Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/0WDEb4Mu8Toq1rKtu1-ryah-hwA.roa
File: 0WDEb4Mu8Toq1rKtu1-ryah-hwA.roa (raw, json)
Hash identifier: atZiA6Unzlj/mS3VtGurZKl1vEubTPBZpfVEm5LKsmA=
Subject key identifier: D1:60:C4:6F:83:2E:F1:3A:2A:D6:B2:AD:BB:5F:AB:C9:A8:7E:87:00
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018D303FCEC3733877C750BE9DEB034DE21A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/0WDEb4Mu8Toq1rKtu1-ryah-hwA.roa
Signing time: Mon 22 Jan 2024 08:18:24 +0000
ROA not before: Mon 22 Jan 2024 08:18:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.181.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 07:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:3f:ce:c3:73:38:77:c7:50:be:9d:eb:03:4d:e2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 22 08:18:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d160c46f832ef13a2ad6b2adbb5fabc9a87e8700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:14:6a:7d:4a:b7:72:e9:d6:99:fd:0c:fb:
cf:b4:a8:4f:39:ae:75:bf:86:ce:5d:71:e5:de:cd:
13:c7:87:e8:cb:e6:23:67:6a:66:ce:2c:10:2e:da:
f4:57:04:a4:6e:df:6a:cd:3d:4c:dc:b0:c4:5b:7f:
f5:9f:62:c1:9e:e9:de:86:86:7c:aa:63:79:1d:72:
e6:7c:59:a3:aa:c1:ea:52:3a:1f:42:85:ca:5c:cd:
3e:17:9d:73:cb:e4:51:e1:a7:b1:08:6d:03:f2:6e:
87:a3:17:ff:d2:84:41:c0:b8:fe:7a:94:ad:f2:80:
db:9e:07:1f:98:93:ae:6f:ed:ae:0a:c6:f8:a0:24:
58:94:c2:90:b6:91:00:6d:ce:cb:27:36:3f:ff:f1:
76:f1:3e:41:5f:06:38:7a:4b:67:22:62:f6:87:e4:
e1:88:e3:6a:a9:fd:bf:3b:06:dc:89:a5:26:5b:4e:
eb:77:4f:f8:4d:de:01:b1:f5:59:bb:e0:e0:49:ac:
82:5c:87:47:ec:57:6d:7a:27:bf:f3:ba:44:bd:d8:
80:38:be:7b:46:09:a6:73:d8:e1:5a:21:f9:a7:4f:
e0:62:cf:50:ee:81:24:3a:0f:a9:bf:2b:00:59:07:
1a:c5:e6:d6:4c:0c:fb:ec:d1:2c:23:5c:fd:6d:3a:
b0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:60:C4:6F:83:2E:F1:3A:2A:D6:B2:AD:BB:5F:AB:C9:A8:7E:87:00
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/0WDEb4Mu8Toq1rKtu1-ryah-hwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.181.0/24
62.72.188.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
95:01:40:af:0b:79:cf:c6:b9:0f:6f:8e:a9:d8:ab:13:fc:6c:
c1:87:c7:98:fe:df:3b:ec:e0:72:52:cc:f0:f3:7e:af:97:56:
fa:aa:b4:e9:31:59:65:34:9b:4c:75:57:a8:d2:2f:36:03:74:
57:9d:5b:fb:ec:f3:87:00:7f:ec:7f:eb:0b:59:7c:30:c6:3a:
03:7f:bf:ce:d4:a4:49:5c:a1:6a:79:5e:b7:de:bd:4f:9a:f5:
7b:78:06:e0:10:c2:d4:3a:da:27:e2:72:10:a6:4e:f5:e2:36:
c2:80:69:48:33:fb:87:1f:ae:0c:70:b4:73:8e:81:c4:0f:bb:
47:a6:20:97:7f:e8:8a:28:d6:21:e9:16:37:e4:3a:5d:95:e3:
fe:cb:02:b2:6f:54:c5:4b:b2:b3:12:2d:58:47:2a:5c:d1:a6:
f8:9a:8b:1f:a4:11:0c:35:2b:b0:2c:cd:cc:06:d1:60:74:eb:
ae:41:28:cd:11:75:37:0d:8f:ac:a7:1c:3f:91:12:f0:1c:b6:
d3:ef:67:ec:4c:01:c4:fa:6f:86:78:47:3f:5a:87:98:d9:ed:
61:79:68:b3:70:16:24:e5:24:37:bd:26:bd:3c:03:52:82:b3:
42:53:96:4f:d6:68:12:59:c9:ba:0e:f5:e1:2d:4f:25:12:97:
13:bf:f0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org