Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cQtGV8MaLPVWSyO0kdG73OqlwHk.roa
File: cQtGV8MaLPVWSyO0kdG73OqlwHk.roa (raw, json)
Hash identifier: doBlRAo65u1lUdf1YZ7+jKiPSjJ9QdHT+p6ePxXLWA8=
Subject key identifier: 71:0B:46:57:C3:1A:2C:F5:56:4B:23:B4:91:D1:BB:DC:EA:A5:C0:79
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0188B37D743768AED2DC2BFBB26477CA9EE2
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cQtGV8MaLPVWSyO0kdG73OqlwHk.roa
Signing time: Tue 13 Jun 2023 06:42:03 +0000
ROA not before: Tue 13 Jun 2023 06:42:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 62.72.164.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 20:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:7d:74:37:68:ae:d2:dc:2b:fb:b2:64:77:ca:9e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 13 06:42:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=710b4657c31a2cf5564b23b491d1bbdceaa5c079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3a:62:3b:63:b1:81:09:a8:6c:74:e7:e0:91:
56:37:d4:9c:05:b0:16:c6:83:81:63:cd:9d:33:f9:
d4:cf:a0:21:c6:42:40:b0:21:4a:80:da:79:38:6c:
da:69:c2:6c:57:18:8a:65:7c:f4:01:bb:2b:51:9e:
0e:ec:69:cd:03:bd:37:5b:6c:9e:17:33:ff:99:e5:
75:ef:1a:92:4f:7a:26:69:5e:d7:c1:80:53:33:fd:
6a:ee:af:89:93:a4:79:05:a9:a5:10:df:3f:57:63:
b2:9e:55:8a:da:51:05:c0:87:25:77:60:03:09:55:
0f:6e:41:9c:99:60:92:90:83:f3:2f:32:cf:ab:7c:
8a:1e:81:5c:24:10:84:6b:2a:9b:63:56:47:34:31:
14:61:ae:e2:39:fa:5c:20:f2:40:3e:04:55:16:5b:
3a:cc:a2:f1:ff:fd:0c:49:45:e5:19:82:0e:e6:ab:
16:b0:3e:92:5f:4c:6b:b3:11:f8:32:d4:e2:aa:c9:
31:a4:48:56:79:e0:3e:fc:69:c2:df:b1:3b:07:2a:
f2:99:d1:f4:62:ed:a9:78:b8:88:be:00:97:eb:d1:
d3:aa:60:3a:38:51:b3:74:11:d8:9b:f2:b4:ef:5e:
1c:84:22:05:06:50:cd:11:b9:0c:bf:4e:9c:8a:d6:
66:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0B:46:57:C3:1A:2C:F5:56:4B:23:B4:91:D1:BB:DC:EA:A5:C0:79
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cQtGV8MaLPVWSyO0kdG73OqlwHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.164.0/24
62.72.168.0/24
62.72.173.0-62.72.174.255
176.57.53.0/24
176.57.62.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:bb:37:9e:b7:20:be:b8:11:4f:0f:75:57:93:9c:8d:18:60:
66:81:ac:bb:26:74:c7:82:65:6b:25:5d:40:3a:db:6d:5d:06:
c5:21:51:96:1d:68:93:52:60:cb:90:fc:f9:c6:37:8d:7c:98:
6f:cd:7f:9c:70:ef:ac:0d:14:66:76:53:0e:9f:74:f5:66:e3:
06:80:b0:1f:e4:e0:52:78:2b:24:c2:7a:af:62:fc:ef:b6:c7:
91:72:dd:e9:9c:b4:92:56:75:21:02:b2:8d:42:18:99:6b:db:
3b:b0:ea:0e:0d:0c:5f:b5:b5:ba:5f:b7:96:26:bc:09:5d:85:
73:b8:9b:7c:b1:be:25:82:e4:44:37:65:c7:50:83:c2:b9:4e:
8a:cd:0f:7a:e5:af:3a:27:8d:6a:e5:c2:d8:50:a1:1d:7d:e2:
e6:84:22:2e:59:a7:35:56:51:84:3c:63:ea:eb:d7:82:3e:0e:
6f:e7:88:44:09:00:ee:29:f3:99:e9:1c:a5:5f:6b:5a:60:01:
34:97:b7:78:0c:eb:2b:ca:11:a3:cd:b1:2b:a4:79:b5:92:a6:
09:04:e8:32:97:ea:cf:3c:e6:3f:ea:a0:55:44:50:1c:4c:9f:
b1:87:ff:aa:d9:24:2a:f2:a0:28:9d:d4:a7:a5:5c:a9:ab:49:
15:6b:82:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org