Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/g9u10ss_qIQ7SSgVHfJjIBTBF2o.roa
File: g9u10ss_qIQ7SSgVHfJjIBTBF2o.roa (raw, json)
Hash identifier: yEd+nTU/5WRwknGj7890iBlxgjUJNgZipaZvDCtKMMk=
Subject key identifier: 83:DB:B5:D2:CB:3F:A8:84:3B:49:28:15:1D:F2:63:20:14:C1:17:6A
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018BB2DB86A54E57858F312BC89C25BCA071
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/g9u10ss_qIQ7SSgVHfJjIBTBF2o.roa
Signing time: Thu 09 Nov 2023 06:53:33 +0000
ROA not before: Thu 09 Nov 2023 06:53:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400866
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.163.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
62.72.171.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Dec 2023 10:13:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b2:db:86:a5:4e:57:85:8f:31:2b:c8:9c:25:bc:a0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 9 06:53:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83dbb5d2cb3fa8843b4928151df2632014c1176a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:45:b4:33:82:c9:87:d1:b2:f9:89:e2:a0:53:
ad:bd:a9:95:f0:6d:80:67:b2:33:5b:6e:a7:03:04:
bc:a4:48:81:30:52:0e:89:07:ec:b2:14:f6:c9:1a:
22:97:53:0f:8e:6b:2c:1d:66:4a:3e:60:5b:a6:2d:
a8:18:f2:05:07:f8:82:c2:ae:59:a1:43:1b:65:dd:
60:01:5d:92:66:68:d3:7e:12:44:a4:04:a0:80:3d:
e8:c3:8e:94:c0:c5:3d:2a:dd:5b:93:49:aa:d1:70:
aa:d1:22:97:7b:9b:07:a3:c7:78:4d:f1:82:05:a9:
36:5e:87:f8:60:bd:4c:93:07:bc:ef:89:d9:5e:bd:
60:35:24:81:ac:db:8b:91:f2:b2:3f:1b:c2:08:fb:
03:07:44:a5:68:e6:11:8f:1f:96:ab:6e:df:6f:75:
50:a2:59:e5:4a:cd:84:3e:bf:ba:bd:1a:0f:90:3a:
fc:8e:06:39:40:0b:8f:1b:6c:c4:45:56:a5:25:e8:
99:60:b9:b2:c1:1c:7f:e6:2f:9f:df:74:05:37:56:
57:f9:5b:6d:89:c0:83:51:ae:54:34:4e:ec:7a:3a:
61:3c:ff:ee:80:26:da:f4:ab:ad:56:70:9f:ad:81:
6f:26:27:f1:5f:e2:1a:ce:2c:a0:e1:c3:bd:4b:85:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DB:B5:D2:CB:3F:A8:84:3B:49:28:15:1D:F2:63:20:14:C1:17:6A
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/g9u10ss_qIQ7SSgVHfJjIBTBF2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0/23
62.72.168.0/24
62.72.170.0/23
62.72.173.0-62.72.175.255
Signature Algorithm: sha256WithRSAEncryption
aa:c8:96:9d:5a:42:23:4d:a6:d0:c1:05:8c:cd:ba:68:d4:6f:
b9:11:09:72:96:2d:e3:22:dd:d0:12:16:6e:7d:2d:18:11:ab:
27:19:7a:b8:45:45:1f:01:06:e2:f1:69:98:37:46:45:0b:58:
d2:68:d6:7f:a6:bb:74:28:7f:bc:99:49:0f:66:b2:8a:61:a1:
65:1f:7e:aa:77:7b:dd:c1:35:27:e4:64:c6:2a:0d:38:ad:3a:
47:68:6f:e1:42:d2:d6:92:e9:78:ee:82:5f:e3:15:06:7f:61:
1b:4e:a5:91:57:3b:71:6b:10:92:86:44:7c:69:df:a4:06:06:
2c:42:93:41:27:f5:54:76:53:c9:d9:0b:90:34:91:9d:ef:bf:
69:ca:df:9e:7f:3a:cd:60:47:78:63:80:ec:9a:c6:15:76:c3:
e7:bc:d7:53:5a:72:c5:9a:bd:04:ad:09:dc:14:79:2f:e9:d4:
45:cd:d3:94:fb:7f:de:f3:ac:ff:60:ed:3a:77:c4:a3:d2:26:
1b:c1:c1:41:d6:a1:b8:97:0e:52:b1:ba:1a:61:24:6d:40:05:
33:6d:e9:e5:0d:20:dd:db:b0:21:ed:d5:97:e7:4a:1f:84:dd:
d7:dc:1a:f5:b6:6c:9a:67:67:1d:ec:6b:5c:40:63:de:6f:43:
c3:3d:e8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org