Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Tw_zeaUahpIlXzc6GTxOCYGTUnI.roa
File: Tw_zeaUahpIlXzc6GTxOCYGTUnI.roa (raw, json)
Hash identifier: QypxhGCEKh4XW6Bx3ooni2pbVItKXT96A7oYNUY4Bwc=
Subject key identifier: 4F:0F:F3:79:A5:1A:86:92:25:5F:37:3A:19:3C:4E:09:81:93:52:72
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CF743209F44F9077EA274ECB4D1066950
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Tw_zeaUahpIlXzc6GTxOCYGTUnI.roa
Signing time: Thu 11 Jan 2024 06:43:40 +0000
ROA not before: Thu 11 Jan 2024 06:43:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.164.0/22 maxlen: 22
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.58.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.4.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
176.57.59.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 17:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:43:20:9f:44:f9:07:7e:a2:74:ec:b4:d1:06:69:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 11 06:43:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f0ff379a51a8692255f373a193c4e0981935272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:56:7f:70:c0:dd:06:26:9c:3d:d7:5c:0a:5e:
43:c3:c4:4e:a1:0d:cd:cb:f5:53:8e:3a:67:68:17:
91:53:fd:5a:fe:9a:22:e1:e8:0f:ab:0d:b0:1d:bd:
e9:3f:06:39:23:ab:0b:15:5e:55:27:7f:18:ea:9d:
f2:d0:42:c4:f5:0e:3f:c9:19:8c:8a:d4:1e:1a:2b:
1a:81:8b:cf:28:2e:22:3b:a4:b7:a7:de:5a:27:f4:
e4:8e:1c:9b:7e:59:10:05:69:bf:91:9f:f0:d8:fe:
b0:83:ce:bc:36:49:ad:82:c5:c3:8e:05:16:53:f2:
30:08:0f:8d:aa:55:26:ee:9a:9a:50:79:05:af:a6:
91:6e:07:87:17:ca:1f:93:ee:00:ab:5c:32:6a:d2:
4d:4d:b0:48:14:21:30:13:35:bd:a9:4d:fb:b8:fb:
aa:56:18:a4:29:03:cd:53:16:e4:f2:40:81:ca:c8:
54:e8:d6:5c:98:67:5d:17:b3:9a:3d:c3:c9:2b:d6:
45:9f:8f:26:cc:04:87:07:74:a2:2c:13:f5:50:33:
7c:59:26:d0:1b:57:71:11:e9:f8:85:32:77:f3:3b:
bb:e9:20:dc:49:d8:38:a7:0b:23:65:4f:38:9c:25:
c9:7f:a1:97:09:04:e6:02:38:78:40:52:54:96:b5:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0F:F3:79:A5:1A:86:92:25:5F:37:3A:19:3C:4E:09:81:93:52:72
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Tw_zeaUahpIlXzc6GTxOCYGTUnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7d:b3:da:44:78:06:34:cd:2d:cf:cd:b0:e3:77:82:04:2e:
d5:42:05:b6:ef:22:e6:d3:6e:19:86:40:5a:8d:33:8c:42:17:
54:f7:2a:f3:32:f8:da:0c:6e:29:da:de:45:95:3f:c4:20:2f:
a3:c7:f9:8a:96:6f:57:f5:e0:0d:54:e2:a2:c6:34:bb:ea:f0:
ba:2d:df:e3:19:18:eb:22:34:95:77:6b:c1:c5:f0:6d:d5:2e:
0b:32:7d:c1:86:6d:2a:4c:9d:5a:ca:90:27:01:2f:18:ef:59:
84:82:6b:32:7d:9a:63:f8:74:28:6f:f7:dd:a6:85:c3:76:b7:
af:32:25:2c:2f:2c:c1:a5:94:85:c4:e7:c4:96:a4:b7:e2:12:
72:6e:5a:4c:ac:e9:41:09:74:6d:b2:43:84:a6:d1:1a:4e:cc:
b0:e9:73:68:da:a9:4a:38:19:f8:56:8b:e3:8c:87:1b:2b:46:
35:aa:d0:b8:8e:0d:7c:79:7d:2f:76:4c:dc:e3:48:7d:fb:c8:
8c:9a:a5:9b:b6:fa:f7:86:07:ed:d3:63:5b:aa:8d:10:37:5a:
6d:32:69:08:72:ef:fe:66:6d:7d:64:df:0d:ac:8c:1b:dd:d3:
c1:1a:63:f1:5a:af:f9:b3:a9:97:65:f8:94:bd:10:24:3a:62:
1e:cf:86:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org