Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-EioHAkyA9eX3ItEzg96oBz0mp8.roa
File: 1-EioHAkyA9eX3ItEzg96oBz0mp8.roa (raw, json)
Hash identifier: UXaIVzXd7ojaL3iwTZaqprLsfIOQqfSrXqSxA6WXt7k=
Subject key identifier: F8:48:A8:1C:09:32:03:D7:97:DC:8B:44:CE:0F:7A:A0:1C:F4:9A:9F
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0190A17CE1CC7828E28D5BB7D688AB173ECF
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-EioHAkyA9eX3ItEzg96oBz0mp8.roa
Signing time: Thu 11 Jul 2024 11:10:34 +0000
ROA not before: Thu 11 Jul 2024 11:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.14.0/23 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 06:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:7c:e1:cc:78:28:e2:8d:5b:b7:d6:88:ab:17:3e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jul 11 11:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f848a81c093203d797dc8b44ce0f7aa01cf49a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:c6:d5:6e:bc:71:05:fa:4d:22:92:11:6a:
00:69:b1:6a:b4:6b:52:d6:38:6f:c5:a1:79:b0:65:
55:c6:56:cf:d9:31:aa:a7:1b:03:07:8c:f3:c2:5f:
f4:26:34:fa:e8:59:3d:a5:f6:1f:a0:ab:f4:ec:c2:
87:0c:b1:00:d8:9a:38:cf:22:f9:22:fa:46:12:5f:
b3:e8:b8:0d:61:3f:34:49:d1:17:e4:4a:29:81:4f:
32:97:ac:6b:81:48:c0:bb:c4:d7:e2:1a:7e:46:06:
49:f9:ca:e4:e9:2f:f8:46:eb:78:47:14:1d:8b:26:
76:01:b3:20:5b:1d:4c:60:40:38:a2:00:01:7f:05:
35:14:89:98:bd:b7:93:8b:3a:58:71:00:af:b2:85:
d9:ed:17:ba:13:11:05:e1:43:e3:13:0c:bb:2f:f8:
a7:18:59:6c:89:e7:4b:90:43:72:a2:11:fc:eb:00:
b3:b6:3e:36:25:ae:e6:6b:54:bf:3f:33:07:63:27:
ff:fa:e8:9a:3e:bb:82:0c:b5:89:17:6b:d4:af:78:
cb:69:07:7f:25:19:6b:31:dc:79:46:da:1a:93:87:
aa:6d:0e:76:63:a4:f3:78:01:20:65:35:de:eb:a1:
b6:62:f3:d5:96:d6:c1:7d:bf:d8:36:29:b7:11:4e:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:48:A8:1C:09:32:03:D7:97:DC:8B:44:CE:0F:7A:A0:1C:F4:9A:9F
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-EioHAkyA9eX3ItEzg96oBz0mp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.189.0/24
81.21.2.0-81.21.15.255
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9a:1a:f1:66:2d:bc:68:dd:0d:c8:67:12:c5:51:84:6a:86:
68:55:fd:93:6b:16:cf:cd:ba:f0:3b:25:c0:98:8e:a1:60:4d:
e4:6b:c2:18:ec:89:6d:5c:23:49:da:23:b5:c0:ee:87:ff:c1:
79:b6:e8:8d:5e:22:8d:c1:1c:73:9d:07:bb:2d:ef:97:80:d8:
14:d1:f2:d1:c1:ba:7b:8b:26:e7:65:73:6e:94:89:cf:45:0d:
f1:78:a5:92:73:e8:a7:0d:a2:a0:88:db:d0:5c:e2:3d:5c:a2:
d4:9e:6b:0b:44:7b:0a:49:ca:9f:25:69:74:32:1d:e3:39:ee:
1a:12:d1:40:e9:ff:04:2e:26:59:58:83:bb:c6:3d:12:ed:17:
25:3e:75:d8:96:d4:e2:c3:b6:5f:06:9a:3e:9e:fc:74:ad:a9:
df:83:2b:2a:c4:51:6e:5f:eb:6b:c1:b1:18:cd:33:2f:9c:f1:
3a:f3:8a:ea:e8:1e:d5:55:07:d6:d0:01:72:ea:2f:df:ca:41:
c1:03:65:74:58:57:93:5e:0f:b0:db:cb:cc:89:4e:d4:15:02:
0b:a4:06:74:ff:7c:91:f6:00:26:3d:11:5d:94:02:98:e0:7a:
65:f7:d9:20:a1:a6:fb:d2:12:1d:c1:3a:da:a4:61:3c:22:46:
9d:cd:93:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 10:03:40 2024 by rpki-client on console-ams.rpki-client.org