Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1Le88HBsF8rh7i-0xEPdakWHTS8.roa
File: 1Le88HBsF8rh7i-0xEPdakWHTS8.roa (raw, json)
Hash identifier: ciGK+SQfFS8XSPiSIDV2vTxzKAtDWjESF2i2ZW8weGk=
Subject key identifier: D4:B7:BC:F0:70:6C:17:CA:E1:EE:2F:B4:C4:43:DD:6A:45:87:4D:2F
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019016855280476AB6E4E6EA2222444B9608
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1Le88HBsF8rh7i-0xEPdakWHTS8.roa
Signing time: Fri 14 Jun 2024 11:32:34 +0000
ROA not before: Fri 14 Jun 2024 11:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.14.0/23 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 19:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:16:85:52:80:47:6a:b6:e4:e6:ea:22:22:44:4b:96:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 14 11:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4b7bcf0706c17cae1ee2fb4c443dd6a45874d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:04:ce:26:c8:97:37:43:67:dd:06:76:ff:
00:0b:ed:f4:e5:e5:a6:9d:a1:2d:0b:a7:2a:ea:14:
c4:dd:29:c4:54:03:4a:59:57:1f:90:61:75:9b:9b:
33:3c:d7:94:7e:23:94:ad:15:42:b1:46:a9:5e:4e:
b7:b6:84:04:5e:78:e9:6d:19:c7:ef:12:5c:ed:0f:
ad:ce:b9:11:d6:1b:33:47:b0:65:ea:d2:53:c3:d7:
db:bf:06:a6:4c:75:e5:b5:4a:b5:a5:40:76:d1:fd:
5c:b1:18:72:51:48:85:c2:d1:48:1c:74:1f:8c:64:
88:23:3e:6d:8c:e4:b4:cf:d3:11:c9:bf:e2:c3:62:
7d:1e:1d:53:96:28:aa:73:04:be:5a:4a:0d:a8:b4:
89:a6:8b:a6:2b:c1:b6:f5:89:c6:e6:96:6c:39:c8:
3d:5d:b9:fe:74:5f:58:47:77:4a:a1:3d:c5:5c:6b:
3c:11:f6:13:33:f4:c2:59:b5:e4:4b:0a:c3:09:81:
71:70:07:0e:b5:de:89:5e:a1:a7:36:04:5d:86:48:
f3:bc:87:bd:4a:e1:9d:3f:47:a9:98:c3:08:76:63:
ff:ea:c3:46:5a:87:b3:e0:08:7c:41:ef:21:16:5e:
86:e3:d3:c9:c6:fa:10:2c:be:ba:4a:60:72:59:d9:
63:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B7:BC:F0:70:6C:17:CA:E1:EE:2F:B4:C4:43:DD:6A:45:87:4D:2F
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1Le88HBsF8rh7i-0xEPdakWHTS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.189.0/24
81.21.2.0-81.21.15.255
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c0:fb:c0:98:8d:34:57:a9:0a:61:37:64:e2:3e:b0:f4:25:
c1:41:4a:0d:90:7f:9f:20:09:53:62:c0:0c:7a:bf:2b:89:14:
74:01:94:fd:cc:e5:d3:6d:e5:79:2a:dd:ad:65:30:86:f9:e9:
42:c8:00:ca:a8:b4:bc:de:4d:0e:42:6a:13:18:db:bc:a2:9d:
02:d3:9b:3b:8e:58:15:5e:53:a3:2b:52:aa:9f:26:95:48:cb:
37:ee:5b:7b:27:29:4d:5c:a9:63:1c:79:92:d2:f7:f0:65:ae:
06:e6:a9:c7:d8:e2:ab:47:42:f8:e2:1d:1e:34:e4:52:67:4e:
aa:aa:e9:60:2f:e2:a4:e7:82:2f:48:01:7a:e2:3b:fc:67:7c:
0f:0a:d6:bb:a2:99:f6:4f:75:a7:dc:a8:99:9e:30:a3:f1:b7:
09:f1:55:d6:41:e5:9e:72:b3:cd:ba:00:1f:55:5e:82:5a:1c:
f8:d6:37:9e:cd:84:44:ab:39:a7:1c:63:ac:3c:2e:a8:bc:ca:
12:5f:52:53:3f:db:ab:a3:40:6c:eb:55:2c:6a:32:05:29:32:
ab:86:d9:d7:75:6f:2e:e5:78:5a:f2:27:53:20:c2:ab:01:8b:
b6:49:ad:91:e1:d5:91:6b:89:1d:b7:e3:9b:7a:78:24:ed:a9:
11:0b:a6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 20:41:17 2024 by rpki-client on console-fra.rpki-client.org