Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/rtsCEDjP9imlFX8HNwCW15gHC-4.roa
File: rtsCEDjP9imlFX8HNwCW15gHC-4.roa (raw, json)
Hash identifier: MhN+nvZSkNi6LfyOvEZY8zfVhPxGz5BQuepPvCjJ2LI=
Subject key identifier: AE:DB:02:10:38:CF:F6:29:A5:15:7F:07:37:00:96:D7:98:07:0B:EE
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0187A88A7ECD2E41B6C8D3D947BCCC1433AE
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/rtsCEDjP9imlFX8HNwCW15gHC-4.roa
Signing time: Sat 22 Apr 2023 10:37:41 +0000
ROA not before: Sat 22 Apr 2023 10:37:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.164.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 05:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:8a:7e:cd:2e:41:b6:c8:d3:d9:47:bc:cc:14:33:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 22 10:37:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aedb021038cff629a5157f07370096d798070bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:43:b6:06:3a:44:6f:0b:f0:ba:33:17:6e:7d:
7d:73:4c:ac:a5:04:bb:ea:28:6c:2a:ad:ee:a4:10:
a3:f6:a8:38:cc:20:b2:0d:d1:2a:09:9f:48:e8:be:
66:ad:3a:53:33:0c:11:36:83:f8:d5:37:f5:19:b5:
9c:c3:af:a3:aa:41:28:32:a1:ab:92:e1:24:e5:ed:
b4:77:8f:a5:1f:9b:cd:35:f4:3e:ef:9f:0a:a0:52:
2a:a8:81:fa:7d:86:4a:c4:6b:0e:d2:92:bb:47:da:
1e:84:09:3c:72:b0:bc:eb:08:68:11:f3:05:0b:f6:
da:d1:0d:c9:64:3e:51:78:f1:68:60:91:ba:48:07:
a2:d6:fc:ec:b0:c0:0f:96:06:29:ac:bc:d8:6e:fc:
3a:01:1e:b5:74:1a:78:c2:f1:74:7c:b9:92:f6:53:
fd:2e:5c:28:41:27:ac:05:b2:00:19:e5:73:fe:5d:
20:a4:46:8a:ec:87:7b:51:22:f6:c6:aa:cf:73:13:
9d:37:46:bf:0f:ee:75:cb:b5:80:f8:30:e6:7b:d8:
2f:3e:93:d4:80:f2:5b:4d:11:0c:42:d9:23:7f:76:
46:f8:16:7e:7d:ff:bb:07:27:4b:8c:84:28:b9:48:
7b:2e:2d:dc:75:90:fa:bc:4c:b7:af:49:8d:9c:f5:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DB:02:10:38:CF:F6:29:A5:15:7F:07:37:00:96:D7:98:07:0B:EE
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/rtsCEDjP9imlFX8HNwCW15gHC-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.164.0/24
62.72.168.0/24
62.72.177.0/24
62.72.184.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e5:19:df:79:69:96:d2:ab:65:e6:b2:7f:3b:43:75:3e:47:
be:58:22:a5:3b:0f:e2:3d:35:a3:cc:c9:d6:0e:60:53:4e:77:
72:13:3d:c4:55:e8:7d:ec:8f:71:07:85:5e:69:f7:ef:be:dd:
46:72:1d:7d:80:3c:7c:da:27:15:b2:e1:46:c6:27:32:c5:c2:
37:b6:77:c2:39:1a:90:d2:50:cd:b1:54:b1:c3:b9:ee:a3:7b:
86:fd:a2:bc:5f:ca:08:3b:f6:cb:e1:59:f6:0b:c7:19:a7:c5:
dd:b0:c0:0d:e5:bc:8a:50:fb:c0:66:6d:82:76:67:1f:de:fb:
e4:87:d8:c0:03:32:71:33:4f:c0:e2:eb:11:ed:03:76:d3:aa:
aa:0b:eb:e7:43:cc:86:f6:59:3e:e1:78:21:5e:a4:64:3c:58:
92:2e:06:09:99:e1:ea:f4:8e:d5:22:7f:94:b3:cc:fd:49:5a:
53:48:01:0c:0f:4a:8a:ef:cc:23:8b:d0:66:48:73:f8:14:82:
ff:99:53:6a:bf:74:80:5d:61:67:0f:ea:e7:72:ac:9b:4a:b7:
42:fe:c3:09:36:d2:0d:63:16:c2:44:74:28:8d:3d:02:9c:6b:
51:87:f2:23:29:47:af:f3:5d:a6:43:bc:c6:58:af:8d:89:4b:
bd:43:d1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org