Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/il_tQzGsxWlmywkZo3GO4rHOmsE.roa
File: il_tQzGsxWlmywkZo3GO4rHOmsE.roa (raw, json)
Hash identifier: TGum4hEpqU6QikNtiWDGB7No27Nfn/f8G/auaCAa6Ug=
Subject key identifier: 8A:5F:ED:43:31:AC:C5:69:66:CB:09:19:A3:71:8E:E2:B1:CE:9A:C1
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01858639A04487DFE47CC2E26269168CBE80
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/il_tQzGsxWlmywkZo3GO4rHOmsE.roa
Signing time: Fri 06 Jan 2023 08:36:41 +0000
ROA not before: Fri 06 Jan 2023 08:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 62.72.164.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.163.0/24 maxlen: 24
62.72.160.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.171.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Jan 2023 15:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:39:a0:44:87:df:e4:7c:c2:e2:62:69:16:8c:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 6 08:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a5fed4331acc56966cb0919a3718ee2b1ce9ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b9:7c:4d:1d:4f:b0:cd:92:e9:b7:6e:7a:13:
36:e7:97:a9:cf:10:65:32:66:95:17:f8:cd:a2:68:
f2:90:59:8c:76:5a:7b:39:19:67:74:46:8f:04:a7:
24:5e:77:13:ec:8e:82:8b:17:23:cc:96:14:d2:14:
74:94:a0:2e:ea:2f:29:c6:b4:23:35:51:e0:4a:7e:
89:92:87:03:8a:03:c4:eb:72:3a:f4:ba:bb:65:90:
5b:c3:80:95:b3:e9:72:ac:ed:e9:fb:a0:76:25:41:
cb:cb:63:21:c8:1a:01:7e:82:90:8c:16:f0:f2:1c:
9f:a0:2a:62:93:ac:a7:a7:a0:0b:5c:c7:0d:30:01:
7d:d3:e1:4b:7b:44:b8:34:a8:7d:0f:a6:9f:17:1c:
4a:7f:f2:c5:1c:f7:fd:e1:27:3e:a1:4b:52:f5:33:
40:2e:51:41:23:d5:e5:3a:ae:ce:d6:ba:b0:01:4e:
04:d1:39:d0:88:df:47:1b:7f:74:b5:b4:e3:95:46:
a1:35:8d:37:f3:66:d1:bf:00:b2:d4:18:b3:37:c0:
72:27:ec:46:7f:1a:68:ce:11:d1:65:82:fe:21:e1:
22:48:c2:89:04:f1:5f:81:0f:28:55:6c:a5:17:a1:
01:44:21:b7:eb:15:69:4c:ab:6c:90:af:c3:55:fb:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5F:ED:43:31:AC:C5:69:66:CB:09:19:A3:71:8E:E2:B1:CE:9A:C1
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/il_tQzGsxWlmywkZo3GO4rHOmsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0-62.72.164.255
62.72.168.0/22
62.72.173.0-62.72.176.255
62.72.183.0/24
Signature Algorithm: sha256WithRSAEncryption
11:91:81:f8:0e:d5:bd:8a:f4:14:69:cd:7e:1f:c5:a2:47:d0:
6c:5b:9c:f7:cb:55:46:dc:1d:4a:28:bb:11:e6:73:79:d1:1a:
04:e9:47:68:db:ea:fe:51:83:06:a2:75:78:5f:6a:d3:7a:ab:
dc:88:16:f4:9e:c0:d6:58:18:23:30:1e:36:5b:16:2d:8f:b9:
38:61:46:a9:9e:be:c1:be:c0:66:05:ee:3d:e7:29:f3:3b:60:
6a:ab:47:28:af:c0:35:3b:a9:b6:1f:24:da:e3:fc:5f:fd:0a:
6a:bd:b5:94:aa:2b:0b:d0:a8:58:f0:16:17:b1:57:92:89:0d:
13:5d:a0:6b:5b:c7:d1:5b:d6:0d:06:e1:c1:95:3b:0e:a0:76:
01:12:8e:11:8f:de:29:f6:01:00:f4:03:0e:a9:ba:00:9e:c4:
64:63:fb:0a:48:5f:dd:17:ea:77:a2:54:d3:af:26:d7:77:db:
25:f2:87:40:bf:94:ea:a0:c9:42:fd:8c:a1:4a:6e:62:87:bd:
1f:0b:0e:e7:0b:95:0f:1a:65:45:14:1c:f0:49:70:c3:26:69:
ba:b2:7a:ea:f3:38:18:64:06:7a:4e:71:b8:68:e9:a6:fc:0b:
34:c0:41:44:a6:07:6d:09:e1:51:5b:c3:c7:85:34:e4:f9:a7:
a1:35:eb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org