Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/k02H3OsRUI-GFaHGPR-ydJfu1Mk.roa
File: k02H3OsRUI-GFaHGPR-ydJfu1Mk.roa (raw, json)
Hash identifier: c+zm84jz3APvpccyB+Iw/sU/oVczQt5MkSYYdb6cs5o=
Subject key identifier: 93:4D:87:DC:EB:11:50:8F:86:15:A1:C6:3D:1F:B2:74:97:EE:D4:C9
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018750DAE19145E09BB056679AF6DB190165
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/k02H3OsRUI-GFaHGPR-ydJfu1Mk.roa
Signing time: Wed 05 Apr 2023 09:58:54 +0000
ROA not before: Wed 05 Apr 2023 09:58:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 62.72.164.0/24 maxlen: 24
62.72.160.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Apr 2023 13:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:da:e1:91:45:e0:9b:b0:56:67:9a:f6:db:19:01:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 5 09:58:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=934d87dceb11508f8615a1c63d1fb27497eed4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:17:ba:65:87:4c:24:18:dc:1f:fe:8c:c0:
eb:b4:5a:05:bc:9a:b7:32:4b:60:ed:af:54:d9:aa:
a3:bd:77:0b:75:fe:f2:8d:55:3b:03:f4:58:62:81:
c6:b6:e4:72:96:2b:7d:c4:c0:28:63:4e:e9:e1:d4:
17:0f:f8:a5:4b:fc:f7:54:fb:5e:69:01:d3:82:e2:
71:2d:5c:da:de:62:9a:fb:81:8c:26:b1:bf:4d:a8:
85:a3:f9:d0:ad:b3:11:ee:85:11:1c:64:8d:e4:de:
23:ec:2f:3e:29:07:9a:63:91:58:7a:73:9a:76:33:
95:31:25:61:9a:86:8a:79:5c:d6:f5:80:e8:d5:eb:
c7:aa:df:66:ce:63:08:1b:b1:8c:fc:7d:d3:b0:6d:
13:e3:20:20:ad:66:35:b2:68:2d:6f:8b:e6:9b:17:
e5:84:87:43:4c:e4:a2:da:9a:86:f6:8c:a8:4a:29:
47:82:b5:61:49:94:18:f1:3f:68:ea:7d:b2:b4:ad:
ff:08:0d:f4:d1:55:66:2d:3a:47:94:8b:ab:87:a7:
f1:26:f4:86:cd:fc:d2:a0:4a:38:f8:cd:93:7b:b1:
56:f0:23:66:59:8f:31:0e:67:5d:50:53:a9:d3:ff:
6a:7d:84:a9:3a:05:e7:87:76:ee:1d:76:1b:3c:cf:
e3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4D:87:DC:EB:11:50:8F:86:15:A1:C6:3D:1F:B2:74:97:EE:D4:C9
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/k02H3OsRUI-GFaHGPR-ydJfu1Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0/24
62.72.164.0/24
62.72.169.0/24
62.72.176.0/24
62.72.183.0-62.72.184.255
62.72.190.0/24
176.57.62.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:e0:35:dc:d2:eb:12:d0:de:f0:f7:a5:41:d4:ed:66:6f:7a:
be:19:5c:c5:3a:8a:da:81:7f:77:ab:a1:5f:34:3a:c4:1f:32:
e1:c2:33:6a:c7:a9:2b:89:eb:ca:95:ed:2f:ea:8d:f3:8e:75:
24:38:78:de:13:51:ba:06:8d:f0:20:bf:ba:64:cb:2d:3f:6f:
20:8c:75:d6:a6:69:96:4d:dd:65:75:d7:c6:7d:58:fe:af:58:
e3:da:c4:52:aa:de:ef:f1:0a:2d:15:17:b3:1e:1c:4c:31:74:
56:21:07:18:99:e5:a7:2f:ad:a4:f0:29:0b:40:e4:0f:a4:e1:
84:39:6f:98:96:26:e2:b6:18:97:90:ef:19:fe:a4:6c:a1:6d:
ee:a1:67:f4:f4:55:ed:e8:9d:c3:ac:66:b3:6e:4f:d8:92:88:
1c:ca:a0:52:31:11:87:0e:87:60:e2:52:32:6e:76:bc:82:82:
fa:c8:94:42:56:44:23:9d:bd:da:8f:e8:9d:7e:f9:01:1b:cf:
c0:f4:1b:8c:8c:88:07:29:de:40:36:8c:7c:90:b6:91:76:9e:
58:ce:c3:c2:0e:24:9c:73:6f:b6:72:0a:0a:b8:fb:cf:84:35:
ad:cf:14:1e:b1:98:1e:32:f6:03:1d:16:69:91:4d:f4:0b:8c:
e6:f4:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org