Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/KUHerttMprU7RhvpElW9EJotTc0.roa
File: KUHerttMprU7RhvpElW9EJotTc0.roa (raw, json)
Hash identifier: GVhOPSjdw3eah3iX0wW9kBsAEzS1OeqtUjcarqIIjq4=
Subject key identifier: 29:41:DE:AE:DB:4C:A6:B5:3B:46:1B:E9:12:55:BD:10:9A:2D:4D:CD
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018B511869DF7FFD973A05F28FCB163A3D0D
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/KUHerttMprU7RhvpElW9EJotTc0.roa
Signing time: Sat 21 Oct 2023 07:17:16 +0000
ROA not before: Sat 21 Oct 2023 07:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.166.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.168.0/22 maxlen: 22
62.72.170.0/24 maxlen: 24
62.72.167.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.174.0/23 maxlen: 23
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.180.0/23 maxlen: 23
62.72.180.0/24 maxlen: 24
62.72.184.0/22 maxlen: 22
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.5.0/24 maxlen: 24
81.21.6.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 22 Oct 2023 06:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:51:18:69:df:7f:fd:97:3a:05:f2:8f:cb:16:3a:3d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 21 07:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2941deaedb4ca6b53b461be91255bd109a2d4dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:00:6b:41:49:96:4f:34:10:ea:16:51:26:
bb:c4:ec:cb:1b:f1:09:e1:be:13:34:46:50:ac:76:
b7:a7:a4:e0:63:d0:7a:ff:87:01:f9:2f:06:58:2c:
23:55:e9:a1:01:2f:99:d7:82:df:18:18:eb:09:b0:
68:12:28:4c:51:06:71:7f:73:29:86:a5:27:46:62:
e6:c9:56:b5:1e:a0:a0:be:06:e1:b2:01:9f:b3:98:
e0:2b:b7:23:98:d0:ae:a8:89:42:cb:99:75:55:4c:
c3:e0:f5:df:56:44:35:e3:e7:c2:1a:09:03:ad:3c:
52:00:b4:4a:29:e7:cc:a9:8f:e8:7a:62:31:b5:74:
35:1d:5e:e7:7f:bc:9e:d1:b5:4e:df:e9:d7:fe:79:
0b:82:d3:2d:17:7d:3d:79:ee:c1:2a:70:c5:0b:43:
89:9b:70:5f:91:20:c5:6c:fb:08:64:e2:d1:fd:91:
c9:e6:7c:fb:ac:ed:bb:89:12:d2:39:c5:01:58:dd:
8d:dd:bf:ee:37:b1:e0:4f:bc:04:85:d6:24:9c:5e:
ac:0a:08:e9:e7:58:e9:de:05:4e:fe:0e:b4:f6:7a:
d9:0f:e4:08:21:8b:de:9e:d2:18:3d:cb:b9:de:f0:
f9:47:5b:9f:5e:96:5e:54:cb:7c:cc:55:76:d1:e4:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:DE:AE:DB:4C:A6:B5:3B:46:1B:E9:12:55:BD:10:9A:2D:4D:CD
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/KUHerttMprU7RhvpElW9EJotTc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.171.255
62.72.173.0-62.72.175.255
62.72.177.0/24
62.72.179.0-62.72.182.255
62.72.184.0-62.72.189.255
62.72.191.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f2:6d:0c:db:c7:b8:ce:bd:de:29:82:4c:ce:80:0c:77:dc:
13:96:c6:ec:d3:d4:5f:4c:49:0e:cf:d8:9b:e5:70:b2:40:94:
aa:ae:7e:6f:da:c3:cf:d3:69:b0:8d:9e:5c:38:fe:1e:cb:4e:
cd:36:bc:22:b9:23:05:5b:9f:f9:99:f9:0d:51:e4:48:a9:21:
f0:fd:89:a4:57:01:9a:71:df:f7:b7:52:d8:93:8f:0d:c3:f2:
08:8b:52:1a:7c:62:b7:2b:94:df:7d:5b:44:cc:c1:7d:29:b6:
6c:96:ac:20:2c:78:31:58:82:8b:fd:51:11:fa:c3:2a:c2:c1:
e0:e5:b8:81:62:62:45:59:86:15:9d:d4:e0:7f:a4:38:a0:ce:
d8:9a:05:65:bd:82:1e:9e:0a:c1:78:60:b9:9a:23:9e:c0:39:
8b:db:8e:d3:09:01:7c:42:02:69:0c:3e:06:24:a2:7a:ee:b1:
9e:8a:01:87:78:c0:4e:3f:55:a7:4f:cb:37:2e:8e:84:83:37:
92:f7:0a:af:7a:6a:e9:54:40:00:d5:aa:fd:ed:6a:fc:6f:95:
79:5f:ab:9a:a9:f1:02:d8:a7:df:3f:cb:5d:1c:71:e7:a7:66:
7f:f1:c3:cd:e3:c5:58:98:6e:e4:92:ea:d9:d6:d1:39:34:fd:
3b:a5:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org