Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/e4eYkboCKw_2KVsrOQyJ4lEooKw.roa
File: e4eYkboCKw_2KVsrOQyJ4lEooKw.roa (raw, json)
Hash identifier: K4CQ6tF3ru2fsSoI5ILPj/P1t+wnAVe+Snxq8ScuHGM=
Subject key identifier: 7B:87:98:91:BA:02:2B:0F:F6:29:5B:2B:39:0C:89:E2:51:28:A0:AC
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01875BF2A965FC72C3ED7FDC101146FA16BE
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/e4eYkboCKw_2KVsrOQyJ4lEooKw.roa
Signing time: Fri 07 Apr 2023 13:40:42 +0000
ROA not before: Fri 07 Apr 2023 13:40:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 62.72.160.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Apr 2023 12:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5b:f2:a9:65:fc:72:c3:ed:7f:dc:10:11:46:fa:16:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 7 13:40:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b879891ba022b0ff6295b2b390c89e25128a0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:b7:ee:54:5c:e1:f6:fc:74:50:0b:e8:91:
ae:cc:f3:dc:ad:ab:79:08:1a:19:af:79:3a:05:f5:
16:6e:ee:99:c5:95:61:ca:22:d6:5d:ce:c2:3d:ae:
aa:e2:ed:cb:46:53:56:b8:2c:69:79:aa:83:33:f3:
5c:7f:64:32:3b:cc:20:03:0a:7b:28:b7:7f:92:bc:
d7:28:db:b2:1d:2f:fe:43:e6:5a:9b:1a:9e:3f:18:
01:19:44:04:fa:7d:2f:6d:0c:cc:89:5c:8a:ed:d3:
a1:c0:4e:4a:2c:f8:26:f6:69:87:fa:0f:14:3a:48:
7b:19:ca:10:10:74:c1:60:ee:30:04:e7:c9:13:8f:
72:c6:8f:27:1d:dd:d4:b3:7e:a7:31:da:6f:68:b3:
e0:af:1f:ae:71:d5:a6:4e:e9:0d:31:24:7c:bd:04:
78:3a:df:dd:07:d8:c8:85:fd:19:87:a0:e9:96:22:
ca:56:80:c4:e4:32:e3:d5:77:79:58:65:69:83:eb:
52:ad:33:88:f4:ba:5d:05:da:9f:a6:66:e6:69:8c:
ec:69:b1:f2:29:49:84:59:fd:04:91:09:03:0d:1a:
7a:8a:34:d0:3f:dd:89:39:33:06:98:3b:91:00:8b:
13:50:7c:28:77:42:05:0e:77:0d:4f:a6:48:75:7b:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:87:98:91:BA:02:2B:0F:F6:29:5B:2B:39:0C:89:E2:51:28:A0:AC
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/e4eYkboCKw_2KVsrOQyJ4lEooKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0/24
62.72.176.0/24
62.72.183.0-62.72.184.255
62.72.190.0/24
176.57.62.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:42:59:1a:88:f7:9b:4e:16:e1:46:7d:18:ad:bc:1e:3c:cd:
1b:17:46:22:82:3a:92:6c:ef:d6:a1:79:ee:ba:45:d0:fe:5a:
22:1b:34:6d:9d:89:2d:15:0f:e1:ac:7a:8d:b7:ab:74:0e:79:
0e:1c:92:c9:6b:86:74:ed:4b:1f:ea:04:ff:44:5c:82:59:a8:
6c:1a:81:1a:ec:7a:0e:e8:cd:b7:40:f8:88:d0:cd:2b:fb:55:
98:27:0e:99:6f:e4:0e:2d:ca:1b:53:0f:58:b2:3d:36:1c:89:
19:c2:de:80:6f:35:e2:9f:81:de:48:95:13:45:1e:d8:88:98:
cb:14:ad:ba:c1:1f:e8:3e:f9:50:48:07:d0:b8:c3:8e:55:c6:
40:aa:ef:e8:d8:d8:8c:8f:88:ac:f7:fe:47:36:f2:f6:55:68:
71:3f:20:5e:bf:5e:69:23:99:bc:11:bb:d5:7a:12:f9:84:9b:
67:93:bc:7e:23:95:ec:5c:d1:f6:2f:ce:a4:d7:9f:cd:dc:e0:
c6:34:3d:cf:18:25:96:89:0e:38:87:a3:76:54:f6:40:4a:38:
6b:6e:15:72:69:58:67:4a:77:da:e6:3d:ab:e0:44:4c:43:b0:
60:86:0e:27:7a:5f:62:a8:8b:0a:89:2f:39:e7:4e:b7:06:b6:
48:c1:6d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org