Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/di0yeDg7VUGup2sV99iABgPW95g.roa
File: di0yeDg7VUGup2sV99iABgPW95g.roa (raw, json)
Hash identifier: cG63hZRQQNnZiQ5B5uVWXBrzcCjmlQX8rG0Sy07R7Jg=
Subject key identifier: 76:2D:32:78:38:3B:55:41:AE:A7:6B:15:F7:D8:80:06:03:D6:F7:98
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C80C72E746B15FCB79D8AEA2141861C00
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/di0yeDg7VUGup2sV99iABgPW95g.roa
Signing time: Tue 19 Dec 2023 06:33:06 +0000
ROA not before: Tue 19 Dec 2023 06:33:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57974
IP address blocks: 62.72.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:80:c7:2e:74:6b:15:fc:b7:9d:8a:ea:21:41:86:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 19 06:33:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=762d3278383b5541aea76b15f7d8800603d6f798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:06:e7:e7:61:dc:5c:93:86:4c:a1:25:d5:
f2:24:69:0e:2c:43:23:29:a4:46:c3:b6:47:a3:90:
fb:4c:c0:53:d8:df:a5:96:a9:a2:27:a0:7a:8f:95:
49:f0:58:33:52:8b:3a:78:c0:95:d9:91:a9:2d:5d:
67:48:c2:9e:64:b6:8d:f4:52:58:d2:f0:07:a5:6c:
36:f8:3d:3b:56:9b:7c:8c:ec:c0:c3:ec:48:de:b4:
0a:9c:94:a1:5a:c8:6b:4d:59:8c:ad:e4:c0:a2:90:
2d:aa:44:d5:62:fe:01:38:4b:c7:35:b4:4e:38:02:
75:8c:ab:83:61:80:0f:dd:71:21:96:68:af:2c:44:
71:b6:ec:7c:f4:8d:1d:c3:97:47:7b:ae:0a:49:4a:
89:b6:72:95:37:d1:d7:a1:22:fe:96:5d:8a:d3:ce:
9e:97:63:ba:b0:ef:e4:b7:fc:50:44:37:b5:21:b3:
38:a0:fb:5b:31:e7:29:3b:13:6f:b4:15:c7:ba:a0:
0c:e7:ab:17:7c:59:f3:30:36:a6:f9:16:98:5f:55:
88:e6:41:3f:54:cf:6f:c3:44:75:c4:19:3b:6c:64:
8d:c0:a9:c8:0f:5e:50:64:c3:53:9e:81:be:69:a3:
d1:91:48:35:66:e7:76:93:c6:ee:1d:95:6d:43:f0:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2D:32:78:38:3B:55:41:AE:A7:6B:15:F7:D8:80:06:03:D6:F7:98
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/di0yeDg7VUGup2sV99iABgPW95g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b8:2c:8d:7d:87:d2:ed:73:1a:e7:f1:96:89:2d:34:a3:d8:
ca:3c:4b:9b:ab:6f:4a:78:26:5a:36:ca:ce:b9:a4:6f:a4:ed:
d7:4b:d7:e2:d5:70:1b:37:b3:46:ff:bc:b5:96:6e:64:80:f1:
bf:46:4b:e9:ec:5e:74:0f:df:d8:b9:5a:7f:8e:2b:11:03:8a:
3c:a4:08:e9:3f:38:46:8c:27:c8:99:b6:22:3a:a9:88:04:9a:
8b:fd:e6:0f:78:bc:62:7f:a9:b5:7c:cd:d7:71:c2:df:04:44:
a7:4f:78:24:fa:c6:77:49:67:72:b2:da:07:01:59:a4:8e:ee:
b7:b1:d0:ff:7d:0d:8c:f1:cd:8a:f8:4d:b2:5f:4b:1d:38:7f:
5e:b8:ee:5e:eb:32:0a:2a:0f:08:30:b3:fb:bd:e5:fc:7f:bf:
9b:9f:47:da:9b:49:6b:e2:36:28:42:5c:16:78:a3:8c:4f:c6:
9b:8b:82:35:ce:5e:f1:27:47:a3:32:8b:30:61:c3:0c:74:9c:
76:d7:55:f4:29:29:e8:aa:36:57:1b:1c:43:af:c7:8a:51:04:
b2:53:6f:d8:19:70:48:03:25:84:fa:44:a3:fe:61:64:1e:5d:
fa:0a:18:e9:4d:e7:e1:49:db:49:f5:2a:f1:31:e2:6c:06:c1:
aa:7c:ef:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyAxy50axX8t52K6iFBhhwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMxMjE5MDYzMzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjJkMzI3ODM4M2I1NTQxYWVhNzZiMTVmN2Q4ODAwNjAzZDZmNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LwG5+dh3FyThkyhJdXyJGkOLEMj
KaRGw7ZHo5D7TMBT2N+llqmiJ6B6j5VJ8FgzUos6eMCV2ZGpLV1nSMKeZLaN9FJY
0vAHpWw2+D07Vpt8jOzAw+xI3rQKnJShWshrTVmMreTAopAtqkTVYv4BOEvHNbRO
OAJ1jKuDYYAP3XEhlmivLERxtux89I0dw5dHe64KSUqJtnKVN9HXoSL+ll2K086e
l2O6sO/kt/xQRDe1IbM4oPtbMecpOxNvtBXHuqAM56sXfFnzMDam+RaYX1WI5kE/
VM9vw0R1xBk7bGSNwKnID15QZMNTnoG+aaPRkUg1Zud2k8buHZVtQ/CUvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHYtMng4O1VBrqdrFffYgAYD1veYMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvZGkweWVEZzdWVUd1cDJzVjk5aUFCZ1BXOTVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkiiMA0G
CSqGSIb3DQEBCwUAA4IBAQC4uCyNfYfS7XMa5/GWiS00o9jKPEubq29KeCZaNsrO
uaRvpO3XS9fi1XAbN7NG/7y1lm5kgPG/Rkvp7F50D9/YuVp/jisRA4o8pAjpPzhG
jCfImbYiOqmIBJqL/eYPeLxif6m1fM3XccLfBESnT3gk+sZ3SWdystoHAVmkju63
sdD/fQ2M8c2K+E2yX0sdOH9euO5e6zIKKg8IMLP7veX8f7+bn0fam0lr4jYoQlwW
eKOMT8abi4I1zl7xJ0ejMoswYcMMdJx211X0KSnoqjZXGxxDr8eKUQSyU2/YGXBI
AyWE+kSj/mFkHl36ChjpTefhSdtJ9SrxMeJsBsGqfO/O
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org