Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/h3xFO_eYzKhgwLSB3liJCPCMkCc.roa
File: h3xFO_eYzKhgwLSB3liJCPCMkCc.roa (raw, json)
Hash identifier: KWHAmSUVxR6QXDJkWVJokC5HkJ7wgF7oDuPpjjgAPHE=
Subject key identifier: 87:7C:45:3B:F7:98:CC:A8:60:C0:B4:81:DE:58:89:08:F0:8C:90:27
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01856F4B7DC51F7829CED53C84C93BA14AB2
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/h3xFO_eYzKhgwLSB3liJCPCMkCc.roa
Signing time: Sun 01 Jan 2023 21:44:56 +0000
ROA not before: Sun 01 Jan 2023 21:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 62.72.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Jun 2023 08:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:7d:c5:1f:78:29:ce:d5:3c:84:c9:3b:a1:4a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 21:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=877c453bf798cca860c0b481de588908f08c9027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:36:c5:69:42:bb:ff:d3:bf:8c:ff:2c:77:9b:
d7:af:a5:d7:9a:df:3f:1c:ad:55:65:a5:48:74:e1:
10:94:b3:51:49:96:98:57:08:86:ac:64:ec:55:be:
65:54:a0:82:82:b3:3c:6a:de:34:a8:66:dc:bb:0d:
76:a2:5e:21:a7:e8:f0:ba:fb:80:2c:ff:34:d6:40:
a4:4f:13:87:0c:c0:ac:a0:c3:92:c1:b4:9b:61:b8:
f1:13:15:9c:73:a3:66:17:12:a8:4a:b5:8e:65:0e:
4e:be:d3:53:ab:40:d6:24:c2:61:72:cf:1c:c5:bc:
e3:d9:73:b6:a7:0e:19:1e:2f:37:e6:bd:52:9f:22:
8c:99:dd:fd:00:76:73:f5:e6:77:0b:40:47:fd:be:
db:10:d6:0d:fe:b2:32:3a:09:9e:20:bd:69:37:40:
6e:55:13:7e:c3:8c:37:78:a9:8c:40:eb:29:3c:e8:
96:ba:d3:45:31:a8:7f:81:e6:0f:95:1b:07:28:92:
b5:9e:34:0a:89:9b:fb:09:da:7b:fe:b9:3b:b7:6a:
88:d1:e2:e4:34:66:4c:90:f4:d6:28:ee:72:93:9e:
a2:64:0a:76:3a:c9:7e:5c:54:6e:4d:2e:39:99:21:
07:e8:29:d6:48:49:cc:90:2c:13:1d:a3:92:2d:85:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7C:45:3B:F7:98:CC:A8:60:C0:B4:81:DE:58:89:08:F0:8C:90:27
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/h3xFO_eYzKhgwLSB3liJCPCMkCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.188.0/22
Signature Algorithm: sha256WithRSAEncryption
40:32:72:6d:90:d4:b9:42:b5:b1:eb:03:1d:3c:41:7a:08:3b:
a9:bb:a6:2d:18:ad:07:6c:80:de:18:ac:b6:b3:50:2a:e0:29:
26:56:d9:79:32:f9:5e:11:e8:9a:98:70:67:ef:cb:67:68:53:
33:4b:f0:3f:7a:cd:9c:70:e8:6d:00:74:ba:c6:a0:55:ee:20:
dc:31:5f:09:36:78:50:10:23:d5:14:cb:32:c2:94:d8:71:40:
17:82:15:fa:67:29:43:7e:8d:64:5e:f4:2b:91:d6:a9:1e:5e:
a0:3d:56:da:20:e8:14:4a:2f:41:7e:89:ac:5d:7b:2c:ca:f8:
e2:58:e2:e4:1d:a6:09:8e:70:f3:87:79:78:1e:cb:3a:45:9f:
9a:1a:d1:54:68:81:f7:2d:67:80:ad:ee:b2:fa:d4:82:23:de:
c9:72:dd:4f:d7:56:5a:9c:6d:de:e7:4b:fe:ab:46:69:1c:bc:
86:9d:f4:1a:56:b4:61:d3:c1:d3:21:4d:7b:00:34:84:6c:c0:
9b:f4:ae:af:a9:a8:24:6f:2f:eb:93:af:c8:62:38:4a:22:bc:
52:19:ce:68:f5:25:bf:dc:bd:31:00:29:4b:54:05:c1:e7:e9:
49:34:cb:d8:69:20:dd:de:3a:32:1f:a8:77:0f:37:26:e6:cb:
91:78:2e:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvS33FH3gpztU8hMk7oUqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwMTAxMjE0NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzdjNDUzYmY3OThjY2E4NjBjMGI0ODFkZTU4ODkwOGYwOGM5MDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzbFaUK7/9O/jP8sd5vXr6XXmt8/
HK1VZaVIdOEQlLNRSZaYVwiGrGTsVb5lVKCCgrM8at40qGbcuw12ol4hp+jwuvuA
LP801kCkTxOHDMCsoMOSwbSbYbjxExWcc6NmFxKoSrWOZQ5OvtNTq0DWJMJhcs8c
xbzj2XO2pw4ZHi835r1SnyKMmd39AHZz9eZ3C0BH/b7bENYN/rIyOgmeIL1pN0Bu
VRN+w4w3eKmMQOspPOiWutNFMah/geYPlRsHKJK1njQKiZv7Cdp7/rk7t2qI0eLk
NGZMkPTWKO5yk56iZAp2Osl+XFRuTS45mSEH6CnWSEnMkCwTHaOSLYVtmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFId8RTv3mMyoYMC0gd5YiQjwjJAnMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvaDN4Rk9fZVl6S2hnd0xTQjNsaUpDUENNa0NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPki8MA0G
CSqGSIb3DQEBCwUAA4IBAQBAMnJtkNS5QrWx6wMdPEF6CDupu6YtGK0HbIDeGKy2
s1Aq4CkmVtl5MvleEeiamHBn78tnaFMzS/A/es2ccOhtAHS6xqBV7iDcMV8JNnhQ
ECPVFMsywpTYcUAXghX6ZylDfo1kXvQrkdapHl6gPVbaIOgUSi9BfomsXXssyvji
WOLkHaYJjnDzh3l4Hss6RZ+aGtFUaIH3LWeAre6y+tSCI97Jct1P11ZanG3e50v+
q0ZpHLyGnfQaVrRh08HTIU17ADSEbMCb9K6vqagkby/rk6/IYjhKIrxSGc5o9SW/
3L0xAClLVAXB5+lJNMvYaSDd3joyH6h3Dzcm5suReC5M
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org