Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1Up69gBw-txu64jEZ3FRWSiWnyw.roa
File: 1Up69gBw-txu64jEZ3FRWSiWnyw.roa (raw, json)
Hash identifier: tYw626NdLu6VQoCJimmSXBaiSCNKZBF/hWevet1fITc=
Subject key identifier: D5:4A:7A:F6:00:70:FA:DC:6E:EB:88:C4:67:71:51:59:28:96:9F:2C
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018F4752C1489EE40C806430C01E9C5A30C8
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1Up69gBw-txu64jEZ3FRWSiWnyw.roa
Signing time: Sun 05 May 2024 05:55:56 +0000
ROA not before: Sun 05 May 2024 05:55:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.172.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 06:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:47:52:c1:48:9e:e4:0c:80:64:30:c0:1e:9c:5a:30:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 5 05:55:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d54a7af60070fadc6eeb88c46771515928969f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:d1:54:db:59:cb:b3:95:99:84:6a:c8:86:
b9:0f:24:62:b9:07:91:10:55:13:0c:a2:4b:79:20:
b2:16:83:c9:c1:0d:93:d8:84:2f:ab:d8:e2:8d:39:
08:37:aa:8b:74:95:bc:0c:84:e6:e7:1a:f5:d6:53:
a2:03:ab:d1:07:f2:d5:f8:41:98:1b:72:64:f9:21:
e5:84:65:70:2c:4d:23:1c:27:ff:9c:90:04:e4:66:
4f:a7:74:bc:1e:cb:77:8e:a8:9c:96:03:78:87:6a:
74:72:83:4e:c4:1c:cf:33:9f:38:80:8e:2b:a6:62:
97:cf:dc:8e:66:ca:17:9a:a7:2f:22:c4:6a:3c:16:
ef:1a:89:ab:c2:7d:b5:08:4c:c0:93:20:50:85:22:
45:8b:10:aa:dc:6e:56:18:a9:ef:77:51:15:64:f0:
2b:ef:29:e0:0f:2e:49:4a:54:14:1a:71:19:03:6c:
24:57:71:59:00:9c:81:22:56:1b:ec:ab:d4:89:91:
f9:c7:a5:1b:37:37:5f:4e:28:f1:0e:33:76:c3:a4:
c7:8d:84:9f:58:d3:b7:06:4c:7c:49:9a:17:2b:f1:
e0:42:df:72:0c:12:1f:36:2a:fa:b3:f3:cd:d9:65:
02:a2:62:ed:3a:e3:c6:92:7c:01:bd:9f:b8:75:52:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4A:7A:F6:00:70:FA:DC:6E:EB:88:C4:67:71:51:59:28:96:9F:2C
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1Up69gBw-txu64jEZ3FRWSiWnyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.172.0/24
62.72.189.0/24
81.21.2.0-81.21.15.255
176.57.59.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1b:9f:81:eb:dc:04:3f:94:8b:ca:16:b1:00:ff:d5:c2:be:
60:ba:54:93:69:0c:e4:e8:a9:df:a3:87:c0:2b:29:d7:02:bf:
a6:ef:cc:41:58:1f:de:27:dc:48:ba:da:ae:45:02:24:d3:bd:
22:2c:1e:19:c4:83:1d:7b:c8:8f:5d:4b:03:cd:28:02:de:ce:
ab:79:1c:8b:97:8f:a1:f7:84:ca:79:d3:b5:fc:7a:9d:15:a7:
92:3f:00:6a:c7:e7:46:0d:fd:83:3c:66:05:1a:08:5d:b3:70:
a0:53:a9:3d:24:c6:48:20:a7:46:7b:70:20:3a:e2:a3:a0:8c:
ae:63:72:e4:49:b9:ce:31:58:c4:17:86:16:85:20:f3:98:48:
29:38:92:cf:b9:b3:bb:5f:0e:9c:ba:7e:7e:19:97:c7:37:bb:
ca:20:7c:3a:82:9a:05:7a:19:13:83:a0:9e:3a:b6:9a:cd:0d:
fd:70:98:b5:85:25:18:39:4c:b5:46:3e:37:2a:68:df:b7:aa:
ad:ff:e5:96:4c:12:9e:06:9a:51:7c:25:17:57:5c:64:e6:a2:
7a:07:e9:10:80:46:12:60:96:2d:3d:41:78:51:bb:48:46:ca:
9f:eb:15:08:ff:44:11:0a:63:de:99:07:9e:c2:d6:7b:58:3d:
6a:d2:8a:69
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAY9HUsFInuQMgGQwwB6cWjDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwNTA1MDU1NTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTRhN2FmNjAwNzBmYWRjNmVlYjg4YzQ2NzcxNTE1OTI4OTY5ZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bXRVNtZy7OVmYRqyIa5DyRiuQeR
EFUTDKJLeSCyFoPJwQ2T2IQvq9jijTkIN6qLdJW8DITm5xr11lOiA6vRB/LV+EGY
G3Jk+SHlhGVwLE0jHCf/nJAE5GZPp3S8Hst3jqiclgN4h2p0coNOxBzPM584gI4r
pmKXz9yOZsoXmqcvIsRqPBbvGomrwn21CEzAkyBQhSJFixCq3G5WGKnvd1EVZPAr
7yngDy5JSlQUGnEZA2wkV3FZAJyBIlYb7KvUiZH5x6UbNzdfTijxDjN2w6THjYSf
WNO3Bkx8SZoXK/HgQt9yDBIfNir6s/PN2WUComLtOuPGknwBvZ+4dVJJ9wIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFNVKevYAcPrcbuuIxGdxUVkolp8sMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvMVVwNjlnQnctdHh1NjRqRVozRlJXU2lXbnl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBAE+SKID
BAM+SKADBAA+SKwDBAA+SL0wDAMEAVEVAgMEBFEVAAMEALA5OwMEALA5PzANBgkq
hkiG9w0BAQsFAAOCAQEAgRufgevcBD+Ui8oWsQD/1cK+YLpUk2kM5Oip36OHwCsp
1wK/pu/MQVgf3ifcSLrarkUCJNO9IiweGcSDHXvIj11LA80oAt7Oq3kci5ePofeE
ynnTtfx6nRWnkj8AasfnRg39gzxmBRoIXbNwoFOpPSTGSCCnRntwIDrio6CMrmNy
5Em5zjFYxBeGFoUg85hIKTiSz7mzu18OnLp+fhmXxze7yiB8OoKaBXoZE4Ognjq2
ms0N/XCYtYUlGDlMtUY+Nypo37eqrf/llkwSngaaUXwlF1dcZOaiegfpEIBGEmCW
LT1BeFG7SEbKn+sVCP9EEQpj3pkHnsLWe1g9atKKaQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org