Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/LHcNvXJPFkl56JU-hwel1wiJ-O4.roa
File: LHcNvXJPFkl56JU-hwel1wiJ-O4.roa (raw, json)
Hash identifier: MMjoa/7pRvadiPX6RkTYR2CIGjd4+tMphU6hzNw7G+w=
Subject key identifier: 2C:77:0D:BD:72:4F:16:49:79:E8:95:3E:87:07:A5:D7:08:89:F8:EE
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018962B49E300B98C777651CAE5832B43550
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/LHcNvXJPFkl56JU-hwel1wiJ-O4.roa
Signing time: Mon 17 Jul 2023 07:15:51 +0000
ROA not before: Mon 17 Jul 2023 07:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.1.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Aug 2023 07:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:b4:9e:30:0b:98:c7:77:65:1c:ae:58:32:b4:35:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jul 17 07:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c770dbd724f164979e8953e8707a5d70889f8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:df:44:93:04:a3:1c:ff:6c:76:a8:29:54:
2f:5f:45:15:96:0f:3e:fe:2a:f6:3e:d2:90:91:32:
f9:06:e9:dd:53:ab:69:ed:2f:0c:ea:dd:1c:2f:e8:
c8:ad:a5:c9:5b:23:88:33:e7:46:c5:c6:b6:01:f4:
4e:ef:02:55:44:66:da:31:f9:ac:52:a4:84:a8:65:
15:fa:06:23:32:6a:5f:68:47:20:99:46:3b:4c:fb:
58:15:3a:ca:49:f6:8d:87:be:ef:de:15:f0:8b:1e:
7a:60:e7:79:4e:ee:2c:75:2f:49:32:00:f6:4e:df:
03:96:92:bd:ff:10:18:a1:76:1c:2f:d7:b5:53:0a:
cd:57:84:42:66:9c:e7:61:80:76:75:e1:80:37:e9:
99:dc:80:45:86:61:70:37:db:5e:88:be:00:b0:5d:
6e:8e:2d:d5:46:7c:9b:8f:b6:45:9c:56:72:07:61:
41:d7:2d:32:6d:8a:ae:14:9d:02:1a:e7:74:f9:99:
7c:b2:27:8c:39:51:37:a5:95:2c:c8:35:90:5f:12:
4b:78:50:81:bb:be:ea:dc:68:8f:0a:ae:ab:85:a9:
93:59:32:37:3e:89:af:cb:e3:38:67:c7:bc:df:43:
5f:23:04:bf:38:29:39:0a:be:b9:b8:77:61:11:6e:
25:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:77:0D:BD:72:4F:16:49:79:E8:95:3E:87:07:A5:D7:08:89:F8:EE
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/LHcNvXJPFkl56JU-hwel1wiJ-O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.163.255
62.72.169.0/24
62.72.177.0/24
62.72.179.0/24
62.72.181.0-62.72.182.255
62.72.185.0/24
62.72.187.0-62.72.189.255
62.72.191.0/24
81.21.1.0/24
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
49:aa:60:14:d4:47:08:6f:d2:2c:43:54:86:0c:31:c5:d4:7c:
5b:e5:90:94:10:de:85:04:b5:79:d6:16:44:7b:80:35:17:39:
41:75:39:ce:d6:02:6a:1d:f2:11:a8:9a:8d:1d:31:f0:03:b9:
66:a1:79:3d:9b:ce:c1:62:f6:97:d6:f4:00:76:6b:81:93:92:
5a:53:fc:f3:23:3e:f0:40:f3:7c:a0:1c:56:38:57:07:5c:d7:
8a:01:dd:a7:72:32:f0:60:6e:68:60:fc:7f:6c:ab:c8:ba:f5:
ce:c6:de:9b:05:68:44:a2:a4:1d:0d:6f:7a:b2:66:d8:5f:af:
b5:44:98:94:fa:c2:ac:67:eb:61:89:8e:6e:8d:c0:89:93:9c:
89:7e:41:0e:bd:ea:14:93:b0:d5:61:a7:e8:69:04:d1:a2:b8:
cc:de:58:0c:f8:0e:b9:31:55:71:e1:9d:4e:20:e2:04:cb:60:
25:1c:72:90:03:6d:f1:3c:dd:c9:a8:28:bc:7f:7f:da:e2:73:
93:5d:a2:5e:a6:8f:a1:30:c0:49:36:40:1d:ef:0b:63:ef:10:
63:62:55:71:08:66:96:5e:cb:e1:8b:30:b0:8c:d3:72:b6:e9:
0e:f5:c0:3e:3c:a4:4b:ec:89:ee:41:ab:e4:ce:15:f5:6d:33:
9d:d3:1e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org