Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/9Hw6J34lHqgPIJqZUNd1f6yRhbw.roa
File: 9Hw6J34lHqgPIJqZUNd1f6yRhbw.roa (raw, json)
Hash identifier: 0xjX+6rVHShONmwVx7LPGoKogOGeBDpGXiTLEb+wWbQ=
Subject key identifier: F4:7C:3A:27:7E:25:1E:A8:0F:20:9A:99:50:D7:75:7F:AC:91:85:BC
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01888F6C827155E76870E8CFB5E93C69202F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/9Hw6J34lHqgPIJqZUNd1f6yRhbw.roa
Signing time: Tue 06 Jun 2023 06:37:13 +0000
ROA not before: Tue 06 Jun 2023 06:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
81.21.2.0/24 maxlen: 24
81.21.3.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Jun 2023 12:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:6c:82:71:55:e7:68:70:e8:cf:b5:e9:3c:69:20:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 6 06:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f47c3a277e251ea80f209a9950d7757fac9185bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:50:79:43:17:23:56:de:2f:7f:fd:0b:d0:78:
5e:32:38:d2:08:51:52:25:80:11:18:82:dc:f6:52:
de:53:03:8e:03:21:19:fe:a4:a5:42:c1:2f:c8:a2:
46:e7:9a:73:30:ec:b4:d0:10:ac:98:49:1c:8a:7e:
5e:23:ab:e4:5d:4a:ad:e9:9c:ab:74:b4:dc:82:65:
dd:78:ed:ac:5d:d4:1d:41:69:19:1c:06:8d:78:99:
33:75:2e:9a:48:05:e2:6c:b2:f8:57:96:c5:7b:b3:
91:2e:ef:4e:30:0e:18:1e:b4:dd:12:ff:9b:7a:65:
72:04:e8:29:f3:79:c0:15:2f:31:39:ce:dc:6d:53:
65:c4:21:8f:ea:a1:04:34:a5:f0:4b:fd:cc:94:ea:
3e:9b:d6:d2:e3:72:aa:8d:c3:d8:c1:d8:1a:25:97:
de:7a:d9:e2:e0:4e:34:b6:d3:47:77:72:79:12:3a:
5c:ea:5f:b2:ff:49:4d:59:13:76:04:5b:d2:29:15:
81:53:32:52:a6:20:ff:b5:06:e2:56:d5:76:c9:ad:
8b:59:cc:de:85:d4:44:d2:13:c9:d3:2b:6d:ee:d1:
d5:96:b4:ee:ba:8d:f7:33:38:ea:fc:b4:7a:0a:f8:
b2:8a:84:88:33:93:58:30:fa:b2:4c:93:d0:b5:0b:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7C:3A:27:7E:25:1E:A8:0F:20:9A:99:50:D7:75:7F:AC:91:85:BC
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/9Hw6J34lHqgPIJqZUNd1f6yRhbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0/24
62.72.185.0-62.72.187.255
62.72.190.0/23
81.21.2.0/23
81.21.12.0/22
176.57.51.0/24
176.57.62.0/23
Signature Algorithm: sha256WithRSAEncryption
74:c8:00:7d:a3:8c:fc:4e:19:74:2a:c8:81:99:4e:0b:d8:8f:
81:66:b3:05:14:f2:9e:17:38:1c:83:c4:f6:8a:c0:95:37:80:
2c:28:45:1a:d6:e9:6c:4a:ce:30:ed:e2:5e:6e:f4:0f:48:f2:
14:36:0e:dc:4c:99:9d:2b:20:60:23:a5:42:26:6f:f5:7a:d8:
68:92:be:4e:21:af:f3:0a:21:e1:23:68:a8:36:bd:cd:84:55:
86:2c:67:59:8d:38:87:34:6f:14:9b:95:78:d0:68:7b:cc:f5:
93:d9:db:98:f2:5c:ea:06:3c:1f:22:22:ad:01:cf:f8:4f:d1:
20:84:51:da:74:34:3b:cd:86:61:e1:44:72:25:de:be:72:f9:
29:a0:8e:07:18:fe:d8:8a:e4:c5:dd:b8:6c:70:7f:5b:ae:88:
61:0c:85:ba:9f:11:ec:f4:89:15:18:f4:24:6f:8e:94:82:14:
cd:0c:eb:5b:e5:20:b8:f4:df:22:90:ea:85:0e:f5:50:eb:9a:
71:2a:c6:85:3b:11:70:ec:4b:03:b1:22:ac:59:dd:b8:82:6f:
eb:e9:63:e7:84:52:81:b0:ce:ae:55:2b:d7:6d:ca:72:95:6a:
31:19:25:21:0c:bb:eb:6f:0f:02:b3:9e:b8:a4:c6:e9:9f:cd:
f9:7c:38:45
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYiPbIJxVedocOjPtek8aSAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwNjA2MDYzNzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDdjM2EyNzdlMjUxZWE4MGYyMDlhOTk1MGQ3NzU3ZmFjOTE4NWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVB5QxcjVt4vf/0L0HheMjjSCFFS
JYARGILc9lLeUwOOAyEZ/qSlQsEvyKJG55pzMOy00BCsmEkcin5eI6vkXUqt6Zyr
dLTcgmXdeO2sXdQdQWkZHAaNeJkzdS6aSAXibLL4V5bFe7ORLu9OMA4YHrTdEv+b
emVyBOgp83nAFS8xOc7cbVNlxCGP6qEENKXwS/3MlOo+m9bS43KqjcPYwdgaJZfe
etni4E40ttNHd3J5Ejpc6l+y/0lNWRN2BFvSKRWBUzJSpiD/tQbiVtV2ya2LWcze
hdRE0hPJ0ytt7tHVlrTuuo33Mzjq/LR6CviyioSIM5NYMPqyTJPQtQsAswIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFPR8Oid+JR6oDyCamVDXdX+skYW8MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvOUh3NkozNGxIcWdQSUpxWlVOZDFmNnlSaGJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAPkiiMAwD
BAA+SLkDBAI+SLgDBAE+SL4DBAFRFQIDBAJRFQwDBACwOTMDBAGwOT4wDQYJKoZI
hvcNAQELBQADggEBAHTIAH2jjPxOGXQqyIGZTgvYj4FmswUU8p4XOByDxPaKwJU3
gCwoRRrW6WxKzjDt4l5u9A9I8hQ2DtxMmZ0rIGAjpUImb/V62GiSvk4hr/MKIeEj
aKg2vc2EVYYsZ1mNOIc0bxSblXjQaHvM9ZPZ25jyXOoGPB8iIq0Bz/hP0SCEUdp0
NDvNhmHhRHIl3r5y+SmgjgcY/tiK5MXduGxwf1uuiGEMhbqfEez0iRUY9CRvjpSC
FM0M61vlILj03yKQ6oUO9VDrmnEqxoU7EXDsSwOxIqxZ3biCb+vpY+eEUoGwzq5V
K9dtynKVajEZJSEMu+tvDwKznrikxumfzfl8OEU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org