Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/S7tkCwjI_c_aBXKMc0FKwJVTTQE.roa
File: S7tkCwjI_c_aBXKMc0FKwJVTTQE.roa (raw, json)
Hash identifier: 1ry88mHyH4y6ltl7xEjwiKim6G714eq29oJPfwqGdVg=
Subject key identifier: 4B:BB:64:0B:08:C8:FD:CF:DA:05:72:8C:73:41:4A:C0:95:53:4D:01
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019492344539E5DFAFFD3478BF1D04842A18
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/S7tkCwjI_c_aBXKMc0FKwJVTTQE.roa
Signing time: Thu 23 Jan 2025 08:08:06 +0000
ROA not before: Thu 23 Jan 2025 08:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.184.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.5.0/24 maxlen: 24
81.21.6.0/24 maxlen: 24
81.21.7.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Feb 2025 06:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:34:45:39:e5:df:af:fd:34:78:bf:1d:04:84:2a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 23 08:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bbb640b08c8fdcfda05728c73414ac095534d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:1a:ff:eb:d0:86:45:67:a3:c7:9f:07:58:
e6:4f:e2:6f:95:84:d0:7c:65:f0:91:a9:ab:f3:27:
d9:ca:0d:58:ea:8e:be:b9:88:d5:b3:bb:86:8a:3a:
2b:e1:c4:63:af:9c:48:21:97:75:df:6f:1c:24:f6:
0f:86:60:d9:49:c1:d8:06:92:fc:2b:1a:78:07:cc:
0f:fa:ef:a2:53:18:36:0b:c3:5b:bd:a5:f8:2c:1b:
4d:ad:89:74:d4:db:7b:aa:ae:64:3e:47:4a:33:bb:
d8:66:f1:e7:a5:06:66:d2:cd:6e:87:1e:c1:bd:71:
6f:0b:61:8f:be:bd:9b:56:c9:63:dd:9f:8e:d8:23:
59:2a:71:ce:76:dd:e1:1e:a9:44:a4:3d:c4:89:60:
d3:59:9c:e8:26:65:59:b9:d5:13:8e:34:87:b6:78:
39:04:e3:3e:54:c2:b6:4d:1b:bd:67:d1:6e:ef:55:
5d:44:7e:2c:c8:70:e6:3e:90:97:eb:03:ad:2b:d9:
d1:68:b1:4a:ce:cf:bc:9f:c7:f3:c9:b6:17:43:c8:
5a:98:f9:c2:26:8f:a6:66:99:3d:9c:97:47:a7:09:
63:d7:d7:c3:1b:ac:27:9d:8c:81:b5:bc:b3:c6:36:
a0:6d:13:09:c8:cf:f0:b8:d9:c2:46:9d:06:cc:41:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BB:64:0B:08:C8:FD:CF:DA:05:72:8C:73:41:4A:C0:95:53:4D:01
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/S7tkCwjI_c_aBXKMc0FKwJVTTQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.184.0/23
62.72.191.0/24
81.21.2.0-81.21.7.255
176.57.51.0/24
176.57.56.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
72:fb:a3:29:78:7c:c9:24:8d:d8:1f:76:e3:99:24:3c:09:2c:
1c:6d:72:42:77:a0:3f:1f:4d:1d:16:97:84:1c:a6:fc:05:e6:
77:ba:e2:4b:65:47:47:18:a3:30:2a:94:8c:b1:01:1f:1d:77:
0c:93:6a:7f:fd:33:4d:60:fb:e1:69:13:79:ff:d4:60:c4:01:
63:a6:98:8c:aa:4c:f8:35:bf:61:fd:fd:12:60:b9:d5:c3:37:
9c:dc:01:cf:08:9e:3f:ef:58:4a:0a:f8:ec:2a:70:8c:e8:52:
96:44:cd:49:9b:42:c5:74:a0:40:69:65:ff:e4:ae:b7:6e:96:
f6:cd:0d:c9:85:ba:28:b4:48:69:bc:a1:c2:1a:7b:34:c7:8c:
7b:6c:a6:b0:35:81:0b:37:66:8e:4f:45:45:05:05:48:c8:33:
33:0e:60:1a:c6:16:a0:0e:82:be:16:ff:fb:c8:9f:de:f7:9d:
a9:0d:5e:a1:bc:8a:a5:1d:66:e3:03:bd:6d:5d:04:0c:73:fc:
3c:80:5a:d3:4d:56:4b:63:24:97:36:aa:c1:87:16:a3:c1:32:
82:a6:44:bb:d9:a9:a3:50:29:94:d7:01:ce:0d:31:a5:ae:9e:
c0:05:4f:12:7a:db:2b:de:8e:43:ae:ce:2f:dc:a9:a1:36:cc:
f3:1e:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 20:01:04 2025 by rpki-client