Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vsxLnuKaZmtM5SsFQw-AOCQscdI.roa
File: vsxLnuKaZmtM5SsFQw-AOCQscdI.roa (raw, json)
Hash identifier: ZG3iYOIKU0kg66rApI2NaEGjvSvshMy+CqSWSOII5YQ=
Subject key identifier: BE:CC:4B:9E:E2:9A:66:6B:4C:E5:2B:05:43:0F:80:38:24:2C:71:D2
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018809C81D40773DCC86080B6B1B5BBBD0F7
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vsxLnuKaZmtM5SsFQw-AOCQscdI.roa
Signing time: Thu 11 May 2023 07:48:09 +0000
ROA not before: Thu 11 May 2023 07:48:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.164.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 May 2023 21:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:09:c8:1d:40:77:3d:cc:86:08:0b:6b:1b:5b:bb:d0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 11 07:48:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=becc4b9ee29a666b4ce52b05430f8038242c71d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:83:29:51:35:da:83:74:a5:64:69:21:22:69:
e1:3b:63:ed:43:58:48:5c:74:4c:87:26:fc:87:75:
88:54:bb:86:2f:0e:4f:34:a8:16:dc:81:7e:d0:37:
5e:c4:20:4b:df:6a:0e:b4:72:20:a3:98:ab:2a:b9:
4d:c9:b3:1b:4b:0f:48:f8:28:fe:6c:59:91:b2:43:
78:d5:2e:e3:dd:53:4e:98:bd:9a:f1:14:d3:1d:8b:
ac:5c:58:90:48:2a:d8:1f:92:58:8d:e3:58:34:67:
58:84:6f:e9:55:09:56:94:f2:64:9e:06:00:c0:a6:
4e:40:47:68:6b:16:21:07:3f:8c:79:7d:af:45:2f:
ac:df:3a:44:a9:de:be:f4:f6:7a:6b:41:1e:2d:f3:
c7:4f:a1:93:47:1f:4d:e0:35:f9:6c:b5:19:1f:19:
9f:c9:d7:dd:dd:c2:f1:79:91:2b:a0:9c:5f:53:1c:
4d:a2:c9:71:5d:0e:1a:a5:4b:fb:5a:9f:f0:41:c3:
57:da:b8:36:60:9f:96:ac:3f:24:c3:fb:38:e7:5c:
87:2e:72:ac:ae:76:58:80:93:22:ce:64:1d:b3:4a:
a1:8c:46:6e:38:98:55:57:78:b2:5c:c7:27:bb:d7:
b2:98:51:f0:66:23:c8:8c:ee:03:00:6d:bd:21:8e:
e2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CC:4B:9E:E2:9A:66:6B:4C:E5:2B:05:43:0F:80:38:24:2C:71:D2
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vsxLnuKaZmtM5SsFQw-AOCQscdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.164.0/24
62.72.168.0/24
62.72.173.0-62.72.174.255
62.72.177.0/24
62.72.184.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:de:7c:7b:8e:43:b5:54:22:9a:18:df:53:2c:80:80:06:a7:
a0:10:60:ae:a3:80:fb:4e:5e:75:e5:3a:2d:b2:57:8c:e8:32:
dd:ee:be:79:ec:1c:23:ba:d2:1d:0e:0e:8d:bb:e7:e9:c2:1f:
d6:94:8f:e8:61:00:e7:9d:09:34:d8:8d:4e:ac:d0:8c:67:46:
ae:e5:9e:26:72:e6:e8:3f:de:1a:89:00:e7:60:a8:82:c0:d8:
6d:b8:7e:86:5c:aa:fd:9f:44:9e:cb:30:1f:7c:b6:a0:09:40:
e7:31:31:b9:4d:30:6e:e5:84:9a:b7:88:5c:c5:86:40:99:44:
86:04:86:fb:4b:d0:62:31:79:b3:f3:43:28:ad:72:f5:07:af:
d3:79:17:e1:5a:7c:42:6d:cf:8a:18:c1:02:78:ad:b0:c5:1b:
b8:88:fa:40:74:47:95:39:aa:8c:90:29:1b:02:95:fa:9e:a8:
cb:8b:fc:c6:01:7f:d9:50:b5:58:74:57:d7:51:55:72:64:73:
8a:95:b4:eb:ae:a2:dd:57:72:60:2f:b8:9d:ee:3f:28:36:e7:
a4:99:7d:f0:73:71:a7:6a:3d:78:21:5a:ba:f8:49:42:92:15:
ef:e3:a8:85:70:0d:b5:91:f4:85:c6:ba:26:55:c0:90:6d:33:
8f:d7:35:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org