Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/SIoNJS2CJeLLxhHQmwfDGEaUBjk.roa
File: SIoNJS2CJeLLxhHQmwfDGEaUBjk.roa (raw, json)
Hash identifier: COt1cpqaqOlzxYhtezD7aZbZJM81Xk8g2dTGm/grtXw=
Subject key identifier: 48:8A:0D:25:2D:82:25:E2:CB:C6:11:D0:9B:07:C3:18:46:94:06:39
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019127E3C76CC21054A83D93F4D8EF24243B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/SIoNJS2CJeLLxhHQmwfDGEaUBjk.roa
Signing time: Tue 06 Aug 2024 13:32:04 +0000
ROA not before: Tue 06 Aug 2024 13:32:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.180.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.6.0/24 maxlen: 24
81.21.7.0/24 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.14.0/23 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 07:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:e3:c7:6c:c2:10:54:a8:3d:93:f4:d8:ef:24:24:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 6 13:32:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=488a0d252d8225e2cbc611d09b07c31846940639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:21:86:b6:e6:45:5e:ad:c3:de:52:b2:af:
8a:26:80:06:23:f7:c8:ff:6c:fe:96:00:34:56:a3:
b6:51:6e:40:3d:7e:2e:e5:b9:37:a2:37:dc:9e:39:
9f:6d:87:92:08:23:95:f1:59:23:af:9d:e7:e9:5a:
bc:0e:24:44:81:48:bb:13:c2:1d:a5:01:14:b4:4c:
cf:a0:44:92:60:1e:a7:f3:77:6a:ac:79:28:a3:52:
61:27:0f:76:c5:5a:8b:94:84:b3:b1:16:ef:27:ed:
e0:3a:e7:c0:65:78:5e:1e:bb:e9:6d:67:5c:ea:54:
eb:90:90:f0:5f:80:c0:d6:e8:43:66:2e:40:1e:e5:
ad:c3:2b:1f:a1:3e:9d:fd:ff:a4:16:08:c0:44:db:
d9:d8:cd:37:70:80:11:0b:68:72:66:39:b4:7c:6f:
12:68:e9:ab:82:47:f4:46:0a:bf:7e:13:cf:80:1b:
f8:fc:5d:7c:ed:af:68:79:8d:b7:81:8b:5e:75:fd:
18:32:85:3b:3f:82:6b:5a:eb:f8:88:b5:41:2b:89:
25:b2:9b:5c:3f:bc:b4:1f:72:2d:e9:8b:4f:9b:10:
db:d2:6a:56:1e:35:8c:5e:72:73:87:94:71:1f:66:
30:65:d1:29:e1:ca:f7:3e:f9:8b:68:55:ed:7d:40:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8A:0D:25:2D:82:25:E2:CB:C6:11:D0:9B:07:C3:18:46:94:06:39
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/SIoNJS2CJeLLxhHQmwfDGEaUBjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.180.0/24
62.72.188.0/23
81.21.2.0-81.21.15.255
176.57.57.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
13:5f:b3:33:29:b0:1c:52:34:c3:8b:a3:c7:f5:c2:ed:cd:76:
7f:7b:3e:47:76:c2:a5:a1:af:91:a9:44:bd:5e:08:4e:fa:ca:
18:27:71:34:68:16:36:c2:04:ce:c1:23:66:7b:64:1c:96:15:
dd:a5:d8:e5:99:e8:9c:71:15:ca:64:5f:e0:58:6c:47:a7:bb:
7e:a4:44:18:ff:f1:42:8e:28:b8:72:88:6f:04:f9:41:a5:68:
3d:9a:63:4d:b9:86:73:26:6b:b2:a8:18:34:0d:76:0d:16:06:
5e:f2:f4:11:30:28:f6:b9:02:8b:a9:3c:ef:f6:76:22:63:cb:
98:80:41:2e:f1:b1:ee:99:46:1b:4f:a7:09:e0:30:97:29:ee:
3c:9d:c2:a2:a0:d4:2b:03:7e:ce:88:4c:f4:9d:ec:e1:08:bc:
23:29:dd:f4:5e:b2:0a:e8:c8:8a:6e:32:0a:c9:c7:bf:47:b9:
a2:df:79:cd:98:c5:a1:ab:a1:5b:4d:b3:c8:f3:67:5f:51:6f:
fa:4a:ee:97:44:bb:99:00:a9:b8:6a:47:e1:b6:71:26:b8:9f:
97:a5:bc:c7:5a:3f:c2:6e:7f:c0:ca:1e:be:f1:65:3c:03:a6:
54:ec:1c:a7:77:25:86:fe:73:fc:68:97:99:20:c9:27:50:b2:
09:d6:2d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 10:10:11 2024 by rpki-client on console-ams.rpki-client.org