Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-xBq8k42A2XSTVyUNpaXoG_Ms6Y.roa
File: 1-xBq8k42A2XSTVyUNpaXoG_Ms6Y.roa (raw, json)
Hash identifier: KpeMH+hfk3PbnCSH2vjUdCGCalJwAIWOAeWqv4SfDXw=
Subject key identifier: FB:10:6A:F2:4E:36:03:65:D2:4D:5C:94:36:96:97:A0:6F:CC:B3:A6
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018A264572F2C988C19B27525AB2D9EBAEF6
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-xBq8k42A2XSTVyUNpaXoG_Ms6Y.roa
Signing time: Thu 24 Aug 2023 06:40:00 +0000
ROA not before: Thu 24 Aug 2023 06:40:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.1.0/24 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 06:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:26:45:72:f2:c9:88:c1:9b:27:52:5a:b2:d9:eb:ae:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 24 06:40:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb106af24e360365d24d5c94369697a06fccb3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:6f:b9:2e:b8:e2:ab:61:61:ec:98:54:14:
19:9b:fd:ac:91:90:f8:43:94:8f:2c:ca:a8:16:59:
9f:19:b8:dd:c3:a0:ea:a4:e4:f0:c2:71:cf:85:30:
5b:0c:f0:5f:7d:b5:0d:cd:7f:62:1e:1c:1e:59:b3:
63:50:3a:bf:61:4f:aa:90:ce:09:4f:59:4b:a7:9a:
ef:07:4b:85:70:08:66:80:6f:96:99:49:1c:62:bc:
0c:4c:7c:a8:f9:90:24:36:ff:0d:20:54:fe:5e:4c:
e7:29:5d:8f:38:43:0b:78:e2:80:35:2e:43:5c:a4:
11:32:5e:de:33:4c:73:92:b7:57:0f:11:f1:90:98:
6e:07:17:12:11:59:0f:5c:b2:24:d2:6d:ce:21:f6:
f8:46:99:9f:80:6e:2b:3d:f2:a3:6b:36:b4:88:04:
ae:08:3d:7b:91:d8:59:dd:6d:9d:95:e4:c1:f3:1a:
ee:ac:53:c4:5d:c9:73:77:94:a9:4c:52:84:14:01:
95:2b:95:33:c5:73:a1:b5:37:15:ea:d9:bb:73:a8:
4e:c8:c6:7f:c3:d3:5b:bb:3d:a9:ca:2d:9a:d2:0b:
a0:12:e8:40:d4:69:3a:2a:ce:48:af:dd:68:7f:a1:
51:8e:5b:ba:65:87:82:99:e9:1a:f2:93:0b:19:17:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:10:6A:F2:4E:36:03:65:D2:4D:5C:94:36:96:97:A0:6F:CC:B3:A6
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-xBq8k42A2XSTVyUNpaXoG_Ms6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.163.255
62.72.165.0/24
62.72.169.0-62.72.170.255
62.72.173.0-62.72.175.255
62.72.177.0/24
62.72.179.0/24
62.72.181.0-62.72.182.255
62.72.185.0-62.72.189.255
62.72.191.0/24
81.21.1.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.62.0/23
Signature Algorithm: sha256WithRSAEncryption
42:b1:73:72:5c:3f:e2:2f:1a:df:19:d2:5e:f3:a1:f3:2e:b8:
af:8f:61:6e:25:06:9c:01:b3:a3:43:e8:1e:5e:b0:15:73:2f:
34:2b:b2:44:cb:07:03:30:71:d1:77:08:e5:c0:71:90:91:21:
48:d1:78:62:c0:b6:3b:bc:e2:bc:0a:85:33:12:90:60:46:02:
b0:47:66:63:61:b9:1f:ee:d1:e7:2a:c9:f3:53:87:d4:fa:5f:
ac:5c:5b:05:37:8a:f5:da:41:f8:53:a6:41:0d:62:18:84:15:
0e:01:ee:f7:e4:a0:60:c7:9b:99:0a:77:8a:29:04:69:f0:cc:
92:7d:57:ee:93:70:20:dc:24:0e:d4:5d:8b:a7:71:78:c1:2f:
24:39:05:a8:a1:07:c2:4e:69:32:5b:99:84:26:b9:f0:df:f4:
33:89:ff:70:35:c2:21:e5:6d:e5:7a:e4:2b:ef:5d:27:33:b5:
42:82:1d:b1:fd:10:d8:3f:44:56:e5:9e:d4:1a:8a:0b:b5:5c:
67:8f:ad:69:46:9b:b5:c5:f2:35:b3:e3:7f:d2:d9:3f:90:07:
c3:53:91:f5:d7:81:26:9d:6b:c1:fd:8a:16:01:3a:75:af:c3:
e5:f6:e1:86:70:96:12:e1:57:04:34:82:22:6c:ce:bd:19:14:
71:49:6c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org