Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_gnZ5Kd60j3kh_6CiIDBgAFz1CI.roa
File: _gnZ5Kd60j3kh_6CiIDBgAFz1CI.roa (raw, json)
Hash identifier: Q/sD6eZEjdKZWeSgRVcHPjAccXuLo2N6i0ZEa0lA2As=
Subject key identifier: FE:09:D9:E4:A7:7A:D2:3D:E4:87:FE:82:88:80:C1:80:01:73:D4:22
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01860C2D7A9DCB87DB823D9BF1BCF250A57B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_gnZ5Kd60j3kh_6CiIDBgAFz1CI.roa
Signing time: Wed 01 Feb 2023 08:52:32 +0000
ROA not before: Wed 01 Feb 2023 08:52:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 62.72.184.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Feb 2023 08:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:2d:7a:9d:cb:87:db:82:3d:9b:f1:bc:f2:50:a5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 1 08:52:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe09d9e4a77ad23de487fe828880c1800173d422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:cd:57:68:22:80:99:4a:8f:95:ba:88:ee:
ce:b4:b9:d7:9d:3a:2d:f5:4b:c9:b9:48:d2:87:71:
83:c2:4b:87:5d:c8:2e:dd:be:2a:b1:1c:10:e4:62:
40:28:35:19:74:c2:22:18:b3:64:06:8b:57:ed:d1:
ff:d2:86:0f:9f:f8:f9:1b:b4:c4:70:b9:38:57:76:
0a:6d:3c:16:f1:f1:41:39:d7:b3:80:49:24:f7:de:
32:73:69:f4:dc:4a:ce:7c:fe:72:25:45:88:c7:a8:
c5:ba:c6:c0:a4:01:30:b9:18:9e:63:9f:2e:03:e6:
00:8b:63:59:ee:8d:b2:da:a1:be:74:6c:06:2c:28:
52:49:96:35:a0:64:99:67:55:d0:91:3c:2c:5f:eb:
48:e6:49:bb:0f:a4:09:0f:75:ca:d5:31:4e:ce:7e:
2a:2d:5d:f7:77:c4:fb:eb:57:4d:49:47:24:bc:a1:
a3:2f:f0:f8:e2:d1:70:bc:18:f9:e4:7e:34:a6:fc:
08:0f:af:fd:e7:e5:b4:00:b0:a8:67:63:01:61:b2:
bb:5e:1e:92:c8:a3:fb:91:59:a9:72:ad:70:9b:ea:
4a:05:cc:de:59:b5:1f:bb:ca:2e:b8:56:64:4a:b8:
40:4e:57:d4:08:56:83:a7:82:b9:1b:67:80:c0:42:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:09:D9:E4:A7:7A:D2:3D:E4:87:FE:82:88:80:C1:80:01:73:D4:22
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_gnZ5Kd60j3kh_6CiIDBgAFz1CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.183.0-62.72.184.255
62.72.186.0/23
Signature Algorithm: sha256WithRSAEncryption
10:7d:b7:a9:63:42:44:8a:66:42:b9:45:f2:0f:d9:1e:41:0c:
79:10:4f:4d:22:9c:8c:e5:22:46:ff:20:9f:ab:7d:b1:2e:e6:
71:89:9b:a4:25:8c:83:af:e8:ac:c1:e8:47:97:ef:2b:1b:20:
5d:64:6c:d8:2c:b2:4d:ef:83:f8:3e:90:99:a5:27:c9:3a:47:
b5:99:e2:f3:ac:7c:5f:7a:cd:3a:f1:fe:a3:c1:50:12:61:e1:
87:d3:8d:6a:6b:bc:95:4d:9f:bb:59:81:01:95:2c:29:ea:a5:
9c:59:51:52:5d:bb:e9:91:2e:e1:27:39:a3:eb:76:99:18:ae:
c6:cb:46:74:e4:90:60:8a:9b:de:39:c1:a3:fd:b3:cb:ff:84:
08:fb:6c:eb:47:30:3f:a9:03:9b:d2:3a:22:86:91:f0:2f:69:
25:7f:4c:87:30:0a:6d:4e:28:9c:5e:17:d1:89:a9:87:88:f3:
13:6d:0a:dd:8f:5c:16:4e:28:89:3e:2b:87:f3:3a:6e:9e:c4:
18:45:70:b7:7e:fd:e4:6e:59:f0:50:3e:91:9f:d1:4f:25:fe:
15:84:b0:c8:b9:71:f9:3c:6a:86:4f:84:0d:41:51:54:b8:ca:
9e:aa:04:e9:bb:a5:b0:15:88:bc:04:4d:c7:0f:28:d9:64:2f:
6b:be:f0:dc
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYYMLXqdy4fbgj2b8bzyUKV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwMjAxMDg1MjMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTA5ZDllNGE3N2FkMjNkZTQ4N2ZlODI4ODgwYzE4MDAxNzNkNDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXDNV2gigJlKj5W6iO7OtLnXnTot
9UvJuUjSh3GDwkuHXcgu3b4qsRwQ5GJAKDUZdMIiGLNkBotX7dH/0oYPn/j5G7TE
cLk4V3YKbTwW8fFBOdezgEkk994yc2n03ErOfP5yJUWIx6jFusbApAEwuRieY58u
A+YAi2NZ7o2y2qG+dGwGLChSSZY1oGSZZ1XQkTwsX+tI5km7D6QJD3XK1TFOzn4q
LV33d8T761dNSUckvKGjL/D44tFwvBj55H40pvwID6/95+W0ALCoZ2MBYbK7Xh6S
yKP7kVmpcq1wm+pKBczeWbUfu8ouuFZkSrhATlfUCFaDp4K5G2eAwEKfnwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFP4J2eSnetI95If+goiAwYABc9QiMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvX2duWjVLZDYwajNraF82Q2lJREJnQUZ6MUNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAA+SLcD
BAA+SLgDBAE+SLowDQYJKoZIhvcNAQELBQADggEBABB9t6ljQkSKZkK5RfIP2R5B
DHkQT00inIzlIkb/IJ+rfbEu5nGJm6QljIOv6KzB6EeX7ysbIF1kbNgssk3vg/g+
kJmlJ8k6R7WZ4vOsfF96zTrx/qPBUBJh4YfTjWprvJVNn7tZgQGVLCnqpZxZUVJd
u+mRLuEnOaPrdpkYrsbLRnTkkGCKm945waP9s8v/hAj7bOtHMD+pA5vSOiKGkfAv
aSV/TIcwCm1OKJxeF9GJqYeI8xNtCt2PXBZOKIk+K4fzOm6exBhFcLd+/eRuWfBQ
PpGf0U8l/hWEsMi5cfk8aoZPhA1BUVS4yp6qBOm7pbAViLwETccPKNlkL2u+8Nw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org