Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/3yRirklgRayeoLG8sqyiiy_mHz8.roa
File: 3yRirklgRayeoLG8sqyiiy_mHz8.roa (raw, json)
Hash identifier: 7Rgn1jrb/2CV0oddYhjpbggHlzAtN2vZc17Eeg5G51E=
Subject key identifier: DF:24:62:AE:49:60:45:AC:9E:A0:B1:BC:B2:AC:A2:8B:2F:E6:1F:3F
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CCE10855B976B7499CCF0C22F5D59686A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/3yRirklgRayeoLG8sqyiiy_mHz8.roa
Signing time: Wed 03 Jan 2024 06:43:58 +0000
ROA not before: Wed 03 Jan 2024 06:43:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
176.57.58.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.59.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
176.57.63.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 09:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:10:85:5b:97:6b:74:99:cc:f0:c2:2f:5d:59:68:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 3 06:43:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df2462ae496045ac9ea0b1bcb2aca28b2fe61f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:e8:9f:7f:e5:03:65:31:8f:aa:79:4e:99:
92:4d:a3:50:e2:e3:1d:57:f9:6c:39:98:ed:1e:9f:
46:f9:18:77:93:75:8e:7c:92:2e:2a:f9:28:2c:ac:
d9:fd:93:e0:b4:fb:fc:62:fe:9c:1b:ce:13:d9:28:
79:b1:18:ff:2b:53:b5:b2:41:3f:ce:22:df:48:b9:
fe:26:f2:4f:f0:0d:f3:d8:b3:96:cb:ca:6d:32:89:
46:35:07:df:ed:bf:e1:25:af:54:4f:5e:ec:6d:f3:
27:0f:79:bc:d9:cc:ca:42:22:14:81:ab:ce:d9:58:
13:a1:2f:a2:85:90:23:70:4e:e5:4e:59:1f:93:38:
e4:70:7d:13:9a:11:ae:c5:f6:14:dc:24:f1:bb:49:
60:6e:7b:a6:00:6c:2f:64:80:83:69:c7:31:9f:1e:
56:91:78:ae:73:fc:b6:4d:76:d3:8c:b7:18:c6:15:
e7:15:73:0f:32:cd:85:76:ab:14:6e:9a:c8:42:78:
67:ea:d3:19:e8:4c:9f:fa:09:78:29:78:6b:a5:e3:
60:6b:39:10:fc:22:3e:37:02:05:b9:64:cb:bc:9c:
0b:49:f6:71:60:a8:e6:47:cb:ce:d6:92:77:a1:00:
63:ab:8f:11:ec:87:ac:3b:0d:a7:f1:e9:2f:4d:63:
d7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:24:62:AE:49:60:45:AC:9E:A0:B1:BC:B2:AC:A2:8B:2F:E6:1F:3F
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/3yRirklgRayeoLG8sqyiiy_mHz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:9a:9a:bf:c1:af:d4:04:86:9d:0e:0b:42:bb:69:b3:c1:18:
80:38:e9:1c:b3:76:2b:32:f4:20:01:80:19:b2:d7:0b:41:2c:
90:b7:eb:02:a7:50:8c:f7:64:41:2b:8f:3f:4c:f1:d5:7b:0b:
4e:09:49:7e:29:b4:d9:ab:5f:ee:91:a9:dd:17:ea:75:e1:4a:
96:60:66:d8:cb:91:ef:f4:f4:be:68:ce:7b:cd:52:f7:36:5b:
f3:d1:ff:15:5e:09:a4:19:55:a8:b1:a2:76:81:9b:54:3f:ac:
71:ed:77:d7:ad:e6:69:00:bf:bc:9f:47:09:a5:47:8b:e9:42:
b2:49:a8:c6:56:da:ea:7f:f1:91:f9:3c:2c:ee:47:ac:61:98:
d9:2b:a5:8f:08:66:7e:0c:39:e7:85:76:09:d6:d7:d5:17:e3:
ab:60:1a:72:5d:7d:c6:b7:02:1c:04:35:d2:e5:bf:51:ef:d9:
31:fa:a5:5c:93:27:10:52:cc:86:5a:d0:2b:4f:fc:74:07:70:
38:9d:d2:fe:e0:c9:55:49:36:14:3e:cc:a5:09:05:b5:e9:ae:
bd:94:20:ea:59:7c:e5:6e:bc:75:98:46:81:1e:e0:9f:92:0d:
a2:db:6f:05:27:4b:55:60:8d:51:ee:9b:8b:12:7d:eb:03:46:
ae:73:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org