Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Whc1tYe0e0SGREBDlhRkzkz7uKU.roa
File: Whc1tYe0e0SGREBDlhRkzkz7uKU.roa (raw, json)
Hash identifier: PGifw34yNdq7RDi4eoSL/DwdA2RJsOJxToLT+H7Ulc0=
Subject key identifier: 5A:17:35:B5:87:B4:7B:44:86:44:40:43:96:14:64:CE:4C:FB:B8:A5
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018BB2D2BDBB113329890A20CF707D6E4568
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Whc1tYe0e0SGREBDlhRkzkz7uKU.roa
Signing time: Thu 09 Nov 2023 06:43:57 +0000
ROA not before: Thu 09 Nov 2023 06:43:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.164.0/22 maxlen: 22
62.72.166.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.168.0/22 maxlen: 22
62.72.170.0/24 maxlen: 24
62.72.167.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.174.0/23 maxlen: 23
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.180.0/23 maxlen: 23
62.72.184.0/22 maxlen: 22
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 09 Nov 2023 06:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b2:d2:bd:bb:11:33:29:89:0a:20:cf:70:7d:6e:45:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 9 06:43:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a1735b587b47b4486444043961464ce4cfbb8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:8a:02:6d:b2:57:05:84:2f:22:16:ef:bb:
ec:c8:fe:39:0d:51:de:83:c5:09:6b:16:0a:5b:32:
44:c9:2f:ac:c9:a9:98:d8:70:f7:99:e2:be:23:35:
43:c0:f4:17:b9:ee:5a:14:df:be:51:33:31:45:93:
67:a6:cc:d1:a3:fe:52:2d:1e:96:40:0c:41:2f:c5:
c8:29:d9:4f:e2:b3:44:49:26:4f:44:ab:4c:f9:95:
bf:dc:4c:62:11:34:11:5d:4f:ec:01:10:52:1f:77:
51:5b:7e:2d:4c:63:86:4a:a7:aa:b9:fc:b3:83:b4:
d9:d8:e8:61:5a:b8:6a:a2:58:b7:89:a8:60:f0:de:
82:65:b1:be:c5:94:49:60:74:87:68:5c:23:1c:a3:
4a:6e:73:f9:83:22:64:c3:25:5a:92:96:ed:38:6c:
fd:70:e9:93:e9:30:df:7a:01:08:ba:26:85:af:4a:
49:15:f9:f4:83:d6:c8:14:fe:93:ea:02:bf:db:41:
9b:11:38:6b:f2:3b:ff:62:c2:e9:50:e8:f4:83:da:
8f:21:5f:dd:66:4e:b7:91:ce:61:25:66:86:f2:fb:
a7:f1:21:89:33:c4:98:ff:75:ca:5d:34:87:73:b1:
7f:13:25:2d:17:0c:26:79:61:52:3f:34:8f:ef:73:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:17:35:B5:87:B4:7B:44:86:44:40:43:96:14:64:CE:4C:FB:B8:A5
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Whc1tYe0e0SGREBDlhRkzkz7uKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.171.255
62.72.173.0-62.72.175.255
62.72.179.0-62.72.182.255
62.72.184.0-62.72.189.255
62.72.191.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:6e:2b:1c:4e:34:6a:09:c4:58:ea:d8:84:b2:51:38:a0:f7:
02:03:8c:03:0b:75:23:60:db:47:f9:b3:c4:af:b1:af:4f:cd:
81:05:52:dd:72:4d:2e:a0:c4:fd:08:50:54:65:a0:7a:01:32:
a6:38:13:9b:bc:2a:38:c2:88:6b:f9:c7:bc:7e:32:3e:b5:ce:
77:b4:63:49:bd:bd:ba:15:e4:31:1a:a1:51:82:4a:05:74:cb:
e0:20:7d:1f:11:e2:34:8d:57:31:56:cf:fc:33:ab:ed:64:47:
4f:c6:3d:e8:3d:f5:ad:12:56:b5:dc:f8:e7:13:a6:51:d1:53:
b5:a6:4c:47:8a:a5:de:2b:f9:bb:aa:07:26:10:98:5c:c5:0f:
4d:68:ff:7f:bb:f2:c7:8c:97:b3:8c:78:ab:41:38:4d:d9:b3:
13:0c:71:7f:be:a9:fd:c1:28:27:b1:59:90:4e:e1:06:5e:3c:
5c:90:14:7b:5a:56:f1:5b:2a:7e:c7:3f:a2:fc:bf:52:58:59:
f2:8a:93:e0:79:60:9f:04:58:f6:4b:e6:b5:d6:88:13:72:c0:
26:89:ce:35:78:41:4d:c7:7e:bf:53:f6:79:f1:36:3a:6e:76:
94:95:e1:e2:6e:6c:aa:fc:97:3a:7e:fe:41:f0:59:6b:83:2e:
0a:b3:ae:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org