Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/U1L9eiN4F2Rq4p6aOMZisPp3dmM.roa
File: U1L9eiN4F2Rq4p6aOMZisPp3dmM.roa (raw, json)
Hash identifier: ynKbi5T21MfDhgm+Iwi2mNvBsv9A/9+sLEGO8OoG4HM=
Subject key identifier: 53:52:FD:7A:23:78:17:64:6A:E2:9E:9A:38:C6:62:B0:FA:77:76:63
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018D12349BDD3DAADF49A5C93DDF98C44601
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/U1L9eiN4F2Rq4p6aOMZisPp3dmM.roa
Signing time: Tue 16 Jan 2024 12:17:34 +0000
ROA not before: Tue 16 Jan 2024 12:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.162.0/24 maxlen: 24
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.167.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.4.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 06:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:34:9b:dd:3d:aa:df:49:a5:c9:3d:df:98:c4:46:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 16 12:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5352fd7a237817646ae29e9a38c662b0fa777663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:6e:04:f3:e3:3e:f1:39:36:10:cd:a4:14:
9d:ad:ca:38:27:64:76:6c:5f:fc:b4:84:8f:9a:95:
5c:01:5d:2c:e2:d4:12:cb:9f:e4:40:5a:41:70:40:
d1:6c:26:80:5a:04:d7:9e:19:f5:17:de:04:25:e0:
58:24:b5:35:0f:54:22:64:09:7e:25:f9:db:c9:8b:
5d:36:14:0a:4e:6f:7a:d3:92:c3:f1:ea:f3:80:cf:
43:5b:81:e1:f2:11:25:8d:65:1c:f2:0a:5b:f7:21:
7c:8e:3f:e1:48:6a:96:3e:e2:86:08:cb:51:e3:0f:
ad:35:e3:65:0a:8a:bc:60:56:a5:57:61:86:54:1b:
94:cf:18:ec:ce:0a:77:75:6a:6d:7e:28:9b:df:c6:
c1:da:5e:64:dd:0b:27:bf:a9:77:57:1c:5b:bd:27:
c7:ed:fa:2b:af:66:cf:2d:7a:a0:d7:09:da:8b:29:
77:cc:fd:69:ed:f7:2b:6a:c3:ed:4d:21:12:cd:b1:
bd:73:fd:6f:02:68:65:25:bc:0b:9f:b8:b6:a4:b2:
f5:55:af:79:89:e1:56:eb:8c:f7:49:cc:d7:7e:d9:
be:b0:e0:7f:b4:99:92:c3:14:2f:6f:69:dc:4e:1e:
07:d4:be:b5:88:d5:c6:48:6a:e3:96:ec:37:d9:69:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:52:FD:7A:23:78:17:64:6A:E2:9E:9A:38:C6:62:B0:FA:77:76:63
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/U1L9eiN4F2Rq4p6aOMZisPp3dmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e9:1d:50:23:1f:72:87:a4:a5:b6:0c:b4:e4:ce:5e:e6:f9:
37:bc:51:3f:36:d3:f8:56:22:bc:f7:87:c6:d9:25:8c:52:28:
30:58:90:7d:5d:28:38:6c:86:89:7c:1f:ca:5d:79:68:fd:3f:
2a:38:00:0c:e2:36:bb:56:0e:d2:c2:ad:86:b8:2b:43:f1:35:
c0:ef:d8:6a:74:db:d5:dd:3d:37:b2:c8:2f:45:d5:6d:f9:2f:
ed:47:69:45:4e:8c:3e:4e:21:0c:f1:20:66:6e:a0:43:9e:99:
23:d4:98:f4:ed:17:08:5a:d1:8b:10:32:f2:4a:83:94:9e:a0:
a3:09:53:14:dc:f2:c4:dd:1b:e2:de:91:63:be:63:a9:85:44:
50:c2:34:8c:df:d4:b8:97:e8:5b:b3:f1:8a:4a:aa:e9:a3:c8:
29:ef:66:7d:63:26:c1:7c:3a:01:88:9c:d4:c7:fc:c6:3b:9f:
69:de:6a:49:ca:50:37:4f:a8:22:59:72:0f:53:de:6b:a0:c6:
a7:99:cc:b7:ae:89:09:d1:f8:5a:a3:e5:bd:90:c6:d1:f8:12:
df:14:59:ea:4e:01:ee:8a:7b:7a:22:3c:9b:1b:1a:a4:c8:5b:
87:58:a9:04:c5:db:54:13:81:33:3a:92:7a:49:96:77:78:73:
85:9f:7b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org