Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7orKx5KyxFG6nVa-DToeZCmijHc.roa
File: 7orKx5KyxFG6nVa-DToeZCmijHc.roa (raw, json)
Hash identifier: iweREtc8HWGFrDiQsu5zG6DZLnFvkTDdGCFCn3xYTtY=
Subject key identifier: EE:8A:CA:C7:92:B2:C4:51:BA:9D:56:BE:0D:3A:1E:64:29:A2:8C:77
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018BC25F73F6EA36D73A365D4DA8B2B0872E
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7orKx5KyxFG6nVa-DToeZCmijHc.roa
Signing time: Sun 12 Nov 2023 07:11:57 +0000
ROA not before: Sun 12 Nov 2023 07:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.164.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.168.0/22 maxlen: 22
62.72.179.0/24 maxlen: 24
62.72.174.0/23 maxlen: 23
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.180.0/23 maxlen: 23
62.72.184.0/22 maxlen: 22
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.4.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 13 Nov 2023 07:58:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c2:5f:73:f6:ea:36:d7:3a:36:5d:4d:a8:b2:b0:87:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 12 07:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee8acac792b2c451ba9d56be0d3a1e6429a28c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:28:6b:01:a4:33:e7:93:08:89:df:a7:b0:
ec:1b:7c:63:fd:5b:5d:6a:5d:1e:cf:5c:f5:5e:f8:
17:e4:3b:e3:6a:ed:63:24:4e:f3:8b:90:2f:ee:02:
2b:a9:50:08:fc:41:08:f3:69:04:7a:c7:06:e8:51:
0c:95:e0:90:9d:f9:4c:bf:34:14:ba:d6:17:f7:1c:
1c:87:a3:d2:93:5d:b6:fe:82:33:01:a4:fa:53:d1:
df:a1:6d:7e:c3:ba:ae:e1:bc:ca:80:31:cb:1b:8d:
31:36:d1:b6:d9:51:32:0b:57:69:76:d7:db:2e:57:
e5:dc:24:7f:b9:fa:06:54:48:76:55:a4:e1:38:eb:
53:9f:1b:3e:de:73:c7:10:af:02:22:46:7b:7c:4e:
b7:69:44:c7:82:5c:ac:34:38:91:32:46:ed:18:1a:
7e:de:9f:34:90:5c:64:cc:2b:1d:fa:4d:43:2c:80:
6e:9b:d0:5b:00:07:53:69:75:64:a4:42:51:4e:ba:
f2:18:f5:e9:f8:f9:f3:6f:13:24:b5:48:76:18:c3:
72:c2:aa:36:68:80:69:5e:5d:a3:14:0f:23:07:f7:
7e:d7:1b:79:e3:bc:43:5c:7f:32:55:ab:6b:e9:da:
db:c2:7a:a1:a1:ad:77:34:45:76:d6:ca:35:2b:7b:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8A:CA:C7:92:B2:C4:51:BA:9D:56:BE:0D:3A:1E:64:29:A2:8C:77
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7orKx5KyxFG6nVa-DToeZCmijHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.171.255
62.72.174.0/23
62.72.179.0-62.72.182.255
62.72.184.0-62.72.189.255
62.72.191.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:19:82:3a:e0:3b:4d:2c:9f:a1:e3:a0:2a:a7:19:1a:7e:7f:
a9:2b:f2:e4:4a:0d:52:dc:48:26:55:91:79:b5:ca:67:10:93:
d5:ac:57:eb:c4:86:03:2e:69:c7:49:61:dc:4d:0c:b8:85:cc:
4a:9c:d0:2d:3a:8d:d3:54:e4:e4:a2:3a:c4:6a:e7:99:fa:8b:
0a:ff:47:27:da:99:ad:7a:41:8f:ab:e6:df:24:8b:f0:d4:a6:
8d:00:8a:e1:d5:61:2a:63:69:f5:ff:ab:fe:28:0e:3d:3f:43:
56:66:4e:c0:6b:c9:92:c6:17:d4:31:ed:fd:5f:45:dc:ad:9f:
2f:cc:d0:0c:b2:4c:f3:84:55:cd:3e:fe:18:af:6f:fb:48:c7:
be:b4:a7:e4:a5:c2:bb:78:fd:b0:f8:03:6f:dd:c7:89:0e:9b:
d7:79:a8:0e:9b:ab:50:89:99:63:31:33:b9:d1:7b:85:61:83:
42:a3:87:df:75:d7:25:1f:9a:34:1b:9c:67:20:df:6c:f9:e7:
ca:1e:27:dc:79:f0:9c:ce:db:26:ef:6d:c1:10:f7:8f:59:7e:
09:44:56:03:24:96:59:ac:e7:43:0a:f3:6d:5a:31:ed:4c:0c:
7c:a5:06:d4:9a:aa:58:20:bf:b0:13:ee:e7:1f:ee:98:85:2c:
ba:a8:95:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org