Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i9Mryy3VZRVACftBlYyR9t67Zdo.roa
File: i9Mryy3VZRVACftBlYyR9t67Zdo.roa (raw, json)
Hash identifier: EbfSKmJw0Zt2DQrBGaX1N1qel6pK4phXMRtc5Yvcs4Y=
Subject key identifier: 8B:D3:2B:CB:2D:D5:65:15:40:09:FB:41:95:8C:91:F6:DE:BB:65:DA
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0185F2527429FBE30407ED815F41E4D16A25
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i9Mryy3VZRVACftBlYyR9t67Zdo.roa
Signing time: Fri 27 Jan 2023 08:22:48 +0000
ROA not before: Fri 27 Jan 2023 08:22:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 62.72.165.0/24 maxlen: 24
62.72.166.0/24 maxlen: 24
62.72.167.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.176.0/23 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Mar 2023 16:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:52:74:29:fb:e3:04:07:ed:81:5f:41:e4:d1:6a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 27 08:22:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bd32bcb2dd565154009fb41958c91f6debb65da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:bd:12:4c:68:68:da:54:3a:78:4b:fc:63:
c9:48:49:48:79:4c:e1:26:31:33:38:b2:2d:e8:f0:
55:21:ba:f2:e8:7d:c0:8d:c9:6c:c5:c8:01:bb:ae:
dd:0e:67:97:60:d5:ea:d5:b0:40:c1:8a:e9:2a:61:
3d:ff:02:35:16:72:b1:81:d1:00:8b:76:dc:fc:b9:
77:29:3b:22:21:ff:b2:7b:69:24:8a:1d:63:6e:ff:
53:c3:a7:64:58:59:d7:cb:5a:88:03:97:0d:e4:2e:
2e:a5:5c:df:cb:f0:a3:79:03:15:4c:d2:93:67:c6:
68:f8:61:f3:37:21:94:8e:ec:0c:2d:12:db:9b:f7:
85:18:2e:68:ef:42:63:52:a9:32:76:6f:2c:f2:af:
33:30:64:a3:94:9e:c3:ee:09:ee:15:8a:63:d9:ab:
f0:b2:3a:55:eb:ef:2c:c7:c0:ab:12:04:8d:74:a4:
4a:c2:0c:b6:10:e4:35:81:94:46:31:e5:09:e3:c7:
b5:0a:5f:96:1d:dd:dc:ca:db:18:2f:88:61:98:d4:
7f:e9:ca:09:8a:fa:0d:ac:ae:ab:8f:1a:e4:29:e3:
5e:3e:8e:cf:ac:6f:34:b6:c5:72:79:f4:ce:a5:15:
e4:72:80:8d:c6:b6:19:17:0a:08:bf:3f:c4:95:dd:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D3:2B:CB:2D:D5:65:15:40:09:FB:41:95:8C:91:F6:DE:BB:65:DA
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i9Mryy3VZRVACftBlYyR9t67Zdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.165.0-62.72.167.255
62.72.176.0/23
62.72.179.0/24
62.72.181.0-62.72.182.255
62.72.188.0/23
176.57.51.0/24
Signature Algorithm: sha256WithRSAEncryption
80:0e:ce:dc:d7:09:9a:61:4d:ab:53:4f:be:98:70:fc:fe:8c:
d0:31:0b:a7:c2:b9:92:4a:d6:9d:96:9e:9a:92:8c:9c:7f:d7:
cb:02:ea:00:24:3b:6d:2a:c4:f6:66:e6:26:07:af:60:74:78:
a9:b8:7d:73:ec:9a:d7:c0:e7:f2:85:52:a8:4b:43:4f:fc:02:
21:dd:f1:f7:62:f9:8d:db:44:a6:35:5e:4a:6c:d0:8c:0b:21:
9a:7c:ee:b7:b0:be:97:eb:b6:ef:1c:ab:a5:7e:73:de:d8:68:
fe:df:e7:65:a5:48:6c:61:a1:9a:7f:9e:83:ee:90:4f:1f:7e:
b7:fe:ae:d5:a9:c2:4c:39:18:16:84:64:f2:62:4b:52:96:ba:
00:8d:12:3f:5e:c7:ab:35:9e:75:57:f3:91:be:f1:26:b3:fb:
64:40:a5:69:de:7b:40:7d:28:9e:00:dc:f6:d6:c3:59:39:f7:
39:a7:c4:6c:9f:9e:b9:c9:72:b6:88:22:d5:04:56:c3:8e:65:
de:85:3f:48:c2:ed:e0:7f:88:35:24:bb:e2:ee:21:67:4b:ca:
70:2b:d2:f1:d1:ac:d5:68:36:1b:c1:06:e1:4f:c4:82:af:89:
16:27:fc:9e:08:cb:92:60:ad:85:4f:29:1f:65:5d:32:03:85:
67:f8:1e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org