Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FLTJO0271-bbFJ2ZHArfbHG4e-A.roa
File: FLTJO0271-bbFJ2ZHArfbHG4e-A.roa (raw, json)
Hash identifier: 1xUyOvzOsYcV+ZBHZhWtaqAIdDAdd/rPMaOSDTER+ok=
Subject key identifier: 14:B4:C9:3B:4D:BB:D7:E6:DB:14:9D:99:1C:0A:DF:6C:71:B8:7B:E0
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0189E646FF473BB6A301838E09A7DAA9694E
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FLTJO0271-bbFJ2ZHArfbHG4e-A.roa
Signing time: Fri 11 Aug 2023 20:25:59 +0000
ROA not before: Fri 11 Aug 2023 20:25:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.1.0/24 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Aug 2023 10:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e6:46:ff:47:3b:b6:a3:01:83:8e:09:a7:da:a9:69:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 11 20:25:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14b4c93b4dbbd7e6db149d991c0adf6c71b87be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:5f:a5:22:64:e3:e2:23:30:01:c2:6b:ef:
59:1d:3c:e8:e0:fa:ce:31:bc:fd:a0:bb:ab:35:d1:
6e:23:d7:41:b9:32:56:a8:3b:62:46:63:23:1b:58:
14:be:20:a1:d3:bc:3e:a9:bc:ec:a8:c0:15:7e:f6:
b7:98:5f:0a:a9:3a:73:49:04:82:7f:20:c2:a0:e3:
63:bf:3d:5e:06:58:9a:05:d4:75:ea:f9:6d:69:e8:
5a:55:97:3a:6f:6a:8a:9c:db:6d:24:db:5c:67:77:
eb:95:7a:d0:b3:a6:67:67:bc:82:15:ff:18:a7:a1:
5d:f9:9a:f8:01:4b:e1:f7:30:f2:dd:84:35:9a:96:
31:be:01:15:67:9a:04:48:5d:73:ba:5f:a7:7f:db:
38:7f:9d:e4:69:1a:c1:ed:c2:4a:f8:2d:3c:05:01:
b1:fc:1f:11:58:f7:f0:39:76:7c:f8:ec:c9:4b:94:
97:9c:2d:3b:1f:87:9b:4d:0c:11:80:d0:41:37:3f:
86:30:06:03:1b:5d:e8:3a:8a:89:79:ea:42:96:9d:
01:1c:c9:90:bd:2f:41:69:22:ae:e2:55:28:53:2e:
42:a7:0e:3b:b0:8e:32:58:2a:bc:ee:05:00:70:a0:
4d:29:c3:c7:29:f2:df:25:e5:d6:52:92:10:84:47:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B4:C9:3B:4D:BB:D7:E6:DB:14:9D:99:1C:0A:DF:6C:71:B8:7B:E0
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FLTJO0271-bbFJ2ZHArfbHG4e-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.163.255
62.72.165.0/24
62.72.169.0-62.72.170.255
62.72.175.0/24
62.72.177.0/24
62.72.179.0/24
62.72.181.0-62.72.182.255
62.72.185.0/24
62.72.187.0-62.72.189.255
62.72.191.0/24
81.21.1.0-81.21.3.255
81.21.8.0/24
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.62.0/23
Signature Algorithm: sha256WithRSAEncryption
87:a3:33:b6:32:4e:10:e1:c8:7d:c2:2d:16:6d:bd:7c:38:20:
a1:be:2a:16:ac:8d:09:d9:be:37:ff:4c:8f:b8:43:6f:e4:85:
1c:a7:6c:03:59:fb:37:4c:38:be:59:70:52:5d:29:7a:8a:9a:
5c:a8:c4:63:ca:7a:5a:9e:7e:38:b7:02:93:bb:e9:68:4b:45:
a3:b8:c8:65:43:22:f1:97:b7:d0:93:56:32:0d:9c:9a:20:dd:
6e:26:53:1a:24:69:f6:ae:3a:d2:24:51:5e:4e:dd:66:b9:fb:
47:6f:98:63:65:82:ad:c3:e5:61:92:7d:d0:49:d4:7d:c9:9f:
b4:d8:7b:1c:3c:96:6e:13:39:c5:7b:91:b0:de:29:76:4b:2d:
ba:86:21:6f:6f:61:cf:c0:c6:b5:13:5a:36:aa:93:dd:0d:37:
51:ea:bd:67:3b:cc:8b:29:36:3b:75:20:87:bb:d2:e6:8f:79:
f3:48:6b:59:6f:c9:51:90:fe:ac:2f:db:74:4f:d5:e3:a6:7e:
40:ff:4c:ce:44:43:07:a8:5e:13:ee:17:28:ac:0c:1c:83:75:
ab:b9:67:f2:c1:fb:a5:1f:01:3b:28:e2:ef:ec:34:94:97:91:
4d:4c:89:8f:5f:c3:9e:10:e9:80:d2:fc:1c:0e:6b:8e:fc:87:
42:4a:82:39
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAYnmRv9HO7ajAYOOCafaqWlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwODExMjAyNTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGI0YzkzYjRkYmJkN2U2ZGIxNDlkOTkxYzBhZGY2YzcxYjg3YmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5xfpSJk4+IjMAHCa+9ZHTzo4PrO
Mbz9oLurNdFuI9dBuTJWqDtiRmMjG1gUviCh07w+qbzsqMAVfva3mF8KqTpzSQSC
fyDCoONjvz1eBliaBdR16vltaehaVZc6b2qKnNttJNtcZ3frlXrQs6ZnZ7yCFf8Y
p6Fd+Zr4AUvh9zDy3YQ1mpYxvgEVZ5oESF1zul+nf9s4f53kaRrB7cJK+C08BQGx
/B8RWPfwOXZ8+OzJS5SXnC07H4ebTQwRgNBBNz+GMAYDG13oOoqJeepClp0BHMmQ
vS9BaSKu4lUoUy5Cpw47sI4yWCq87gUAcKBNKcPHKfLfJeXWUpIQhEfQEwIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFBS0yTtNu9fm2xSdmRwK32xxuHvgMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvRkxUSk8wMjcxLWJiRkoyWkhBcmZiSEc0ZS1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZAwDAME
AD5IoQMEAj5IoAMEAD5IpTAMAwQAPkipAwQAPkiqAwQAPkivAwQAPkixAwQAPkiz
MAwDBAA+SLUDBAA+SLYDBAA+SLkwDAMEAD5IuwMEAT5IvAMEAD5IvzAMAwQAURUB
AwQCURUAAwQAURUIMAwDBAFRFQoDBARRFQADBACwOTMDBACwOTUDBAGwOT4wDQYJ
KoZIhvcNAQELBQADggEBAIejM7YyThDhyH3CLRZtvXw4IKG+KhasjQnZvjf/TI+4
Q2/khRynbANZ+zdMOL5ZcFJdKXqKmlyoxGPKelqefji3ApO76WhLRaO4yGVDIvGX
t9CTVjINnJog3W4mUxokafauOtIkUV5O3Wa5+0dvmGNlgq3D5WGSfdBJ1H3Jn7TY
exw8lm4TOcV7kbDeKXZLLbqGIW9vYc/AxrUTWjaqk90NN1HqvWc7zIspNjt1IIe7
0uaPefNIa1lvyVGQ/qwv23RP1eOmfkD/TM5EQweoXhPuFyisDByDdau5Z/LB+6Uf
ATso4u/sNJSXkU1MiY9fw54Q6YDS/BwOa478h0JKgjk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org