Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/F5EkRsLL2rok0rOJcORQ1DuGyCc.roa
File: F5EkRsLL2rok0rOJcORQ1DuGyCc.roa (raw, json)
Hash identifier: y/PI7z/Y3xe1dh3VrzPxkHVrSR6kmkA27nv+KbyvDj4=
Subject key identifier: 17:91:24:46:C2:CB:DA:BA:24:D2:B3:89:70:E4:50:D4:3B:86:C8:27
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018AF437CBB53D2F4D0DD63FB2547A4A8797
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/F5EkRsLL2rok0rOJcORQ1DuGyCc.roa
Signing time: Tue 03 Oct 2023 06:26:51 +0000
ROA not before: Tue 03 Oct 2023 06:26:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/22 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.168.0/22 maxlen: 22
62.72.170.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.174.0/23 maxlen: 23
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.180.0/23 maxlen: 23
62.72.180.0/24 maxlen: 24
62.72.184.0/22 maxlen: 22
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.4.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 04 Oct 2023 07:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:37:cb:b5:3d:2f:4d:0d:d6:3f:b2:54:7a:4a:87:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 3 06:26:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17912446c2cbdaba24d2b38970e450d43b86c827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b1:a4:df:00:32:0e:e7:a0:0e:bb:d7:52:2b:
78:26:d7:16:2f:ec:c0:24:64:b6:02:dd:44:0d:a1:
43:50:f0:1d:69:a3:d8:d8:55:78:f6:e6:35:b0:a8:
9d:9b:49:ed:c3:28:7c:b2:68:36:63:f4:11:c6:00:
73:80:37:32:e1:d5:53:90:85:f9:c3:ea:89:ed:37:
bf:28:28:d5:f2:36:b8:3c:ea:1a:c9:28:11:76:6c:
15:ec:ce:05:33:59:a7:de:d5:dd:b3:28:1a:db:2a:
9e:8a:19:d2:b0:84:00:bd:99:c7:25:cc:23:9f:e7:
36:83:ee:3b:5e:6e:f3:68:c3:76:21:48:0a:38:33:
61:3c:22:26:84:7e:bf:f2:37:2b:78:4d:a2:c4:a1:
1b:40:76:17:df:ba:33:cd:ea:54:01:f4:4e:84:b0:
c0:4a:e5:3c:90:34:15:3a:4e:14:fa:bd:80:d7:7e:
19:0a:87:e9:42:9b:cc:53:93:38:3b:a1:a6:b5:1b:
09:c0:e2:76:92:d6:70:82:b9:47:6c:19:b5:0e:03:
94:47:ec:3b:c6:59:ee:03:c9:a8:d3:04:fd:64:cd:
e1:5e:10:9a:9d:96:35:21:db:5e:d6:b0:1d:ae:00:
e5:56:0c:ec:e6:c6:17:e3:c8:0a:d5:89:77:2d:b6:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:91:24:46:C2:CB:DA:BA:24:D2:B3:89:70:E4:50:D4:3B:86:C8:27
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/F5EkRsLL2rok0rOJcORQ1DuGyCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.165.255
62.72.168.0/22
62.72.173.0-62.72.175.255
62.72.177.0/24
62.72.179.0-62.72.182.255
62.72.184.0-62.72.189.255
62.72.191.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.58.0/23
176.57.62.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:4d:32:a6:a2:6c:9e:8c:49:a7:c6:2a:dd:52:9f:18:af:84:
92:03:e3:81:af:05:1b:cb:d4:48:f3:b0:68:89:be:c4:f9:a9:
b4:5e:e8:a7:51:46:3e:62:91:27:de:63:be:43:09:35:2d:ec:
e8:a2:f1:4b:c6:62:ee:ff:32:6b:e9:5c:38:3f:06:c8:83:ad:
a7:14:49:6b:b9:e1:ed:47:24:a4:b2:4e:2c:01:68:cf:88:8d:
6a:04:9c:a6:d1:8b:64:42:0a:2d:47:95:b9:37:f0:f8:44:1b:
97:02:56:c0:00:d4:82:08:54:79:3e:0c:4c:c1:05:ea:6c:05:
d2:e4:c3:7a:85:38:a2:7c:03:01:ce:15:f4:cf:f8:d4:08:cb:
19:a9:7d:3f:a5:c3:5e:2c:c2:bc:ce:0c:31:02:ce:0a:cd:5d:
a5:c4:a5:38:11:b0:ae:34:00:3f:cb:8b:dd:ff:90:e1:b7:dd:
8a:43:ee:db:b4:b6:f9:94:12:11:f1:4e:50:2d:50:14:f9:90:
df:fd:fe:69:f3:70:bd:ef:36:f6:06:dd:45:7a:4c:42:5b:41:
2a:b7:82:60:2a:5e:f6:bd:21:4a:26:ed:e3:e4:36:46:1a:84:
d9:94:a8:f3:4e:4d:73:bd:21:b8:dc:fd:ba:9e:5f:18:22:0c:
82:23:8b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org