Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lPaJ8BeyNybFT_83CWTisJ9nNNM.roa
File: lPaJ8BeyNybFT_83CWTisJ9nNNM.roa (raw, json)
Hash identifier: pyFtDMiPNoQ9LKp9j2TxueHK7hXQmdxElQkxvBR8S2g=
Subject key identifier: 94:F6:89:F0:17:B2:37:26:C5:4F:FF:37:09:64:E2:B0:9F:67:34:D3
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0187796C6C2877F62CA1FF7A5A8902131C3C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lPaJ8BeyNybFT_83CWTisJ9nNNM.roa
Signing time: Thu 13 Apr 2023 07:02:41 +0000
ROA not before: Thu 13 Apr 2023 07:02:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.163.0/24 maxlen: 24
62.72.164.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
176.57.61.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 07:34:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:6c:6c:28:77:f6:2c:a1:ff:7a:5a:89:02:13:1c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 13 07:02:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94f689f017b23726c54fff370964e2b09f6734d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:c4:3b:23:b4:1a:4c:c4:75:d3:d7:9e:e0:
72:60:e9:b2:4e:50:ef:ef:a2:d5:8a:d2:2e:36:66:
fc:57:d8:ce:de:ae:fc:73:86:fa:ff:7e:63:cb:b1:
d7:04:5c:1b:76:7b:ae:46:82:dc:43:64:c6:2a:33:
04:63:24:81:0b:c9:bb:dc:08:18:71:8d:61:21:06:
a4:ad:98:c3:57:0d:89:01:5c:f4:e2:82:e1:75:df:
f3:1f:13:06:44:df:24:01:9a:36:2d:78:f6:4a:8b:
62:9b:d1:85:b3:0a:c2:2b:f9:2b:2e:d5:1a:fe:7c:
c7:58:6f:ff:cd:ee:8e:0e:e2:68:cd:c7:92:16:af:
de:72:d9:e1:2c:5b:a1:1f:01:7d:d2:fe:f7:a3:ae:
6c:cb:d5:50:29:2b:4e:ef:6e:31:1f:fc:7f:cb:ec:
3e:dc:11:1f:0b:09:84:fb:25:07:27:a9:21:fe:ed:
b0:ad:5c:cf:0b:ed:e0:72:d2:bb:d1:95:91:e8:16:
95:87:70:c1:82:58:3a:bd:40:e4:21:c6:c4:2b:bd:
d8:6e:fb:84:bb:78:e3:82:ea:fd:04:b9:a6:d9:b3:
45:7e:17:77:46:4a:fc:a7:9a:25:73:0e:a1:36:14:
7f:83:5f:2c:fb:24:e7:72:ba:a6:33:8d:9e:18:84:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F6:89:F0:17:B2:37:26:C5:4F:FF:37:09:64:E2:B0:9F:67:34:D3
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lPaJ8BeyNybFT_83CWTisJ9nNNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.163.0-62.72.164.255
62.72.168.0/24
62.72.177.0/24
62.72.191.0/24
176.57.61.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:4d:cf:c0:76:57:d4:d6:d5:9c:17:e2:19:75:02:4d:2e:43:
0d:52:56:f7:b8:0a:fa:b1:e1:53:9e:ba:6c:9f:21:c7:85:60:
7e:b9:ac:fc:41:0d:2b:a6:98:5f:5b:7d:07:0b:a8:de:8c:89:
42:56:93:92:50:50:ef:5e:c6:40:a9:b0:e9:2f:d1:0b:68:20:
fc:a6:6e:f1:3a:62:fb:61:1d:82:7d:d8:f4:cf:52:63:55:1b:
ba:c8:28:ad:68:1f:ae:65:c2:e5:4d:04:f0:33:fc:b7:14:6d:
9e:49:45:6d:d4:b5:f6:63:a8:cb:15:d9:66:1e:d6:ce:3e:dc:
ae:bb:da:d5:b4:37:0c:57:84:25:af:68:0c:69:c1:a4:be:1d:
b3:82:49:97:07:86:7e:a5:c5:32:b8:10:3c:dd:c2:33:25:f2:
ba:91:60:ac:ef:8f:ba:72:a4:6f:d1:db:1e:b7:cb:00:a2:74:
85:cd:36:bb:6b:9d:36:57:9e:f3:e4:19:01:7a:22:ac:d2:0c:
0f:e6:9b:70:90:c2:a4:23:a9:84:3d:cf:8e:63:5d:4b:8e:f6:
2a:a9:5a:bd:d5:b8:cc:e0:3f:eb:e6:65:25:b7:b0:56:38:60:
c0:bd:57:c0:3e:fc:45:77:61:53:d0:3d:08:6d:26:85:2b:e9:
64:24:74:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org