Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Wv-X4NTr3nu76CNtRlIVV0yXTKY.roa
File: Wv-X4NTr3nu76CNtRlIVV0yXTKY.roa (raw, json)
Hash identifier: XuUyzdTgVu3xCxfIHZcxirG5zPuJxEHQf7HyhhhgsyM=
Subject key identifier: 5A:FF:97:E0:D4:EB:DE:7B:BB:E8:23:6D:46:52:15:57:4C:97:4C:A6
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018F80ED4645584AAD02CDB32AE7DD9DBF84
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Wv-X4NTr3nu76CNtRlIVV0yXTKY.roa
Signing time: Thu 16 May 2024 10:23:04 +0000
ROA not before: Thu 16 May 2024 10:23:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.189.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.14.0/23 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 07:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:ed:46:45:58:4a:ad:02:cd:b3:2a:e7:dd:9d:bf:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 16 10:23:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5aff97e0d4ebde7bbbe8236d465215574c974ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:df:f1:f5:4f:23:91:b7:49:ae:ce:d6:7c:
9d:a9:d5:9b:42:54:20:cb:67:18:43:24:6e:20:48:
92:fe:24:81:9d:c3:ed:17:84:50:60:b1:ad:a1:85:
ae:1a:12:02:0e:66:31:9b:bd:46:3f:81:85:76:a4:
6c:d9:2b:52:6c:c4:e6:7c:5c:b4:12:13:fa:f6:a3:
d2:3d:5b:93:c3:34:43:aa:96:b2:14:a3:2d:fc:3a:
a0:45:aa:77:c2:bd:87:21:87:b6:99:23:d2:6a:43:
ad:8d:04:be:de:ae:9a:f5:b0:95:ec:38:77:54:99:
49:f2:87:ea:76:55:ca:5b:09:e5:28:67:e4:32:13:
b0:9d:9c:f8:c2:0d:9e:10:11:06:33:28:b8:2a:7b:
57:e9:fb:13:ff:f0:ce:07:71:c6:ac:6c:6c:92:a9:
75:33:0f:99:b9:e1:40:41:d2:8e:fb:32:5a:e6:b5:
4b:61:db:95:b2:b9:2f:43:e4:49:14:ec:3c:54:48:
24:0b:02:f6:84:b0:36:b0:c5:a8:22:91:9d:3c:06:
cd:fe:9c:0b:8a:d7:36:c4:8f:41:06:86:69:36:69:
29:5b:7b:8b:ea:bd:9b:3a:da:14:49:f8:15:95:4b:
7a:54:7c:a4:3d:c4:1b:07:42:32:58:66:46:1e:d0:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FF:97:E0:D4:EB:DE:7B:BB:E8:23:6D:46:52:15:57:4C:97:4C:A6
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Wv-X4NTr3nu76CNtRlIVV0yXTKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.189.0-62.72.190.255
81.21.2.0-81.21.15.255
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:69:b3:47:fe:e5:90:0f:61:6e:2f:56:82:42:5d:d9:ee:c8:
f9:d8:d8:01:c1:c3:7b:95:65:e1:4d:5d:fa:fc:f8:0c:ef:e0:
bd:c5:a2:82:e2:e2:f1:08:78:54:e6:ff:9d:87:fd:35:ab:eb:
3d:ef:3c:e1:e5:4a:0c:27:10:4a:da:cc:02:b6:43:d0:15:3e:
e3:43:2f:97:9e:a3:1e:ff:b6:d4:ef:88:e8:1b:8d:5b:2f:f7:
6a:8c:e1:5f:cc:d3:8e:28:63:5f:88:11:85:c9:ca:64:22:41:
23:ae:73:5c:26:f4:97:6b:2b:76:0a:4c:cd:46:85:42:0a:37:
92:8d:61:2f:97:e1:42:7d:fe:f5:ed:ad:3f:dc:6c:7f:8c:35:
d5:c2:9d:64:2e:ab:0d:ef:5c:0b:2e:d1:4c:30:45:e0:e6:29:
e2:d3:6f:0f:57:1e:28:49:f7:65:14:9e:27:26:9c:76:9e:fa:
f1:74:a8:02:06:14:cf:0e:02:c0:4c:cb:71:2e:9d:e2:fe:97:
b0:b1:85:53:f6:8d:76:3a:2d:90:06:17:db:22:ad:17:9b:dc:
6c:d0:8d:2a:0e:04:d2:9d:3a:8e:65:e2:9b:ee:13:bd:91:98:
8d:63:9c:86:7f:82:75:db:4d:4f:a0:17:97:df:84:9b:1f:c7:
ef:77:9c:c3
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAY+A7UZFWEqtAs2zKufdnb+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwNTE2MTAyMzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWZmOTdlMGQ0ZWJkZTdiYmJlODIzNmQ0NjUyMTU1NzRjOTc0Y2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXTf8fVPI5G3Sa7O1nydqdWbQlQg
y2cYQyRuIEiS/iSBncPtF4RQYLGtoYWuGhICDmYxm71GP4GFdqRs2StSbMTmfFy0
EhP69qPSPVuTwzRDqpayFKMt/DqgRap3wr2HIYe2mSPSakOtjQS+3q6a9bCV7Dh3
VJlJ8ofqdlXKWwnlKGfkMhOwnZz4wg2eEBEGMyi4KntX6fsT//DOB3HGrGxskql1
Mw+ZueFAQdKO+zJa5rVLYduVsrkvQ+RJFOw8VEgkCwL2hLA2sMWoIpGdPAbN/pwL
itc2xI9BBoZpNmkpW3uL6r2bOtoUSfgVlUt6VHykPcQbB0IyWGZGHtC1qQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFFr/l+DU6957u+gjbUZSFVdMl0ymMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvV3YtWDROVHIzbnU3NkNOdFJsSVZWMHlYVEtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAE+SKID
BAM+SKAwDAMEAD5IvQMEAD5IvjAMAwQBURUCAwQEURUAAwQAsDk/MA0GCSqGSIb3
DQEBCwUAA4IBAQA/abNH/uWQD2FuL1aCQl3Z7sj52NgBwcN7lWXhTV36/PgM7+C9
xaKC4uLxCHhU5v+dh/01q+s97zzh5UoMJxBK2swCtkPQFT7jQy+XnqMe/7bU74jo
G41bL/dqjOFfzNOOKGNfiBGFycpkIkEjrnNcJvSXayt2CkzNRoVCCjeSjWEvl+FC
ff717a0/3Gx/jDXVwp1kLqsN71wLLtFMMEXg5ini028PVx4oSfdlFJ4nJpx2nvrx
dKgCBhTPDgLATMtxLp3i/pewsYVT9o12Oi2QBhfbIq0Xm9xs0I0qDgTSnTqOZeKb
7hO9kZiNY5yGf4J1201PoBeX34SbH8fvd5zD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org