Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6eBPMHOrx9SHamUTDQODkUo04YU.roa
File: 6eBPMHOrx9SHamUTDQODkUo04YU.roa (raw, json)
Hash identifier: 0rnKcRECa0x37navayttzpe3U1b4w8nFjnzGoLRz1Tg=
Subject key identifier: E9:E0:4F:30:73:AB:C7:D4:87:6A:65:13:0D:03:83:91:4A:34:E1:85
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019289B1EDADA0778CE81CF85460C9EECE85
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6eBPMHOrx9SHamUTDQODkUo04YU.roa
Signing time: Mon 14 Oct 2024 06:23:12 +0000
ROA not before: Mon 14 Oct 2024 06:23:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.185.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.14.0/23 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:89:b1:ed:ad:a0:77:8c:e8:1c:f8:54:60:c9:ee:ce:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 14 06:23:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9e04f3073abc7d4876a65130d0383914a34e185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:b6:89:64:5b:e3:ce:f9:df:70:d9:48:7f:
fc:98:ac:c7:1d:bb:a1:99:a1:bb:84:83:19:60:78:
7c:2c:c9:ed:c2:24:02:f7:9b:f1:72:d1:da:33:9c:
47:38:44:cb:57:46:09:af:13:3c:e4:ad:29:fe:8e:
74:7a:df:f2:69:75:c3:12:0f:46:ae:54:4f:0e:c6:
1a:9a:ed:aa:31:45:d2:1c:89:fc:30:e5:63:dd:11:
48:35:27:62:84:da:75:a9:14:bd:7f:af:b5:8f:3b:
68:d4:b2:41:24:0d:1e:80:1f:dc:00:3c:75:1d:0a:
45:d9:48:2e:f9:e8:94:7a:e7:d1:1f:a8:1e:de:48:
5e:d2:1e:54:b6:e3:96:be:46:15:ea:1e:1d:7c:16:
ee:19:54:f6:db:08:5d:d4:37:2a:d4:3d:9c:2a:8f:
38:68:fa:1b:a3:95:44:76:a3:66:62:b2:b7:0e:6a:
e1:14:22:f7:c6:73:fb:85:87:4c:57:ad:20:ad:eb:
39:67:fd:ad:95:b6:fd:9b:ee:45:68:17:8c:cf:ba:
82:c6:a1:79:28:88:b9:9e:e4:d6:d0:28:82:4e:cf:
4c:dc:65:c0:4a:ad:3f:91:60:11:3c:df:5f:ef:19:
fa:2e:98:42:61:f3:90:f2:c9:bb:61:22:00:13:de:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E0:4F:30:73:AB:C7:D4:87:6A:65:13:0D:03:83:91:4A:34:E1:85
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6eBPMHOrx9SHamUTDQODkUo04YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.185.0/24
62.72.189.0/24
81.21.2.0-81.21.15.255
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
52:79:1c:cf:fd:52:89:9e:bd:1f:1f:51:1f:81:56:5e:27:64:
dd:0c:11:00:91:b1:32:59:71:08:f4:4d:8f:b7:5b:82:fa:f3:
fe:9f:5e:93:02:20:e1:33:2e:aa:4b:90:63:2c:da:17:0b:35:
c4:8c:87:b3:d4:83:ad:56:80:c3:ae:03:24:34:02:71:b3:40:
fc:97:95:42:0c:ff:cc:9a:b5:0a:a9:6a:45:d3:7d:c8:29:56:
59:e4:19:8f:b6:62:c7:e3:2b:50:74:bd:94:ed:4e:9c:97:1a:
ab:ab:eb:4d:35:e8:b8:8c:14:93:a3:a9:92:c5:3d:78:0a:08:
e4:f8:73:3d:86:e9:6e:42:8a:72:a3:12:b4:bd:29:b1:c0:80:
42:de:88:45:88:20:d4:a8:14:d9:2d:56:7a:f1:63:ca:fe:8d:
88:c4:f9:9d:9b:40:b7:bb:20:7d:25:c7:00:8b:ad:5d:b3:b1:
d2:13:f5:0c:30:72:e7:ca:1a:76:12:d6:e1:22:00:bf:2c:cd:
58:c3:f4:df:50:be:6a:10:b0:95:24:7f:bf:a2:9a:0d:de:98:
14:2f:47:b7:42:ad:ca:e6:76:df:ae:bf:be:bb:ab:be:98:44:
7b:51:e5:09:79:b9:eb:69:03:a1:da:7b:a7:9b:32:ea:e9:17:
f3:7f:d4:d8
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZKJse2toHeM6Bz4VGDJ7s6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQxMDE0MDYyMzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWUwNGYzMDczYWJjN2Q0ODc2YTY1MTMwZDAzODM5MTRhMzRlMTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHS2iWRb487533DZSH/8mKzHHbuh
maG7hIMZYHh8LMntwiQC95vxctHaM5xHOETLV0YJrxM85K0p/o50et/yaXXDEg9G
rlRPDsYamu2qMUXSHIn8MOVj3RFINSdihNp1qRS9f6+1jzto1LJBJA0egB/cADx1
HQpF2Ugu+eiUeufRH6ge3khe0h5UtuOWvkYV6h4dfBbuGVT22whd1Dcq1D2cKo84
aPobo5VEdqNmYrK3DmrhFCL3xnP7hYdMV60gres5Z/2tlbb9m+5FaBeMz7qCxqF5
KIi5nuTW0CiCTs9M3GXASq0/kWARPN9f7xn6LphCYfOQ8sm7YSIAE97l3QIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFOngTzBzq8fUh2plEw0Dg5FKNOGFMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvNmVCUE1IT3J4OVNIYW1VVERRT0RrVW8wNFlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAE+SKID
BAM+SKADBAA+SLkDBAA+SL0wDAMEAVEVAgMEBFEVAAMEALA5PzANBgkqhkiG9w0B
AQsFAAOCAQEAUnkcz/1SiZ69Hx9RH4FWXidk3QwRAJGxMllxCPRNj7dbgvrz/p9e
kwIg4TMuqkuQYyzaFws1xIyHs9SDrVaAw64DJDQCcbNA/JeVQgz/zJq1CqlqRdN9
yClWWeQZj7Zix+MrUHS9lO1OnJcaq6vrTTXouIwUk6OpksU9eAoI5PhzPYbpbkKK
cqMStL0pscCAQt6IRYgg1KgU2S1WevFjyv6NiMT5nZtAt7sgfSXHAIutXbOx0hP1
DDBy58oadhLW4SIAvyzNWMP031C+ahCwlSR/v6KaDd6YFC9Ht0KtyuZ2366/vrur
vphEe1HlCXm562kDodp7p5sy6ukX83/U2A==
-----END CERTIFICATE-----
Generated at Thu Oct 24 16:00:44 2024 by rpki-client on console-ams.rpki-client.org