Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/PsKEk54bmkwFoMW2hwPC09eR8iY.roa
File: PsKEk54bmkwFoMW2hwPC09eR8iY.roa (raw, json)
Hash identifier: NE3fix6ysAqk/ZEA1ikOTsnVJ9swH1ntulfrePT33Vs=
Subject key identifier: 3E:C2:84:93:9E:1B:9A:4C:05:A0:C5:B6:87:03:C2:D3:D7:91:F2:26
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01916A0168D7B8139882D90535A56C89553F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/PsKEk54bmkwFoMW2hwPC09eR8iY.roa
Signing time: Mon 19 Aug 2024 09:39:22 +0000
ROA not before: Mon 19 Aug 2024 09:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.14.0/23 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.52.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 09:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6a:01:68:d7:b8:13:98:82:d9:05:35:a5:6c:89:55:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 19 09:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ec284939e1b9a4c05a0c5b68703c2d3d791f226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a3:49:70:c4:8b:31:66:9b:9c:69:da:7f:49:
9e:85:d5:d6:39:5f:cd:57:e6:d8:06:7c:5f:26:93:
f8:3a:f9:9b:56:bc:b9:3e:86:77:8d:66:ca:c7:5f:
84:d6:42:30:ae:4d:c9:5f:85:b7:5e:2d:81:94:92:
8b:36:46:d6:91:f0:2a:22:b9:e2:70:f5:58:9d:60:
ac:98:a9:b0:0f:2d:17:ac:7c:f1:44:fa:75:0a:b0:
2a:0a:58:94:45:24:fc:a6:af:91:1d:27:70:48:e5:
ad:85:6a:40:b6:4d:39:b7:62:56:5e:34:34:22:e9:
c7:00:92:27:93:6f:c3:9e:c0:87:81:e1:ef:bb:56:
03:ce:24:f8:27:b5:d8:1c:72:4b:36:71:d4:e0:24:
f9:9a:90:c4:6d:bf:28:c0:1e:ff:6b:2f:da:f4:99:
3b:f4:44:11:a7:df:80:db:55:d0:64:4a:1a:41:30:
54:cf:4e:6b:68:85:eb:fd:1a:3a:6e:fe:85:c9:ea:
13:b2:46:fb:74:89:c3:ca:ee:08:00:83:8a:41:c4:
82:d6:33:34:ca:18:f5:cd:16:1b:0b:15:9a:75:4a:
2c:37:f8:5f:47:6f:d4:d5:6c:59:1b:41:e0:d0:9f:
d7:47:d6:f6:85:53:27:c6:58:4e:cf:59:74:76:11:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C2:84:93:9E:1B:9A:4C:05:A0:C5:B6:87:03:C2:D3:D7:91:F2:26
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/PsKEk54bmkwFoMW2hwPC09eR8iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.188.0/23
81.21.2.0-81.21.15.255
176.57.52.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
52:af:11:88:1b:2d:44:98:e3:6b:43:90:a7:e8:23:f9:5a:16:
52:22:b6:65:28:7f:cc:d7:c9:19:a9:23:c8:59:67:0f:74:6a:
8a:b7:ba:57:31:64:02:9a:59:7d:bd:5a:82:27:a9:5f:91:5c:
3d:20:0b:2f:0c:8f:5d:9f:54:4e:9b:d5:7c:21:a2:da:ff:c2:
f0:1f:09:d9:b6:3b:6a:ab:f3:b4:04:e6:e3:0e:61:d5:60:c1:
c1:22:6d:c9:2f:59:e8:08:99:ae:6c:f8:a3:dc:c0:3d:68:c8:
d0:ee:6f:b5:43:c4:c4:ef:46:f9:55:2e:17:67:c8:18:ff:36:
48:12:2e:02:3d:4f:04:d7:ad:1c:10:f0:27:66:81:0f:d1:90:
1e:b9:f3:0a:b4:6e:9c:6b:3c:30:b1:7d:43:5e:7b:36:ec:67:
49:f4:73:b2:1b:58:9a:72:ad:e4:1f:96:1e:b4:10:14:e5:2f:
49:d5:e4:11:6b:49:88:09:41:44:9d:01:9c:f0:78:ca:f8:81:
7f:18:01:e3:ad:35:2f:05:5d:38:99:f9:1f:34:ab:b9:30:c1:
c7:c5:41:66:d7:a0:b4:bf:72:d1:3c:f2:ab:9b:86:2c:70:14:
d8:37:a8:18:6f:b4:97:8e:27:dc:fb:32:13:a9:ae:ec:10:30:
2d:ec:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 13:13:13 2024 by rpki-client on console-fra.rpki-client.org