Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6GGQ7FfuIfGZqXQ6F603S3nWQ0w.roa
File: 6GGQ7FfuIfGZqXQ6F603S3nWQ0w.roa (raw, json)
Hash identifier: EzsXcm8XGS4gW9m1bv6z8d2v88tfap+06hV2MfF7Fjc=
Subject key identifier: E8:61:90:EC:57:EE:21:F1:99:A9:74:3A:17:AD:37:4B:79:D6:43:4C
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018D7883BE5407D205C98A0EC44A9DDFB3F5
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6GGQ7FfuIfGZqXQ6F603S3nWQ0w.roa
Signing time: Mon 05 Feb 2024 09:05:16 +0000
ROA not before: Mon 05 Feb 2024 09:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 11:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:83:be:54:07:d2:05:c9:8a:0e:c4:4a:9d:df:b3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 5 09:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e86190ec57ee21f199a9743a17ad374b79d6434c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:d4:ca:1c:de:8d:41:38:7c:0f:84:19:99:
1c:f4:fa:d6:aa:0d:5b:4c:21:14:98:d4:34:ee:3a:
ba:4c:9e:3a:af:34:c3:06:52:a3:69:94:75:76:e5:
ea:c5:39:d5:ba:5f:c6:08:42:aa:05:02:df:79:fe:
2f:08:23:b6:cc:54:ac:19:ee:81:0e:02:1c:1d:d4:
f6:30:5d:78:ae:5f:18:44:b5:44:43:2c:34:12:f0:
cb:c3:8e:01:c7:06:d3:ab:f4:b0:70:ef:d4:1d:1f:
63:23:24:b2:a6:77:29:c3:14:f1:a9:81:aa:a2:3a:
88:00:cb:e0:18:43:2b:d5:6d:60:61:8e:03:91:eb:
20:cc:bc:da:36:f8:9b:51:43:76:b4:ac:20:58:6c:
f9:5f:f9:1e:ac:0b:cb:7a:14:e7:c6:64:b3:3a:09:
b8:97:c7:1d:0a:f6:40:1a:c0:df:55:d9:6d:ce:45:
d2:e0:09:9e:62:3c:64:b1:d5:c4:24:4c:66:f9:a7:
96:db:ec:f5:d2:00:25:cc:a5:c0:b0:8f:ef:50:c0:
7b:af:55:a4:bd:b0:ca:5b:e5:dc:0d:23:39:d1:d7:
67:14:18:db:f8:25:e4:93:80:3b:50:00:5b:86:1c:
9a:e9:21:50:e5:dc:c2:81:68:74:60:e8:4e:e8:a4:
69:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:61:90:EC:57:EE:21:F1:99:A9:74:3A:17:AD:37:4B:79:D6:43:4C
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6GGQ7FfuIfGZqXQ6F603S3nWQ0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ae:de:6b:66:02:8b:a4:76:da:cd:93:2c:e2:43:38:c4:c0:
5d:de:4e:d0:ff:30:81:54:34:c9:05:ee:ba:87:7d:9a:35:1e:
6d:dc:06:a3:9e:50:72:8c:d3:ac:02:ee:56:0f:75:68:b8:ec:
82:df:a8:36:a0:84:c1:ba:b0:4e:9b:bc:c4:4e:0c:be:95:3a:
25:06:04:c0:f0:9d:55:bb:7a:bd:05:1f:39:30:bf:09:2f:4b:
0f:ec:22:61:a3:86:cd:8a:18:66:fa:d3:06:e3:6a:1e:6e:40:
f7:d6:0a:90:fb:7a:7f:e2:36:25:b4:46:77:41:bc:2a:a8:fe:
49:d7:89:de:d2:9c:33:38:63:27:ca:39:92:08:79:99:4f:45:
2f:1a:ac:99:bf:ad:06:68:19:47:b4:d9:42:7e:be:ed:79:a5:
78:fa:90:a3:ac:09:a1:b2:26:79:19:fd:48:0b:32:05:93:78:
36:6b:40:77:90:9a:1c:ba:74:52:12:9b:3e:56:80:f3:b1:db:
0d:ff:be:59:ab:c2:81:45:43:d7:99:87:3b:f4:b1:e7:ba:3d:
b9:1e:3d:8a:68:b9:b3:18:fe:ac:18:09:84:d3:cb:42:a3:d0:
ba:b1:e4:dc:f4:24:ef:a5:c1:b8:1a:cc:89:bd:a0:fe:31:76:
92:d1:d9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org