:b5:0a:53:c8:8b:
cc:5f:12:dd:c8:d9:a4:5b:b0:28:ab:39:4f:b5:4d:
24:bd:77:4f:eb:8f:7d:ec:ff:aa:35:9c:00:ee:6d:
93:68:43:56:1d:db:99:b4:93:48:c8:ea:17:de:7b:
a4:aa:c6:03:b5:6f:25:97:3c:c4:87:ad:c2:dc:57:
e6:61:a8:53:4a:42:14:40:ca:58:50:30:0b:78:a3:
af:87:9c:27:41:d2:20:ee:33:db:be:d2:04:2e:77:
ac:c6:9a:7e:5b:cf:a9:fb:85:7e:d3:72:20:ef:21:
5c:6f:40:96:33:a7:e5:54:35:1d:3e:47:db:df:3d:
fc:0b:29:8b:8a:89:48:76:0d:fd:7c:8b:09:f7:9c:
e6:1c:85:43:da:fb:e5:56:69:b4:c4:49:b0:01:96:
e9:ba:f3:3f:d1:12:da:4f:01:5f:2c:09:7f:b7:a5:
09:62:94:e5:5c:9a:e9:36:6b:34:b0:ea:24:93:a7:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BB:60:75:47:2E:EF:38:22:9E:F4:F2:C7:33:E9:70:00:AB:84:E9
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_LtgdUcu7zginvTyxzPpcACrhOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/24
62.72.183.0/24
Signature Algorithm: sha256WithRSAEncryption
61:0f:10:8d:f2:d9:47:11:dc:89:7d:d9:22:03:a8:c4:01:50:
5a:43:3b:32:0e:66:83:f0:d9:cd:5b:50:28:1d:9c:23:da:fc:
7b:51:a5:ef:3c:9b:e0:cc:13:45:0e:53:9c:49:48:3d:be:ca:
c1:5d:ba:c9:d0:7e:b7:4e:29:46:61:69:96:13:58:a7:1c:b5:
1e:43:7a:ad:81:15:ed:93:7b:eb:0e:e3:58:5d:a5:8e:51:89:
c9:e4:4f:68:da:04:51:4f:ad:73:99:72:95:84:8e:b2:27:6a:
a5:6e:b5:26:0e:f2:39:6f:0d:cd:da:81:c6:b8:40:d2:59:c2:
94:1a:7d:d7:99:eb:7a:c7:33:cf:f6:81:01:a3:23:64:b5:8b:
06:0d:c8:8b:48:e5:cb:7c:b1:d5:9e:ed:49:51:bb:09:db:bc:
53:d9:af:e9:4a:ca:57:ba:a4:ab:80:79:a3:a3:03:ed:71:c8:
f6:0c:d8:59:9b:7b:e9:ff:73:b9:de:36:5b:1f:e2:fe:01:1d:
14:fa:d7:58:e1:e4:2b:f6:25:20:1e:66:f6:52:64:92:83:fb:
1f:27:ae:88:1d:79:c9:4c:a1:a2:7a:25:19:5c:ff:ed:76:99:
bd:0a:04:0f:eb:7e:c4:8f:9f:76:ca:8e:af:56:62:93:55:4a:
7d:33:b8:44
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY8b3bndCpP89L5z2yx9FeEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwNDI2MTkyNDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2JiNjA3NTQ3MmVlZjM4MjI5ZWY0ZjJjNzMzZTk3MDAwYWI4NGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2zzf7/4jb3FDPMLHhJnhY4sKCA+
jYWmHz8nW2nzF775pfovzAgh4ymqLypVeuTODuq0piIusv2uJTCpc9jhg2TLcPkH
tQpTyIvMXxLdyNmkW7AoqzlPtU0kvXdP64997P+qNZwA7m2TaENWHduZtJNIyOoX
3nukqsYDtW8llzzEh63C3FfmYahTSkIUQMpYUDALeKOvh5wnQdIg7jPbvtIELnes
xpp+W8+p+4V+03Ig7yFcb0CWM6flVDUdPkfb3z38CymLiolIdg39fIsJ95zmHIVD
2vvlVmm0xEmwAZbpuvM/0RLaTwFfLAl/t6UJYpTlXJrpNms0sOokk6cYnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPy7YHVHLu84Ip708scz6XAAq4TpMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvX0x0Z2RVY3U3emdpbnZUeXh6UHBjQUNyaE9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkiwAwQA
Pki3MA0GCSqGSIb3DQEBCwUAA4IBAQBhDxCN8tlHEdyJfdkiA6jEAVBaQzsyDmaD
8NnNW1AoHZwj2vx7UaXvPJvgzBNFDlOcSUg9vsrBXbrJ0H63TilGYWmWE1inHLUe
Q3qtgRXtk3vrDuNYXaWOUYnJ5E9o2gRRT61zmXKVhI6yJ2qlbrUmDvI5bw3N2oHG
uEDSWcKUGn3Xmet6xzPP9oEBoyNktYsGDciLSOXLfLHVnu1JUbsJ27xT2a/pSspX
uqSrgHmjowPtccj2DNhZm3vp/3O53jZbH+L+AR0U+tdY4eQr9iUgHmb2UmSSg/sf
J66IHXnJTKGieiUZXP/tdpm9CgQP637Ej592yo6vVmKTVUp9M7hE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org