Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/pkjbrpevLrLkueMGIEOK5bd6dDc.roa
File: pkjbrpevLrLkueMGIEOK5bd6dDc.roa (raw, json)
Hash identifier: FK10S3ugbe4XCUDNnr2phK0YOBB+3Cfzi3oVxcERjf4=
Subject key identifier: A6:48:DB:AE:97:AF:2E:B2:E4:B9:E3:06:20:43:8A:E5:B7:7A:74:37
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0187A886D6CDF65EAAD6176A6684EACDEB1E
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/pkjbrpevLrLkueMGIEOK5bd6dDc.roa
Signing time: Sat 22 Apr 2023 10:33:41 +0000
ROA not before: Sat 22 Apr 2023 10:33:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 62.72.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 12:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:86:d6:cd:f6:5e:aa:d6:17:6a:66:84:ea:cd:eb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 22 10:33:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a648dbae97af2eb2e4b9e30620438ae5b77a7437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:e1:e0:c2:20:b1:1d:c1:e0:46:e7:b2:b0:
03:ca:15:28:0c:ca:ee:fd:f6:ee:97:c4:99:1d:5b:
1d:68:b1:36:fa:71:79:29:b1:04:38:c9:48:23:8e:
64:dc:ae:c9:32:d6:1d:7b:a7:fc:9b:0e:b1:29:c6:
e6:f6:52:13:f8:9d:45:19:3b:31:e8:9d:dc:9d:d1:
52:82:ea:27:37:79:4b:f5:f2:87:4f:96:c5:bb:89:
d1:8e:79:4e:2c:f7:fc:17:74:36:a1:22:a5:70:73:
72:be:66:83:fa:ab:75:76:7a:f0:aa:86:46:d1:8c:
a9:bd:1a:a2:37:3b:2e:97:14:be:ac:e4:cb:ed:53:
2e:9b:96:0d:88:d9:f3:18:86:45:f1:5b:d2:aa:55:
95:93:7b:05:36:f9:00:89:08:56:ef:fe:f5:5f:87:
1d:a7:5a:10:df:92:0b:71:cd:57:4e:98:f0:0f:c1:
63:f5:c4:4f:26:ad:e0:16:ff:b6:e3:5f:07:a5:43:
ca:00:69:c4:f7:bd:4c:88:41:41:14:fc:05:60:e8:
ee:43:fb:c1:54:c6:13:8d:17:0f:3e:a5:68:d9:6a:
a0:3b:9f:5c:2f:87:da:93:ed:54:49:9d:59:79:37:
3f:61:92:c0:1c:76:7d:88:a9:ce:c7:ff:42:60:b1:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:48:DB:AE:97:AF:2E:B2:E4:B9:E3:06:20:43:8A:E5:B7:7A:74:37
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/pkjbrpevLrLkueMGIEOK5bd6dDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.183.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:de:d0:33:04:09:6e:50:a6:09:e1:49:23:46:1c:5f:54:fc:
2a:dd:8e:d4:2b:35:b8:6f:83:1d:3e:bf:29:a2:ed:d2:ae:b8:
54:ef:ea:82:40:b5:7c:28:90:11:0a:9d:83:a5:0d:1d:19:a7:
5b:92:f0:f2:4a:17:f3:b7:f7:08:89:78:6f:28:54:a1:ca:1d:
64:d4:22:65:f4:e0:cd:44:e3:38:d2:1e:a2:46:05:f3:53:70:
d8:a7:0d:a4:99:d8:15:f5:b1:a4:51:33:64:02:46:04:21:ff:
d4:30:a8:70:9b:69:cf:f1:fa:1d:3b:f5:3d:7f:6f:e6:f2:d3:
64:36:7c:b4:53:1e:ee:69:f0:ac:7f:22:d0:b1:c0:9f:c9:17:
f7:62:ac:5b:79:82:15:b8:53:34:6a:b1:ff:21:51:09:03:50:
3e:99:de:0c:bf:d6:f9:5b:a0:ff:fc:a2:c7:1e:95:73:fb:1d:
e4:b4:1f:98:7b:7f:1a:5b:4f:5b:72:08:bb:01:39:ba:77:0b:
ff:88:d6:fc:43:7c:8d:ad:ec:82:a8:10:39:04:94:a0:7f:1e:
27:35:cc:56:a7:05:f4:22:4a:ca:a0:d9:97:90:8f:c3:23:c5:
b3:b1:f4:4e:27:68:a9:d9:64:91:b4:ba:ce:79:9a:4c:95:28:
39:4d:3a:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeohtbN9l6q1hdqZoTqzeseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwNDIyMTAzMzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjQ4ZGJhZTk3YWYyZWIyZTRiOWUzMDYyMDQzOGFlNWI3N2E3NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHjh4MIgsR3B4EbnsrADyhUoDMru
/fbul8SZHVsdaLE2+nF5KbEEOMlII45k3K7JMtYde6f8mw6xKcbm9lIT+J1FGTsx
6J3cndFSguonN3lL9fKHT5bFu4nRjnlOLPf8F3Q2oSKlcHNyvmaD+qt1dnrwqoZG
0YypvRqiNzsulxS+rOTL7VMum5YNiNnzGIZF8VvSqlWVk3sFNvkAiQhW7/71X4cd
p1oQ35ILcc1XTpjwD8Fj9cRPJq3gFv+2418HpUPKAGnE971MiEFBFPwFYOjuQ/vB
VMYTjRcPPqVo2WqgO59cL4fak+1USZ1ZeTc/YZLAHHZ9iKnOx/9CYLH8RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKZI266Xry6y5LnjBiBDiuW3enQ3MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvcGtqYnJwZXZMckxrdWVNR0lFT0s1YmQ2ZERjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPki3MA0G
CSqGSIb3DQEBCwUAA4IBAQDI3tAzBAluUKYJ4UkjRhxfVPwq3Y7UKzW4b4MdPr8p
ou3SrrhU7+qCQLV8KJARCp2DpQ0dGadbkvDyShfzt/cIiXhvKFShyh1k1CJl9ODN
ROM40h6iRgXzU3DYpw2kmdgV9bGkUTNkAkYEIf/UMKhwm2nP8fodO/U9f2/m8tNk
Nny0Ux7uafCsfyLQscCfyRf3YqxbeYIVuFM0arH/IVEJA1A+md4Mv9b5W6D//KLH
HpVz+x3ktB+Ye38aW09bcgi7ATm6dwv/iNb8Q3yNreyCqBA5BJSgfx4nNcxWpwX0
IkrKoNmXkI/DI8WzsfROJ2ip2WSRtLrOeZpMlSg5TTrP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org