Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/S1q5rUMp7eAUh9JRHASn_UMYQ8o.roa
File: S1q5rUMp7eAUh9JRHASn_UMYQ8o.roa (raw, json)
Hash identifier: 9p4DCI8aKSNyy889S4ceMnuo/bMAaiZtL3iQX/s3ZHw=
Subject key identifier: 4B:5A:B9:AD:43:29:ED:E0:14:87:D2:51:1C:04:A7:FD:43:18:43:CA
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018EE067DCB32F6B48E98A843D38FBEEA3C7
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/S1q5rUMp7eAUh9JRHASn_UMYQ8o.roa
Signing time: Mon 15 Apr 2024 06:18:06 +0000
ROA not before: Mon 15 Apr 2024 06:18:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.176.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.2.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e0:67:dc:b3:2f:6b:48:e9:8a:84:3d:38:fb:ee:a3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 15 06:18:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b5ab9ad4329ede01487d2511c04a7fd431843ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:74:a9:18:11:86:14:4c:13:33:48:41:a9:95:
7c:6a:e9:9c:97:cf:7f:a0:77:01:df:b5:42:df:91:
5f:57:6f:83:e9:a0:a1:6a:49:ec:93:94:cd:3a:1a:
9a:3e:d4:2d:23:d0:76:4e:86:97:1a:22:37:9a:ae:
ba:61:49:ba:e0:b3:b9:f1:82:8d:78:08:69:80:bc:
50:be:4a:21:ec:ee:d7:11:8a:8e:a6:c4:cc:46:22:
62:7c:f1:19:1d:a3:58:85:76:03:60:a2:8d:3c:7f:
b6:2b:ea:b9:58:0d:d6:97:86:4a:3c:5f:0d:92:01:
a2:98:27:15:78:41:82:a5:58:b5:0f:f4:c2:91:eb:
39:7c:27:89:52:8f:b6:0b:91:16:23:c1:a8:9e:54:
13:4b:cc:a5:5d:21:83:1e:9e:b2:50:46:b7:76:b2:
a0:4d:ea:5d:21:69:3d:2e:57:8c:23:ed:46:ee:79:
37:1f:3f:57:1e:1c:8c:6c:cc:fb:91:dc:a5:6c:ac:
79:d8:7d:87:0e:57:9b:f3:f8:56:ac:ab:9e:bb:2b:
34:59:fe:93:59:3f:aa:7a:14:46:0c:1b:c2:4b:0e:
05:99:55:7b:8f:e8:4c:0d:01:04:d7:c3:a1:12:b3:
00:34:4c:ce:06:c1:98:0c:32:e1:48:5e:36:93:01:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5A:B9:AD:43:29:ED:E0:14:87:D2:51:1C:04:A7:FD:43:18:43:CA
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/S1q5rUMp7eAUh9JRHASn_UMYQ8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.176.0/24
62.72.183.0/24
62.72.189.0/24
81.21.2.0-81.21.7.255
81.21.9.0-81.21.15.255
176.57.59.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f5:c3:20:50:1a:c9:ac:cb:27:07:c2:be:80:9a:38:0b:cf:
94:63:98:f1:7f:5d:a6:02:01:c2:c1:93:c5:6d:e6:52:8b:9c:
9c:3c:01:c7:61:d7:99:ff:d7:aa:4b:f1:b9:d3:e9:33:a0:9f:
b5:a7:51:77:8f:f8:a7:d4:98:a6:f3:53:9f:fa:59:2b:0c:52:
d2:e9:cc:6f:45:18:53:17:3e:9b:2d:73:2e:d7:a7:03:18:bf:
2a:6c:9d:1a:c8:31:39:a5:71:0b:09:61:65:84:24:67:00:42:
23:6a:58:ab:86:1b:c6:e9:4c:f4:f3:08:af:6e:37:79:d9:13:
76:c7:a1:ca:5d:72:32:fd:2c:ad:fb:85:ce:f9:05:4e:97:5f:
15:ba:63:dc:6a:e4:5b:39:98:43:88:ed:f2:77:92:84:33:83:
b1:2e:31:84:fc:e6:64:de:b6:c8:e7:79:9f:d2:98:da:8b:36:
67:0f:ec:87:27:df:8b:b0:21:16:59:5a:79:4f:1c:e7:a7:47:
60:cf:65:60:0e:07:f6:3d:af:f5:5b:5c:04:1f:f4:68:53:a6:
23:d4:30:09:0f:97:d8:77:a5:97:c9:e0:e0:87:d2:8e:ca:39:
3e:96:f3:8d:4b:1c:db:b1:6a:e2:92:34:5a:f3:13:fb:ea:36:
b3:74:59:d4
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAY7gZ9yzL2tI6YqEPTj77qPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwNDE1MDYxODA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjVhYjlhZDQzMjllZGUwMTQ4N2QyNTExYzA0YTdmZDQzMTg0M2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3SpGBGGFEwTM0hBqZV8aumcl89/
oHcB37VC35FfV2+D6aChaknsk5TNOhqaPtQtI9B2ToaXGiI3mq66YUm64LO58YKN
eAhpgLxQvkoh7O7XEYqOpsTMRiJifPEZHaNYhXYDYKKNPH+2K+q5WA3Wl4ZKPF8N
kgGimCcVeEGCpVi1D/TCkes5fCeJUo+2C5EWI8GonlQTS8ylXSGDHp6yUEa3drKg
TepdIWk9LleMI+1G7nk3Hz9XHhyMbMz7kdylbKx52H2HDleb8/hWrKueuys0Wf6T
WT+qehRGDBvCSw4FmVV7j+hMDQEE18OhErMANEzOBsGYDDLhSF42kwGHOwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFEtaua1DKe3gFIfSURwEp/1DGEPKMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvUzFxNXJVTXA3ZUFVaDlKUkhBU25fVU1ZUThvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIMAwDBAE+SKID
BAM+SKADBAA+SLADBAA+SLcDBAA+SL0wDAMEAVEVAgMEA1EVADAMAwQAURUJAwQE
URUAAwQAsDk7AwQAsDk/MA0GCSqGSIb3DQEBCwUAA4IBAQCg9cMgUBrJrMsnB8K+
gJo4C8+UY5jxf12mAgHCwZPFbeZSi5ycPAHHYdeZ/9eqS/G50+kzoJ+1p1F3j/in
1Jim81Of+lkrDFLS6cxvRRhTFz6bLXMu16cDGL8qbJ0ayDE5pXELCWFlhCRnAEIj
alirhhvG6Uz08wivbjd52RN2x6HKXXIy/Syt+4XO+QVOl18VumPcauRbOZhDiO3y
d5KEM4OxLjGE/OZk3rbI53mf0pjaizZnD+yHJ9+LsCEWWVp5Txznp0dgz2VgDgf2
Pa/1W1wEH/RoU6Yj1DAJD5fYd6WXyeDgh9KOyjk+lvONSxzbsWrikjRa8xP76jaz
dFnU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org