Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/h8K1baGy2SDnBxmtkHZEcBDz46w.roa
File: h8K1baGy2SDnBxmtkHZEcBDz46w.roa (raw, json)
Hash identifier: TgI/0e7SQOtpFByHs0HkNuSQXduwVzmLAPOIGZycglw=
Subject key identifier: 87:C2:B5:6D:A1:B2:D9:20:E7:07:19:AD:90:76:44:70:10:F3:E3:AC
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0187A88B697CA0EC24784E501F4A10D45B26
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/h8K1baGy2SDnBxmtkHZEcBDz46w.roa
Signing time: Sat 22 Apr 2023 10:38:41 +0000
ROA not before: Sat 22 Apr 2023 10:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.72.160.0/24 maxlen: 24
62.72.163.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 18:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:8b:69:7c:a0:ec:24:78:4e:50:1f:4a:10:d4:5b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 22 10:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87c2b56da1b2d920e70719ad9076447010f3e3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:47:a8:1b:27:86:4f:df:53:bd:97:20:6a:
d0:8d:22:e2:0d:61:bd:e0:45:63:c2:cf:e1:3f:5e:
97:7f:d9:14:0e:43:d4:a8:9a:ba:8c:c8:14:bb:9f:
e7:2f:6c:38:54:dd:5e:b9:d0:a1:37:b6:9f:34:02:
4d:e1:18:31:0d:48:4a:99:3b:32:41:a3:87:5d:10:
19:3a:c3:5d:f7:0e:1f:e6:e0:2f:15:2b:06:a0:1a:
b1:04:9f:53:13:cb:ce:d0:de:7a:16:4f:45:fe:b3:
58:32:41:5b:ea:d2:8b:ee:5c:9a:c3:c4:b8:83:90:
db:58:06:e1:70:d9:82:2c:0b:33:b8:4b:37:bd:55:
67:3f:38:30:b3:03:3a:d1:b2:f5:88:f0:d4:51:a2:
c2:78:b7:f3:8a:d9:e0:cf:33:96:1f:5b:39:8c:b1:
aa:09:d7:0b:6f:73:90:9c:d9:3d:11:90:68:79:87:
05:63:48:43:91:22:c9:af:c3:c6:ef:42:f5:0d:c9:
83:8d:17:cd:55:26:86:a1:63:2e:45:c4:7c:c7:8c:
35:4f:dd:6b:4e:08:9e:16:bf:b5:c3:c6:97:bb:6e:
1f:1a:14:5d:5a:8a:6e:95:d1:5a:f0:c3:f6:b6:9a:
5f:90:69:4e:05:f9:87:3b:3a:7b:2b:9c:02:8d:9d:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C2:B5:6D:A1:B2:D9:20:E7:07:19:AD:90:76:44:70:10:F3:E3:AC
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/h8K1baGy2SDnBxmtkHZEcBDz46w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0/24
62.72.163.0/24
62.72.169.0/24
62.72.185.0-62.72.187.255
Signature Algorithm: sha256WithRSAEncryption
57:f8:ab:86:34:f5:36:8d:5c:d3:f1:a0:9d:83:a8:c3:ee:cd:
2a:48:db:1b:3d:40:c8:90:ac:06:c7:94:c0:17:ea:cc:f9:6b:
e2:94:16:95:1c:44:a1:1a:8d:87:f1:42:d2:7c:a6:a1:8c:74:
66:3a:19:18:2a:39:48:77:81:59:04:50:c2:3b:32:99:de:ae:
a5:67:f4:5a:ff:5e:f9:73:50:55:cf:86:de:dc:eb:1e:16:9f:
a7:0d:66:3b:d8:ee:b5:7b:19:ad:4b:bc:22:8f:ef:53:91:01:
97:2a:9e:f3:53:ed:6c:28:cf:31:95:97:c9:a1:cf:8b:ce:87:
e3:c5:ae:25:ff:85:d4:d6:cf:92:0d:2d:56:38:eb:9e:de:11:
72:82:70:5f:07:1d:e9:4b:a4:f0:7c:2a:41:3c:d8:d8:f7:39:
3c:97:77:ea:60:c9:44:11:38:fa:08:f8:53:4f:06:c2:d2:84:
35:69:62:a7:86:d0:87:9d:0f:9d:b7:65:03:bd:67:e9:97:af:
74:7a:8e:e6:1c:65:ff:26:0c:cc:e7:08:08:a5:df:43:ca:78:
f2:30:a7:0a:8c:0a:c1:5e:6b:a2:e7:25:76:4f:e0:ed:98:b5:
41:ca:1f:52:bb:ad:ea:41:ba:f3:85:c1:6a:4a:f9:f2:09:31:
6c:6a:88:b1
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYeoi2l8oOwkeE5QH0oQ1FsmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwNDIyMTAzODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2MyYjU2ZGExYjJkOTIwZTcwNzE5YWQ5MDc2NDQ3MDEwZjNlM2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk39HqBsnhk/fU72XIGrQjSLiDWG9
4EVjws/hP16Xf9kUDkPUqJq6jMgUu5/nL2w4VN1eudChN7afNAJN4RgxDUhKmTsy
QaOHXRAZOsNd9w4f5uAvFSsGoBqxBJ9TE8vO0N56Fk9F/rNYMkFb6tKL7lyaw8S4
g5DbWAbhcNmCLAszuEs3vVVnPzgwswM60bL1iPDUUaLCeLfzitngzzOWH1s5jLGq
CdcLb3OQnNk9EZBoeYcFY0hDkSLJr8PG70L1DcmDjRfNVSaGoWMuRcR8x4w1T91r
TgieFr+1w8aXu24fGhRdWopuldFa8MP2tppfkGlOBfmHOzp7K5wCjZ2EhwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFIfCtW2hstkg5wcZrZB2RHAQ8+OsMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvaDhLMWJhR3kyU0RuQnhtdGtIWkVjQkR6NDZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAPkigAwQA
PkijAwQAPkipMAwDBAA+SLkDBAI+SLgwDQYJKoZIhvcNAQELBQADggEBAFf4q4Y0
9TaNXNPxoJ2DqMPuzSpI2xs9QMiQrAbHlMAX6sz5a+KUFpUcRKEajYfxQtJ8pqGM
dGY6GRgqOUh3gVkEUMI7MpnerqVn9Fr/XvlzUFXPht7c6x4Wn6cNZjvY7rV7Ga1L
vCKP71ORAZcqnvNT7WwozzGVl8mhz4vOh+PFriX/hdTWz5INLVY4657eEXKCcF8H
HelLpPB8KkE82Nj3OTyXd+pgyUQROPoI+FNPBsLShDVpYqeG0IedD523ZQO9Z+mX
r3R6juYcZf8mDMznCAil30PKePIwpwqMCsFea6LnJXZP4O2YtUHKH1K7repBuvOF
wWpK+fIJMWxqiLE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org