Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lwWJvuqiNlxrpqw10os5rWny_hc.roa
File: lwWJvuqiNlxrpqw10os5rWny_hc.roa (raw, json)
Hash identifier: JibW7AA1cbE6wXh4VEfFaJwrwbm5kIETY77nQ5ZFk84=
Subject key identifier: 97:05:89:BE:EA:A2:36:5C:6B:A6:AC:35:D2:8B:39:AD:69:F2:FE:17
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0188AF9606FAF4C5EFDC02B991A0EB5CB493
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lwWJvuqiNlxrpqw10os5rWny_hc.roa
Signing time: Mon 12 Jun 2023 12:30:24 +0000
ROA not before: Mon 12 Jun 2023 12:30:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.160.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 06:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:96:06:fa:f4:c5:ef:dc:02:b9:91:a0:eb:5c:b4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 12 12:30:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=970589beeaa2365c6ba6ac35d28b39ad69f2fe17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:cf:5c:cd:2e:e9:f5:9d:6b:83:a2:6e:12:
eb:16:a4:be:4f:58:93:de:52:78:c7:5a:d1:2b:81:
30:54:6b:b7:d0:fd:b4:e6:24:8d:f4:04:22:02:23:
d7:81:be:40:e2:a8:6a:db:af:a7:26:98:48:e0:69:
4d:39:7d:bb:63:d0:81:72:a9:57:21:09:74:d5:19:
c8:0e:ee:ae:d1:95:0b:d4:19:8d:4f:34:05:e2:3c:
01:4c:74:c8:16:4a:3b:b0:49:d8:7c:86:6e:2d:cc:
84:26:a9:7a:52:33:80:49:ac:fa:be:47:be:24:e8:
74:26:88:6f:72:62:bf:e5:a9:d2:87:3b:2f:f0:7d:
7f:4f:a6:0e:64:b7:82:02:16:e2:e0:8d:d2:fd:db:
44:48:d8:65:7b:4a:84:93:a2:ae:5a:ee:d5:dd:9d:
16:23:3c:6f:45:45:78:32:59:70:7b:d4:90:de:34:
03:24:ce:8d:a6:6e:ed:f4:19:21:da:1d:64:36:f9:
eb:d6:08:22:a7:a7:6b:bf:04:3e:a1:1b:b3:3f:fa:
5b:75:c6:f4:34:32:de:20:13:83:c2:5c:30:4c:c8:
f4:9d:e2:1b:4c:10:09:d8:3c:72:d3:fc:4e:e7:a9:
d1:a7:fd:f2:a1:01:b5:a6:d3:f7:95:77:eb:47:7e:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:05:89:BE:EA:A2:36:5C:6B:A6:AC:35:D2:8B:39:AD:69:F2:FE:17
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lwWJvuqiNlxrpqw10os5rWny_hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0/24
62.72.162.0/24
62.72.185.0-62.72.187.255
62.72.190.0/23
81.21.12.0/22
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:bc:07:71:bf:72:f6:b9:9c:bc:61:af:66:15:4d:52:cb:d5:
9e:84:af:c0:31:91:c7:24:73:15:58:a4:ce:2c:55:1d:22:72:
d8:89:b5:03:03:a2:e4:0d:c0:33:2e:88:e7:6c:f6:8e:ee:f8:
6b:4e:9e:f2:cf:e2:30:00:cc:9a:ce:b0:60:ef:92:3c:7a:43:
3d:a6:31:15:f9:7c:95:57:cd:5a:11:e5:68:94:75:07:f0:20:
80:c8:57:9b:63:fb:1d:0c:c4:52:ef:42:a4:30:7e:b9:90:5d:
81:38:8b:ab:ca:a9:81:5c:b2:92:3b:e3:3f:b2:7c:46:12:59:
94:72:64:55:01:d3:5e:7b:cb:ce:b8:0c:81:47:61:1e:fd:b1:
cc:18:fc:b6:dd:9e:f8:20:da:8b:f9:82:b3:eb:f0:50:cd:74:
a1:6a:12:eb:61:4a:80:1c:b7:5d:3f:21:b5:78:13:e4:22:95:
93:7b:5b:78:d2:22:41:cb:36:83:aa:5b:01:0e:75:c5:40:30:
37:d9:57:3e:e9:7e:83:6e:6f:d3:38:e5:c4:de:e1:c2:73:80:
03:fe:a2:89:1c:9c:5f:0a:83:e3:7c:fb:a2:09:86:13:9f:2b:
9c:51:75:58:1f:ed:56:4a:a2:d7:f3:9d:9b:80:93:63:66:0c:
fe:11:5c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org