Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/l3WjDUO7wuWTkrwgngoKqlvfIOs.roa
File: l3WjDUO7wuWTkrwgngoKqlvfIOs.roa (raw, json)
Hash identifier: /CWHW7Ceg7nByL2pcyOVa6qjUelTS1gWa+hZZBbX0i8=
Subject key identifier: 97:75:A3:0D:43:BB:C2:E5:93:92:BC:20:9E:0A:0A:AA:5B:DF:20:EB
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01856F4B85D3DAFFD850755689A7EE217478
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/l3WjDUO7wuWTkrwgngoKqlvfIOs.roa
Signing time: Sun 01 Jan 2023 21:44:58 +0000
ROA not before: Sun 01 Jan 2023 21:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 62.72.183.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
176.57.61.0/24 maxlen: 24
176.57.60.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Feb 2023 08:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:85:d3:da:ff:d8:50:75:56:89:a7:ee:21:74:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 21:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9775a30d43bbc2e59392bc209e0a0aaa5bdf20eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:95:e8:bd:e2:9a:ba:dd:de:66:63:03:d2:
86:e1:90:9a:87:11:c1:d8:cc:e0:86:38:06:9f:d4:
89:8a:08:e4:67:53:43:e1:a6:a8:5e:1d:f5:17:64:
5c:5a:5f:a1:19:8d:17:72:78:5d:8c:f1:52:98:62:
dd:d6:c4:dd:a1:de:e5:e8:32:b3:5e:b3:a2:5e:3d:
87:ff:eb:bb:74:b7:ef:f5:74:0b:ea:ef:7e:93:95:
45:88:29:51:51:af:aa:27:4c:d1:dd:19:46:4e:c5:
a0:81:2f:50:81:41:77:1c:ba:e9:20:c2:f1:cd:ca:
55:30:b2:7b:af:e8:eb:6e:fb:23:23:d5:ae:78:5d:
23:d7:38:31:80:94:6c:f8:0d:49:60:52:82:48:50:
a8:e9:7f:f8:26:f6:23:4a:02:74:49:cb:ba:a3:ee:
5a:4e:d2:bb:f1:68:a0:c3:2f:18:32:eb:1d:82:3a:
0d:ae:0c:ce:b7:ef:a3:fa:8c:d6:0a:45:ea:04:3e:
28:35:af:c0:c4:51:48:06:20:f9:78:d3:38:8b:ba:
d2:b8:ce:4d:63:9b:c6:db:58:67:4e:45:59:9a:80:
c9:36:b0:ac:ee:f3:ab:bc:2c:bd:2c:63:1d:33:bd:
15:1f:b0:20:1f:32:27:c5:5d:73:ac:79:6d:16:d6:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:75:A3:0D:43:BB:C2:E5:93:92:BC:20:9E:0A:0A:AA:5B:DF:20:EB
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/l3WjDUO7wuWTkrwgngoKqlvfIOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.183.0-62.72.184.255
62.72.186.0/23
176.57.60.0-176.57.62.255
Signature Algorithm: sha256WithRSAEncryption
93:40:1f:49:cc:ab:5e:0a:ef:1f:8a:91:07:34:38:bc:38:29:
f3:ec:c7:27:ae:ce:07:b4:76:16:2a:e1:3b:b8:e3:f4:c7:e9:
d6:fc:20:8b:da:9a:00:dd:89:8d:47:a9:7a:c0:8f:02:4b:fa:
54:1c:45:9b:a1:e3:06:6c:b1:3e:bc:c3:48:69:ae:e8:b0:15:
59:63:fa:88:26:c9:64:4b:c9:04:b4:1b:31:02:1d:11:04:99:
10:22:10:dc:73:f3:54:42:3e:3f:a5:8b:88:3d:d2:4c:d6:88:
f9:b0:e2:df:f4:df:11:42:0b:e6:99:66:06:91:10:9d:8d:a0:
fa:f2:bf:23:5e:25:e1:20:cd:5e:37:4d:4e:4f:47:0c:d1:ed:
39:00:30:bf:e9:ce:ad:ab:98:25:97:5d:db:b1:eb:c5:44:0e:
99:ae:fb:2c:86:b3:4e:68:cc:10:68:bf:0e:e3:f9:84:60:0f:
56:3e:91:a8:ad:f7:da:a6:3d:c5:93:09:f7:db:5e:c6:7f:7b:
be:5b:df:5d:04:8e:3f:7a:9e:ba:83:bf:f7:97:88:91:25:59:
58:35:2d:4d:8c:47:9b:91:53:23:19:7b:a1:7b:e5:64:65:a5:
b0:9d:cc:d5:e7:78:e1:cd:c5:03:60:6b:91:bb:4c:70:5d:98:
58:b5:8c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org