Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fz-4_-_vQ8K8uMxLbvopqZ4CGvY.roa
File: fz-4_-_vQ8K8uMxLbvopqZ4CGvY.roa (raw, json)
Hash identifier: feUG5GIKfDyfTY28CLAzdQPCQax4WgJfAlUbu4mB1DY=
Subject key identifier: 7F:3F:B8:FF:EF:EF:43:C2:BC:B8:CC:4B:6E:FA:29:A9:9E:02:1A:F6
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0188AE92BD0A1A4D8413CBED3E025BEF653A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fz-4_-_vQ8K8uMxLbvopqZ4CGvY.roa
Signing time: Mon 12 Jun 2023 07:47:12 +0000
ROA not before: Mon 12 Jun 2023 07:47:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 62.72.164.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 06:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ae:92:bd:0a:1a:4d:84:13:cb:ed:3e:02:5b:ef:65:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 12 07:47:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f3fb8ffefef43c2bcb8cc4b6efa29a99e021af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:2e:8b:54:85:1b:83:ac:a5:39:3f:0e:91:
30:dc:f8:86:4c:8a:8f:39:e2:98:8c:62:84:12:0a:
c9:38:e9:4a:68:c7:71:2d:68:dc:ea:ca:fa:70:55:
5c:5b:76:e5:79:3f:ba:c0:29:8e:c8:f8:a0:a4:8c:
88:71:94:ab:6e:64:b3:15:ae:97:27:2b:b4:6d:83:
7c:be:ae:8a:7b:2d:4a:26:e9:d4:e3:96:a8:d5:e4:
1b:51:ea:72:06:6b:76:32:6d:2b:ef:1e:6e:da:d1:
cb:96:bf:d3:f0:cd:90:6d:bd:bc:2d:57:b1:70:24:
bb:84:5a:80:0a:30:e5:23:95:d5:f3:c7:b7:c9:fd:
3d:91:51:da:b6:a7:f3:28:e4:c6:d4:18:61:7e:44:
68:74:d6:b4:94:3a:e0:dc:aa:18:27:30:6f:74:56:
cb:04:fb:70:c9:03:40:7f:ee:73:07:ab:4e:58:3e:
28:69:29:d8:31:bc:22:43:21:4f:ad:48:7d:32:a3:
f5:92:b1:75:07:90:8a:5f:cd:c1:e2:1f:9c:1f:b7:
bd:c0:4e:74:de:1e:f3:3e:eb:aa:e9:03:82:d7:98:
07:35:1d:0a:93:11:10:fd:cc:59:ff:7d:fc:40:fd:
de:8d:0c:5b:c2:a1:73:fe:13:8f:ae:f6:7d:25:8c:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3F:B8:FF:EF:EF:43:C2:BC:B8:CC:4B:6E:FA:29:A9:9E:02:1A:F6
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fz-4_-_vQ8K8uMxLbvopqZ4CGvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.164.0/24
62.72.168.0/24
62.72.173.0-62.72.174.255
Signature Algorithm: sha256WithRSAEncryption
44:b6:78:b2:7b:0a:71:50:17:76:08:be:b8:ed:2a:ac:13:d1:
db:2d:a6:89:35:9b:e0:ac:a7:82:28:1b:56:45:58:e2:ee:d8:
0f:72:ea:58:ed:bc:92:ab:0e:64:7f:67:3d:09:55:cd:63:cc:
bf:20:84:81:5d:7c:a4:05:3b:a7:4f:b7:24:80:38:93:d8:83:
34:fd:e5:ca:b4:74:44:3e:1b:8b:31:82:49:ec:0e:1d:47:a6:
68:82:ce:b6:27:f1:be:fc:9e:28:95:36:e7:de:14:d9:32:8d:
b9:94:c0:44:e1:e6:33:fb:fe:4e:f8:77:f0:3c:87:b4:eb:2f:
71:4a:5c:f1:20:99:75:35:5f:95:0b:2a:ae:08:cd:1b:81:bf:
6b:1b:9b:56:a5:9f:76:fa:7d:91:a2:dd:28:3d:d6:45:60:cf:
88:5d:a2:3e:b3:ea:f6:cb:c8:f6:20:92:3e:39:8a:86:6e:ae:
a1:eb:fc:c6:4b:66:4b:0f:3b:82:cd:a2:cf:aa:22:22:db:59:
9f:0e:53:9a:0e:57:9c:bf:69:43:0a:14:be:3a:2b:a1:7a:84:
b5:76:a6:b8:79:76:9e:4b:34:29:83:5f:98:81:9a:dd:3b:20:
af:cf:ae:96:a1:b6:ab:d0:c4:70:1b:96:de:9b:dc:d8:7f:10:
a5:78:17:c9
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYiukr0KGk2EE8vtPgJb72U6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwNjEyMDc0NzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjNmYjhmZmVmZWY0M2MyYmNiOGNjNGI2ZWZhMjlhOTllMDIxYWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyAui1SFG4OspTk/DpEw3PiGTIqP
OeKYjGKEEgrJOOlKaMdxLWjc6sr6cFVcW3bleT+6wCmOyPigpIyIcZSrbmSzFa6X
Jyu0bYN8vq6Key1KJunU45ao1eQbUepyBmt2Mm0r7x5u2tHLlr/T8M2Qbb28LVex
cCS7hFqACjDlI5XV88e3yf09kVHatqfzKOTG1BhhfkRodNa0lDrg3KoYJzBvdFbL
BPtwyQNAf+5zB6tOWD4oaSnYMbwiQyFPrUh9MqP1krF1B5CKX83B4h+cH7e9wE50
3h7zPuuq6QOC15gHNR0KkxEQ/cxZ/338QP3ejQxbwqFz/hOPrvZ9JYzZ4wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFH8/uP/v70PCvLjMS276KameAhr2MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvZnotNF8tX3ZROEs4dU14TGJ2b3BxWjRDR3ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAPkikAwQA
PkioMAwDBAA+SK0DBAA+SK4wDQYJKoZIhvcNAQELBQADggEBAES2eLJ7CnFQF3YI
vrjtKqwT0dstpok1m+Csp4IoG1ZFWOLu2A9y6ljtvJKrDmR/Zz0JVc1jzL8ghIFd
fKQFO6dPtySAOJPYgzT95cq0dEQ+G4sxgknsDh1HpmiCzrYn8b78niiVNufeFNky
jbmUwETh5jP7/k74d/A8h7TrL3FKXPEgmXU1X5ULKq4IzRuBv2sbm1aln3b6fZGi
3Sg91kVgz4hdoj6z6vbLyPYgkj45ioZurqHr/MZLZksPO4LNos+qIiLbWZ8OU5oO
V5y/aUMKFL46K6F6hLV2prh5dp5LNCmDX5iBmt07IK/PrpahtqvQxHAblt6b3Nh/
EKV4F8k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org