Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VNC_yefna_LlOUgq6-0MyhAOcgo.roa
File: VNC_yefna_LlOUgq6-0MyhAOcgo.roa (raw, json)
Hash identifier: z58OmfSbv9r4v/xsn32ASoTdRhbfUzZhVIqF6+p0LjM=
Subject key identifier: 54:D0:BF:C9:E7:E7:6B:F2:E5:39:48:2A:EB:ED:0C:CA:10:0E:72:0A
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018E141060C3FE137C869F8499D39C624298
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VNC_yefna_LlOUgq6-0MyhAOcgo.roa
Signing time: Wed 06 Mar 2024 14:00:01 +0000
ROA not before: Wed 06 Mar 2024 14:00:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Mar 2024 08:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:10:60:c3:fe:13:7c:86:9f:84:99:d3:9c:62:42:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 6 14:00:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54d0bfc9e7e76bf2e539482aebed0cca100e720a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:f3:33:8c:96:75:76:06:b2:8c:3c:6d:22:
5f:70:9f:45:1a:da:41:db:07:eb:f2:3f:c7:6d:54:
73:1e:cf:73:bf:b1:9a:92:c9:1c:8a:dd:b4:7e:c8:
4a:e9:36:8e:9d:07:b1:fd:06:a3:a8:f7:db:51:10:
38:2d:a9:a7:4b:e5:be:59:b3:e4:e8:76:ad:09:93:
44:0b:34:f6:96:4b:da:34:35:a9:21:8b:d7:b9:1a:
0a:cc:40:21:8a:c1:bb:be:5b:3a:0f:ae:8a:94:d4:
a3:21:2c:73:5d:b0:04:15:18:26:6b:d6:23:eb:a8:
3b:b3:11:db:fe:cc:ca:ef:32:5e:5a:d7:5e:b5:98:
33:18:16:24:06:73:e3:56:34:10:68:5a:cf:5a:91:
3d:c9:fd:0b:74:87:02:a2:8a:15:57:49:73:9c:49:
c5:90:f0:9b:a2:a7:16:08:f5:e7:d0:82:97:cc:8f:
6e:e5:ca:3a:24:60:96:4c:be:9a:6d:28:53:82:79:
f3:ab:25:db:fc:6b:96:25:ef:58:0a:50:fa:c0:57:
d3:54:c5:57:6d:92:29:a1:84:bf:25:74:a0:67:9d:
22:1c:d0:ba:7d:fb:52:53:05:8f:52:bb:a2:d9:09:
ad:60:81:18:1f:18:51:92:39:c1:37:69:48:89:99:
a5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D0:BF:C9:E7:E7:6B:F2:E5:39:48:2A:EB:ED:0C:CA:10:0E:72:0A
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/VNC_yefna_LlOUgq6-0MyhAOcgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.189.0/24
81.21.2.0-81.21.7.255
81.21.9.0-81.21.15.255
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:65:51:3a:d8:16:1d:d2:ac:90:fe:cc:a9:5f:3b:8c:8f:44:
7d:c9:65:14:47:2d:0c:64:f4:46:5f:6b:84:38:75:91:68:9a:
80:41:7c:d1:2b:ee:d4:9e:39:be:69:bc:4b:fa:88:f4:73:6c:
c1:b2:6c:dd:88:06:e6:77:b0:df:9f:63:52:25:6b:52:a4:ad:
7e:00:ef:52:25:8f:50:52:32:41:96:0e:f4:28:01:06:24:f4:
55:b7:4d:8b:4a:b2:88:ee:bd:f6:6c:43:87:6b:f2:4a:77:58:
95:27:14:82:0d:f9:f1:83:0d:e2:10:0b:f4:47:29:2c:88:6b:
dd:58:d5:c8:a7:af:17:88:ca:bb:15:c4:9c:fa:e7:fa:05:7b:
7c:2b:b8:e8:eb:78:90:ae:f0:30:3e:97:bd:73:c2:ea:46:dc:
a6:0e:20:29:ae:c7:74:5d:a5:26:4d:21:e4:34:a3:b2:f0:85:
fb:e4:b9:37:56:85:e9:2e:3c:50:47:55:c2:64:db:93:cc:41:
54:71:38:19:4c:49:c7:9b:65:d8:7d:af:01:42:e8:47:4e:ae:
84:c9:42:37:85:ac:c7:aa:2d:22:75:89:3d:73:92:dc:9c:d8:
66:f7:c5:0e:51:11:02:29:4f:58:0b:bf:9b:19:71:37:ad:36:
44:37:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org