Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/z3B8wtNSNGz50xJvIHYurtD57-I.roa
File: z3B8wtNSNGz50xJvIHYurtD57-I.roa (raw, json)
Hash identifier: pMli9jm0l2fl468ibZajNUQ4wOq6g5eno3rSaQ/6tLQ=
Subject key identifier: CF:70:7C:C2:D3:52:34:6C:F9:D3:12:6F:20:76:2E:AE:D0:F9:EF:E2
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0186BA9F81146310C93379015BBD9C89AABD
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/z3B8wtNSNGz50xJvIHYurtD57-I.roa
Signing time: Tue 07 Mar 2023 05:51:00 +0000
ROA not before: Tue 07 Mar 2023 05:51:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 62.72.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 06:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:9f:81:14:63:10:c9:33:79:01:5b:bd:9c:89:aa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 7 05:51:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf707cc2d352346cf9d3126f20762eaed0f9efe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:44:8f:a8:0d:26:8f:c2:72:62:e3:e3:05:
15:eb:74:c8:10:f5:14:2e:85:67:56:a5:04:a2:f0:
01:bb:61:c9:eb:72:0b:2c:69:4a:ca:3c:2c:a6:94:
47:b7:55:bb:ee:fc:9a:b1:4b:b5:ad:ac:49:4a:d0:
a2:86:b7:c3:ea:b4:ac:db:a1:ef:93:13:e6:68:91:
c0:60:94:b2:51:a4:37:dc:cb:4e:5d:c6:80:09:5b:
06:c5:4c:32:6b:d2:73:56:28:89:38:18:bc:f3:be:
b0:53:37:60:4f:3f:9b:f6:77:00:1f:82:2f:e5:63:
21:da:63:13:65:bc:16:50:ef:20:9c:63:f2:c4:8c:
32:6c:f9:26:d1:1f:b3:7e:28:67:41:9d:8f:54:f6:
d9:6a:84:4b:8c:9b:fa:01:a3:7c:a5:7d:9a:b9:03:
d2:86:b3:84:e2:7b:81:4c:13:5d:c9:fd:84:36:07:
15:1c:44:99:9e:f1:c4:85:cf:42:1f:09:fb:aa:d3:
91:63:11:96:ee:24:f7:62:31:56:c7:ef:e4:2f:32:
2e:38:59:13:0a:a9:6b:06:7b:a0:77:e5:f6:66:44:
e4:56:b8:1b:b4:36:2d:c0:82:27:c3:43:3d:d0:f3:
72:f2:95:7e:77:48:d0:20:3e:34:74:db:ec:6e:26:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:70:7C:C2:D3:52:34:6C:F9:D3:12:6F:20:76:2E:AE:D0:F9:EF:E2
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/z3B8wtNSNGz50xJvIHYurtD57-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.170.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:c1:af:3d:7b:21:44:b4:0b:9c:f6:5f:34:15:e4:b8:2d:5d:
97:bb:6a:bf:c6:55:6e:d0:21:b6:96:7f:ad:52:fb:0c:14:b4:
53:20:d6:c3:a7:ee:1f:2e:5d:3f:86:ed:d1:df:b6:08:9b:51:
2c:fa:b5:a9:ba:61:5a:ca:11:a4:53:68:e8:a8:52:80:23:0c:
6c:d0:f0:47:22:e5:0b:da:a2:69:4a:2b:62:0d:fc:16:9e:4e:
d8:e4:07:99:f3:24:74:7b:bc:e8:24:71:38:3b:20:66:2f:21:
e3:4e:8f:d1:8e:e5:6f:01:1f:a9:87:31:0d:48:b7:b7:f8:17:
94:fd:36:8a:67:a3:da:ff:b8:c2:d4:a9:43:34:18:87:90:6f:
3d:aa:8a:d7:08:78:d6:f4:37:be:54:b6:f6:95:a6:7b:83:cd:
45:54:dc:17:89:2b:04:84:4e:87:7d:5d:81:cc:97:db:8a:2e:
dc:5d:c6:be:96:13:b8:36:14:57:1b:b9:0b:74:c4:a0:7f:3b:
db:49:6a:85:9e:ff:c5:b0:08:61:8f:51:0a:19:af:be:bc:52:
c1:d5:8c:e2:db:c8:20:21:25:2f:db:5b:9c:f9:41:3e:ea:40:
24:ae:59:af:2e:22:0e:f3:f0:37:5b:75:1b:6e:4d:63:e7:da:
62:56:7f:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYa6n4EUYxDJM3kBW72ciaq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwMzA3MDU1MTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjcwN2NjMmQzNTIzNDZjZjlkMzEyNmYyMDc2MmVhZWQwZjllZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYFEj6gNJo/CcmLj4wUV63TIEPUU
LoVnVqUEovABu2HJ63ILLGlKyjwsppRHt1W77vyasUu1raxJStCihrfD6rSs26Hv
kxPmaJHAYJSyUaQ33MtOXcaACVsGxUwya9JzViiJOBi8876wUzdgTz+b9ncAH4Iv
5WMh2mMTZbwWUO8gnGPyxIwybPkm0R+zfihnQZ2PVPbZaoRLjJv6AaN8pX2auQPS
hrOE4nuBTBNdyf2ENgcVHESZnvHEhc9CHwn7qtORYxGW7iT3YjFWx+/kLzIuOFkT
CqlrBnugd+X2ZkTkVrgbtDYtwIInw0M90PNy8pV+d0jQID40dNvsbiagsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM9wfMLTUjRs+dMSbyB2Lq7Q+e/iMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvejNCOHd0TlNOR3o1MHhKdklIWXVydEQ1Ny1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkiqMA0G
CSqGSIb3DQEBCwUAA4IBAQDIwa89eyFEtAuc9l80FeS4LV2Xu2q/xlVu0CG2ln+t
UvsMFLRTINbDp+4fLl0/hu3R37YIm1Es+rWpumFayhGkU2joqFKAIwxs0PBHIuUL
2qJpSitiDfwWnk7Y5AeZ8yR0e7zoJHE4OyBmLyHjTo/RjuVvAR+phzENSLe3+BeU
/TaKZ6Pa/7jC1KlDNBiHkG89qorXCHjW9De+VLb2laZ7g81FVNwXiSsEhE6HfV2B
zJfbii7cXca+lhO4NhRXG7kLdMSgfzvbSWqFnv/FsAhhj1EKGa++vFLB1Yzi28gg
ISUv21uc+UE+6kAkrlmvLiIO8/A3W3Ubbk1j59piVn/b
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org