Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/4I8wftyXzhFDZJUZZeZeNmM_9Uk.roa
File: 4I8wftyXzhFDZJUZZeZeNmM_9Uk.roa (raw, json)
Hash identifier: hfqzb6vvlhbPDr4tncEL/4RgPSKif/DNwir9Lcs2df4=
Subject key identifier: E0:8F:30:7E:DC:97:CE:11:43:64:95:19:65:E6:5E:36:63:3F:F5:49
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018DA6F6B2E91C2F738F321A48D4EE9DB1FD
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/4I8wftyXzhFDZJUZZeZeNmM_9Uk.roa
Signing time: Wed 14 Feb 2024 09:33:21 +0000
ROA not before: Wed 14 Feb 2024 09:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.168.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.52.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Feb 2024 09:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:f6:b2:e9:1c:2f:73:8f:32:1a:48:d4:ee:9d:b1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 14 09:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e08f307edc97ce114364951965e65e36633ff549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:9e:48:8c:ef:01:c9:d2:df:c4:99:a4:59:
52:39:f7:be:e8:21:ce:7e:fb:6e:5b:2b:12:ee:6b:
6e:34:3d:d0:1d:e4:1f:ee:2b:4d:5f:0c:cf:4d:9c:
c6:8b:f3:ba:6e:50:11:91:25:24:0b:86:5b:b4:1a:
f8:3a:6c:5e:c8:60:c3:a3:c5:d6:77:0a:eb:9e:7d:
bf:f7:18:d9:6f:2d:96:cf:05:2d:1f:91:a8:fa:32:
76:92:03:8e:07:68:3b:af:fd:ed:c2:5c:d7:04:1f:
05:34:dd:91:c0:c5:ac:fa:04:8f:ee:ae:68:88:61:
40:47:e0:a3:24:4a:d5:af:ae:ed:47:f5:9f:be:2c:
c0:36:a8:a6:44:b4:ed:a4:a0:70:17:de:c2:87:af:
d2:2b:a1:08:0c:cd:4f:de:ac:42:fe:13:72:e3:b6:
2d:73:5b:a4:40:e3:17:1b:58:74:3a:fb:da:a5:5d:
c6:7e:7d:1c:d1:f2:b1:5f:e6:08:c5:1c:43:14:cd:
7a:ce:11:c6:cd:ae:e2:f2:3c:7f:79:77:53:0b:a2:
e1:31:8d:fb:f9:91:78:e8:61:ca:0d:d9:6c:fd:dc:
29:b7:49:e2:59:27:0d:3b:3d:5a:6a:9e:13:a3:de:
cb:80:75:3e:37:bc:9c:13:27:dc:5d:66:a4:68:55:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8F:30:7E:DC:97:CE:11:43:64:95:19:65:E6:5E:36:63:3F:F5:49
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/4I8wftyXzhFDZJUZZeZeNmM_9Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.189.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.52.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f5:4a:14:7f:6f:94:0f:d8:69:bb:9e:b4:4b:a6:ce:f4:4e:
fe:3d:89:a8:f5:2c:4e:52:3f:e2:ca:a7:43:bc:df:f1:6c:d6:
2d:24:34:03:08:58:6f:3b:40:01:2a:32:93:fd:8d:f3:e0:ae:
77:e8:3f:ce:af:09:d2:b5:9f:b2:7e:c8:10:42:79:da:66:98:
36:72:d1:1f:9e:a8:d8:62:96:f3:86:ec:6b:92:aa:dc:98:5a:
07:67:dd:01:2a:8c:a5:a4:e1:4a:92:7b:0f:61:17:82:75:90:
3e:63:e9:61:a8:a2:75:12:be:3e:5a:41:5e:dc:0a:16:da:31:
3d:75:7d:2a:5f:89:d5:b8:34:3b:aa:54:b7:ee:4d:41:05:42:
20:28:ac:8f:8a:10:b8:89:af:10:c4:71:b7:89:ba:36:fd:03:
02:a2:50:31:a1:5d:95:24:89:c3:dc:64:2c:b2:3d:5d:96:db:
0e:af:eb:e8:52:90:c6:7b:a5:cf:63:37:c4:2c:82:39:dc:34:
b9:f6:44:07:19:68:f3:95:39:7c:4e:21:2f:c4:49:5e:80:8f:
34:d2:7f:11:4e:f7:00:a8:2f:ed:b0:d0:f6:c0:81:a5:3e:25:
3b:53:90:ae:95:4d:03:a6:b1:d6:7e:79:e0:c6:23:75:5c:df:
f6:f8:c7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org