Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Ojjjso4zz_94UI3ngzS009WwfLw.roa
File: Ojjjso4zz_94UI3ngzS009WwfLw.roa (raw, json)
Hash identifier: bZNOzW/dMnQaSgchGRD/CVnfPHRV8QQbKnceca1N800=
Subject key identifier: 3A:38:E3:B2:8E:33:CF:FF:78:50:8D:E7:83:34:B4:D3:D5:B0:7C:BC
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018E5A8FEB75F1B681E7CF1EFFD757D19654
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Ojjjso4zz_94UI3ngzS009WwfLw.roa
Signing time: Wed 20 Mar 2024 06:32:45 +0000
ROA not before: Wed 20 Mar 2024 06:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 07:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5a:8f:eb:75:f1:b6:81:e7:cf:1e:ff:d7:57:d1:96:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 20 06:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a38e3b28e33cfff78508de78334b4d3d5b07cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:db:3d:ce:9b:d6:62:05:1e:98:73:25:bf:
da:57:f2:3d:14:0d:8f:92:11:bd:4f:23:f0:2a:9d:
81:51:9e:20:0d:b2:1b:ce:2c:e1:bd:fa:55:9a:4b:
24:44:60:bb:a8:18:fb:21:72:ac:2d:06:f4:e1:01:
c6:ed:72:14:6d:84:58:c3:e2:f8:a4:8b:89:6c:76:
1c:44:1d:0a:67:fc:02:02:85:66:a2:4f:de:cf:93:
46:1f:7b:9d:70:1d:b4:df:23:cd:33:f5:d5:c8:f3:
b9:09:45:53:b9:fb:20:d5:9f:38:9b:b6:8a:16:8f:
3a:d7:36:d0:47:59:fa:f7:8b:3d:63:5f:3f:56:52:
be:02:a6:3d:f5:a3:7d:3e:a7:89:d4:b5:7a:ad:16:
f4:01:7b:30:67:3e:89:6a:ba:a8:aa:86:35:17:17:
77:c0:21:aa:e5:01:73:37:a0:8e:b4:d5:0b:84:4c:
51:6c:a0:7a:fe:09:a0:89:e6:a0:73:85:d6:fa:0b:
48:4f:33:b4:9d:8a:7e:9c:5a:94:fd:e5:41:b8:d3:
b7:54:f7:6a:0e:ec:36:0a:6f:ae:67:67:73:cc:0d:
29:4c:1e:53:23:69:75:a6:37:3b:39:97:85:4d:0e:
79:4a:42:65:cb:d9:67:23:bb:94:d9:eb:87:61:43:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:38:E3:B2:8E:33:CF:FF:78:50:8D:E7:83:34:B4:D3:D5:B0:7C:BC
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Ojjjso4zz_94UI3ngzS009WwfLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.189.0/24
81.21.2.0-81.21.7.255
81.21.9.0-81.21.15.255
176.57.59.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:85:bc:a4:7d:d8:71:50:5e:7f:51:c6:d8:c4:4e:3d:df:26:
e5:21:e1:a7:d3:c2:d0:9b:fd:6f:ec:c5:f7:d7:dc:5b:71:db:
92:b6:b1:e6:c1:d3:13:29:52:5c:4b:ed:50:e4:e1:58:53:bd:
d2:9c:5a:3e:5e:1b:cf:fc:50:8c:41:0c:93:c7:a1:51:82:7c:
68:da:4b:55:d2:2e:78:e1:2c:38:b2:f5:88:10:41:b3:33:f1:
2e:86:e1:39:c8:69:dd:08:02:87:a1:84:03:b9:ce:ad:8b:a1:
8c:ad:05:4f:69:0a:52:3f:56:62:cf:8c:4e:a2:f9:78:90:fa:
f7:ad:e0:4a:25:79:97:bf:fd:2d:51:c5:1c:85:d0:81:6f:b3:
fb:a3:82:7d:e5:f7:87:dd:7b:78:71:e6:da:f8:f0:e7:98:4c:
bf:e3:11:f6:34:10:9c:ac:ee:b4:9c:7b:fd:7b:43:7c:60:2a:
8d:d8:d9:82:d1:28:44:d6:6c:8c:c8:64:b2:43:7a:e3:4a:8f:
b8:9f:39:4d:f6:5f:3a:dc:50:49:8b:a9:03:fe:35:bf:72:de:
be:52:cc:c6:47:66:e5:1b:07:16:63:c3:d7:ed:4c:2c:19:88:
9f:c3:c1:1e:7e:cf:f8:e0:72:73:d6:4a:a7:a2:38:c5:f0:f4:
38:01:31:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org