Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1yzHZm2Y_Qf7ebnby6iN4xvPufk.roa
File: 1yzHZm2Y_Qf7ebnby6iN4xvPufk.roa (raw, json)
Hash identifier: H6cKLZ1+waoIXgzF8bmc73sAhqs6yKevsWNwBb9AECc=
Subject key identifier: D7:2C:C7:66:6D:98:FD:07:FB:79:B9:DB:CB:A8:8D:E3:1B:CF:B9:F9
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CF2F300931E75ADB378AEA84A20ED0F14
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1yzHZm2Y_Qf7ebnby6iN4xvPufk.roa
Signing time: Wed 10 Jan 2024 10:37:40 +0000
ROA not before: Wed 10 Jan 2024 10:37:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.164.0/22 maxlen: 22
62.72.189.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.58.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.59.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 06:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:f3:00:93:1e:75:ad:b3:78:ae:a8:4a:20:ed:0f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 10 10:37:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d72cc7666d98fd07fb79b9dbcba88de31bcfb9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9c:5a:6e:21:78:f0:c5:07:bc:f3:19:54:04:
d3:aa:1b:9f:9d:a2:15:72:33:3f:8d:cf:86:92:07:
3e:5e:d1:fa:65:15:4f:15:43:27:22:dd:bd:b6:35:
0b:dc:48:a4:24:79:40:c3:b2:f3:e0:5a:e1:26:f9:
93:49:3a:7e:ae:3b:4d:fb:a0:ed:fe:f2:d3:44:b8:
e1:7f:9f:6e:65:e7:dc:36:62:d9:62:40:4e:5b:06:
d3:99:7d:fe:b3:75:9f:25:b2:b2:74:ad:ba:40:30:
e4:c9:84:54:e2:a8:c7:e4:e8:15:02:2a:05:85:11:
5e:46:c7:3c:a4:20:20:1a:ec:2c:73:6e:44:42:13:
cb:75:cf:23:87:96:fb:27:30:3b:0e:13:6d:35:8d:
43:f0:41:0a:3e:c3:0c:1b:6e:7c:32:3b:1d:f7:ce:
53:5b:a5:aa:be:18:59:51:cf:c0:28:3a:12:cd:f5:
7c:5e:f1:2c:e3:62:9c:a1:a5:28:ff:11:f8:0f:d2:
3e:ef:12:b3:af:9d:f3:74:60:4f:19:dc:bf:6e:be:
ef:fe:76:d4:2d:a2:83:3b:8f:69:64:e4:08:52:1f:
59:78:fa:2f:f5:a6:d2:ce:32:8e:cf:1f:de:54:7e:
ba:43:f5:f0:9a:3f:90:9b:0a:8b:5e:79:41:31:52:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:C7:66:6D:98:FD:07:FB:79:B9:DB:CB:A8:8D:E3:1B:CF:B9:F9
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1yzHZm2Y_Qf7ebnby6iN4xvPufk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.189.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
79:8e:7d:cf:34:22:31:ef:fe:80:fa:9b:7a:a1:66:1f:1b:f7:
9e:d9:c1:2c:fa:2c:9a:60:d1:30:d5:2b:4d:35:af:ac:da:92:
71:47:f8:59:93:2f:38:73:2f:f6:e5:92:99:84:ac:7f:db:92:
90:b6:23:63:0a:10:ba:c6:d2:c4:ad:9f:d9:01:ba:6d:ad:61:
00:5b:4c:07:ee:53:6b:8f:ef:31:56:10:34:66:8f:6b:b4:60:
bb:c2:9c:bf:0a:20:1a:91:c1:e8:a3:80:8c:8d:45:5d:79:2e:
cb:75:f9:0c:2c:b2:be:61:9a:11:77:bc:78:e0:c4:28:e1:05:
ae:31:35:b0:f8:6f:ae:9e:9b:9a:21:38:08:93:42:1b:0d:4b:
2c:99:c0:2d:22:56:8c:00:67:5d:2b:1b:e4:bf:9f:45:5d:48:
eb:c4:f1:fb:3e:e4:5a:fc:9a:3a:ab:02:08:a5:af:ac:09:47:
fe:b4:09:b0:a2:d3:42:0d:ca:36:06:4f:0c:55:41:cb:2e:de:
5f:12:53:e9:33:b7:b5:3d:5a:70:b8:22:49:f2:5e:7d:8b:53:
57:ad:2d:8d:4d:43:fa:4f:06:e9:67:d3:cd:fc:8f:d7:ff:44:
7c:47:eb:4d:b5:10:50:5b:8f:3a:3a:4e:11:41:64:12:47:e8:
c7:15:f1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org