Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/aOyS5MbZxfcHavyIS2AhanrJJJE.roa
File: aOyS5MbZxfcHavyIS2AhanrJJJE.roa (raw, json)
Hash identifier: kakuyN5B8UhFMGiyMDTff9OKyMHJraLd7bUKzBLxk64=
Subject key identifier: 68:EC:92:E4:C6:D9:C5:F7:07:6A:FC:88:4B:60:21:6A:7A:C9:24:91
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018780DAE387CCA6443829A836005FB9A2C6
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/aOyS5MbZxfcHavyIS2AhanrJJJE.roa
Signing time: Fri 14 Apr 2023 17:40:41 +0000
ROA not before: Fri 14 Apr 2023 17:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.163.0/24 maxlen: 24
62.72.164.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Apr 2023 10:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:da:e3:87:cc:a6:44:38:29:a8:36:00:5f:b9:a2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 14 17:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68ec92e4c6d9c5f7076afc884b60216a7ac92491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:d9:33:a7:8a:a8:4e:80:06:f5:fa:71:c5:
58:24:44:32:25:03:ae:1c:c1:3b:0e:fb:dd:d2:a9:
6c:84:7f:b2:4d:d1:cb:85:75:2d:c1:ff:a1:7d:c5:
be:e7:f5:d4:78:57:4a:87:5d:bd:90:75:b4:1b:1b:
ad:65:17:32:ce:ec:99:6b:1d:3d:47:66:89:51:e0:
95:47:aa:3c:18:3c:4d:9e:90:ba:02:9a:43:13:ff:
a7:cc:da:26:f9:36:04:ac:c6:50:fe:89:6f:39:18:
58:4f:81:97:a0:de:7e:00:4a:06:7d:7a:8e:b9:cf:
10:54:bf:b3:91:a9:24:e1:11:a1:af:53:4a:62:0a:
9c:d1:d7:d6:0c:c8:2e:af:a8:8f:58:84:e0:fa:54:
13:cf:83:8a:36:e6:ee:8d:93:4a:0e:22:0e:20:3a:
a9:8b:0f:92:03:72:7e:e7:33:21:de:e2:b7:dc:91:
88:f2:7f:87:fb:f9:df:a6:69:03:b4:b3:e6:ae:98:
a8:3e:e4:28:12:fe:d6:74:cc:6d:22:e0:22:ba:2a:
c0:05:89:85:9c:ec:94:a1:24:9c:2b:b8:f0:cd:3d:
55:c9:9f:ba:06:87:ee:cc:9a:e6:27:37:b4:65:42:
86:05:c4:5a:da:8f:32:8a:b4:23:6e:9b:27:78:52:
2e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EC:92:E4:C6:D9:C5:F7:07:6A:FC:88:4B:60:21:6A:7A:C9:24:91
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/aOyS5MbZxfcHavyIS2AhanrJJJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.163.0-62.72.164.255
62.72.168.0/23
62.72.177.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:80:1e:64:39:33:59:22:8b:c7:6a:d6:b4:59:05:d1:4e:08:
11:15:53:22:b4:45:83:7e:9d:4d:ae:cc:61:18:18:0d:e0:49:
3f:c0:0b:62:bc:6e:9d:f0:7e:37:e0:1e:77:a3:a9:4d:5f:9e:
dc:dc:a3:5e:05:bd:34:cf:ef:8e:78:d7:1e:2d:6f:f1:2a:12:
b5:16:b0:46:e9:8c:c7:db:ff:33:04:de:1d:52:3e:f8:9d:9e:
e2:ed:c2:f1:b5:c8:03:f5:14:ca:5c:62:08:c1:24:40:64:c9:
e6:26:48:df:f1:28:c3:9a:42:91:0f:3a:6b:d9:66:42:b4:b8:
a2:43:10:25:1f:99:46:71:c5:61:33:e6:eb:81:12:3a:c3:ce:
67:d9:18:be:fd:6e:04:8f:9f:ed:fa:02:60:c3:a1:8a:a3:0d:
63:8a:41:4a:ab:c4:2f:77:78:2b:6d:4f:5c:19:73:33:14:11:
8c:db:18:ec:3c:e8:16:b5:f6:63:24:f9:79:5b:da:3b:8a:55:
c7:7b:b8:70:63:ba:14:f4:81:ec:bb:73:c1:41:e4:55:2e:74:
c0:97:bf:7c:b6:28:37:30:49:8f:a8:88:53:84:2a:ee:9f:95:
18:18:ce:fa:21:f8:2c:4e:7e:5c:d3:c8:86:de:a4:1e:2b:e3:
dc:94:90:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org