Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/MQrjflC7FU-12ZSnEkGJKHMkV9A.roa
File: MQrjflC7FU-12ZSnEkGJKHMkV9A.roa (raw, json)
Hash identifier: sFaQdkCQnFclsmPRYfSZZtCnDCtyyFu26vi0kulnoFg=
Subject key identifier: 31:0A:E3:7E:50:BB:15:4F:B5:D9:94:A7:12:41:89:28:73:24:57:D0
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018D0D74E412184150F05B94C10BE466FA37
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/MQrjflC7FU-12ZSnEkGJKHMkV9A.roa
Signing time: Mon 15 Jan 2024 14:09:40 +0000
ROA not before: Mon 15 Jan 2024 14:09:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.164.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.167.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.58.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.4.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 12:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:74:e4:12:18:41:50:f0:5b:94:c1:0b:e4:66:fa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 15 14:09:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=310ae37e50bb154fb5d994a712418928732457d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bf:92:74:b6:7b:a1:ba:26:69:71:0e:3c:46:
a5:5c:2d:d2:e4:be:27:31:ab:17:25:32:f4:da:45:
c2:47:fc:a9:ef:14:33:85:7d:15:ef:a4:f2:6a:eb:
0c:39:a1:69:48:db:23:c0:ba:52:18:d5:e1:de:84:
26:e2:f7:56:46:9c:a3:f1:6c:8c:45:83:7e:7c:00:
4a:fe:a7:b2:aa:19:70:7a:e3:3e:00:b4:f9:da:b6:
26:c4:95:76:e2:a0:ba:51:42:fd:6e:0f:13:3c:16:
5f:f9:61:d7:2a:ab:7d:54:53:b3:ba:b2:26:e8:03:
8f:fc:b7:a8:d1:f7:2c:97:81:f2:2d:ca:73:1b:40:
24:d3:9b:bf:fc:b1:0f:01:b1:2c:a8:b6:4c:89:2f:
73:f9:f0:f2:2e:79:d1:ad:e2:8c:37:d6:5e:37:c3:
c0:9a:93:8e:5a:dc:17:9b:94:7e:3f:67:55:2c:54:
68:b6:f5:9b:c5:36:29:e3:09:dd:c9:76:2c:2d:7d:
45:2d:0b:80:e5:e5:22:13:8a:87:dc:ea:ee:9b:d4:
de:52:a8:af:4c:92:19:1a:d4:0a:a5:f6:21:0d:ce:
0b:ae:83:39:c9:81:89:2e:df:3b:b7:5f:91:37:80:
7c:31:0f:c0:3b:f8:49:b8:4b:2f:d7:69:b9:c0:7c:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0A:E3:7E:50:BB:15:4F:B5:D9:94:A7:12:41:89:28:73:24:57:D0
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/MQrjflC7FU-12ZSnEkGJKHMkV9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
31:91:0f:7d:d5:31:ca:24:c8:b9:7b:c9:36:22:7e:05:96:36:
bb:e7:9d:14:d4:22:dd:9b:74:40:87:f5:83:0d:bd:c8:60:e6:
b4:2f:d5:61:ce:d3:79:a2:e6:63:d7:33:e7:ce:47:1b:85:7f:
4d:7a:a7:cb:a6:3d:06:64:d3:cc:44:3e:3d:c6:c1:a0:7c:8b:
48:98:99:79:b6:ec:45:26:79:8f:48:8c:c8:ef:c3:2a:41:89:
9b:e2:7b:cd:bd:77:a8:03:ab:92:6e:a3:fe:83:c6:d6:62:6c:
21:48:3f:c9:0b:27:f3:06:ab:f9:47:6a:84:61:40:7f:39:88:
16:66:7f:6c:74:f0:e7:eb:7b:e8:c1:f9:2a:75:cd:0f:93:d9:
6e:01:de:97:9b:fb:32:14:ab:92:c0:54:a5:76:97:1a:3c:6a:
fb:7e:8d:14:b3:61:5b:0b:b6:e9:25:6e:df:92:98:82:1c:9f:
b3:99:46:89:bb:1b:41:27:0c:7a:6a:54:5e:03:a6:98:87:f8:
22:c7:4e:3b:bc:ac:74:92:77:99:55:c2:f6:75:7e:c6:e3:8f:
ad:b2:12:6a:20:e8:ff:dd:9c:bf:d9:18:98:39:05:a6:8c:19:
e7:86:13:3d:07:bd:92:bd:95:2b:58:d7:5d:ef:1a:ac:00:aa:
6e:a4:68:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org