Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wNBJH-eHgMV_psmuQpyNw5cPMv4.roa
File: wNBJH-eHgMV_psmuQpyNw5cPMv4.roa (raw, json)
Hash identifier: Q0/dnIvCYnYeNg35rN1smheJMOqsc2OddCYcX8gtkkg=
Subject key identifier: C0:D0:49:1F:E7:87:80:C5:7F:A6:C9:AE:42:9C:8D:C3:97:0F:32:FE
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0189394BB7F27E04DB3A9BF87808B59E0E39
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wNBJH-eHgMV_psmuQpyNw5cPMv4.roa
Signing time: Sun 09 Jul 2023 06:16:50 +0000
ROA not before: Sun 09 Jul 2023 06:16:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.163.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
81.21.3.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.11.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jul 2023 10:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:39:4b:b7:f2:7e:04:db:3a:9b:f8:78:08:b5:9e:0e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jul 9 06:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0d0491fe78780c57fa6c9ae429c8dc3970f32fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bf:aa:cc:d0:c7:e7:34:ce:de:d1:a6:23:c8:
c0:5c:15:86:9b:02:2c:a5:5e:cc:49:30:98:8e:82:
87:12:10:df:80:e1:75:b0:86:71:08:22:78:3a:af:
65:6a:63:4e:d7:40:e8:31:cb:57:69:55:d9:7f:38:
05:b7:47:ce:5e:58:cc:b9:c1:f0:ac:4c:f5:fa:e2:
a0:3b:77:f4:b7:e3:26:e7:bb:23:15:c4:53:77:66:
7a:5e:e8:e8:99:0c:8a:4c:1c:2c:3f:e2:f3:06:0a:
cc:11:b0:c4:57:d4:29:e9:85:6c:85:56:a8:4f:9f:
cd:b1:01:37:c7:69:d8:68:ee:50:f7:8b:03:3e:0a:
8c:ee:2c:7a:87:f6:73:bf:f1:6d:68:c1:5b:70:f9:
ee:23:9e:81:9a:db:d3:93:ce:d3:8b:6d:29:57:55:
1a:9f:76:c8:85:a6:7f:0a:2d:b7:e4:c7:e7:fe:dc:
9d:1d:fd:cc:80:5a:60:a5:29:fb:f7:05:4e:90:35:
1d:95:46:0e:3e:f4:c1:09:f8:8b:6d:79:89:6e:3d:
ee:77:bd:3c:23:8b:da:af:fc:f0:60:95:17:f4:2e:
cd:77:0a:9f:97:2e:89:35:08:64:a4:45:82:fb:b2:
a5:8d:84:5a:16:af:ca:19:fa:69:57:d8:10:17:04:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D0:49:1F:E7:87:80:C5:7F:A6:C9:AE:42:9C:8D:C3:97:0F:32:FE
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wNBJH-eHgMV_psmuQpyNw5cPMv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.163.255
62.72.169.0/24
62.72.177.0/24
62.72.179.0/24
62.72.181.0-62.72.182.255
62.72.185.0/24
62.72.187.0-62.72.189.255
62.72.191.0/24
81.21.3.0/24
81.21.9.0-81.21.15.255
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:08:b2:b9:37:bf:aa:b7:70:a0:b0:10:25:97:40:44:c8:db:
2c:2f:73:37:e5:1e:bb:88:33:df:a6:4d:0c:f9:f9:9e:a9:c8:
50:66:34:da:4b:24:d7:39:66:ca:35:8b:e1:93:0d:99:0b:2f:
12:2d:1a:82:f6:1e:8e:32:8c:91:7d:23:7e:0f:01:de:dd:04:
9b:0a:d2:1e:5d:d9:f4:c6:5b:67:fa:05:ea:43:a4:35:4b:7a:
9e:09:a6:47:87:75:69:49:7e:09:40:f8:51:5e:a0:90:27:40:
2e:64:c8:78:3c:19:c7:4c:24:d5:54:6e:ef:60:58:07:79:90:
c7:dc:47:96:7f:8e:25:7f:d6:bf:9e:d8:a4:fd:24:d1:d6:57:
d9:63:9e:14:5d:e2:9c:bd:2f:fc:2b:3d:99:52:7b:56:c6:df:
2a:ca:92:92:d6:d3:c0:32:cc:00:64:57:14:10:72:f1:bf:95:
aa:f0:79:9c:c8:d5:11:48:74:db:f9:22:f6:db:a1:75:fb:f3:
51:46:5b:24:df:af:0b:5e:19:8b:0f:bb:c9:ef:20:9b:e7:9e:
c2:84:a7:6c:43:46:1e:ab:d6:7c:33:c7:85:cd:88:1f:e9:2f:
8f:9c:53:4a:a2:ed:d2:35:c0:38:76:af:8d:3b:10:91:d7:42:
c0:f0:e5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org