Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/WyJcTCT_C_yG1OuWUsTU6fwVS7I.roa
File: WyJcTCT_C_yG1OuWUsTU6fwVS7I.roa (raw, json)
Hash identifier: mJANG1VK509iMJTJ1271xdEHbXe/cOo3EpqJDF1nS8E=
Subject key identifier: 5B:22:5C:4C:24:FF:0B:FC:86:D4:EB:96:52:C4:D4:E9:FC:15:4B:B2
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC98976991788B19D3227F807DEDC08ED
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/WyJcTCT_C_yG1OuWUsTU6fwVS7I.roa
Signing time: Tue 02 Jan 2024 09:37:58 +0000
ROA not before: Tue 02 Jan 2024 09:37:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.175.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.59.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
176.57.63.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 06:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:89:76:99:17:88:b1:9d:32:27:f8:07:de:dc:08:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 2 09:37:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b225c4c24ff0bfc86d4eb9652c4d4e9fc154bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:c6:80:d9:6e:61:57:e3:ac:b3:c9:cb:f7:
8d:2a:b9:1d:1b:50:2d:93:40:6e:91:fb:f6:5a:21:
88:27:67:48:21:08:ad:5c:8a:dc:40:d3:78:6b:c1:
d3:fc:50:db:62:1f:4e:04:35:bc:f6:d0:82:1b:88:
ff:6d:d5:9f:13:a2:ae:c6:13:21:86:20:a1:18:da:
b2:ed:e9:66:71:2f:9c:10:bb:89:af:ee:5f:c5:2a:
de:e0:47:ff:82:7f:5e:a7:39:21:7b:c7:03:9a:35:
08:6e:57:24:c6:ff:3f:ee:b8:aa:6b:3d:2f:fd:03:
e4:35:77:27:59:f0:05:4d:77:7e:0d:40:03:bb:2e:
64:10:c1:7c:a7:e5:73:62:88:ed:ed:ab:87:f6:0b:
2c:55:8e:c8:82:19:22:63:c5:2f:a4:6f:a8:f0:91:
f0:df:e1:12:3c:46:13:8d:38:a8:83:d5:8a:6e:d9:
4a:3a:78:06:8b:ab:c3:4f:52:41:53:75:2e:1d:d0:
52:13:e1:13:bb:e2:56:48:b2:55:d5:9d:c1:ec:7e:
91:72:00:a9:ac:b3:fe:bc:bd:b4:5e:20:bb:ad:09:
84:ef:c2:b0:4b:d5:f8:04:31:74:99:73:51:59:45:
c5:b7:91:c2:ea:52:8a:7c:f1:97:d0:4d:71:69:c8:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:22:5C:4C:24:FF:0B:FC:86:D4:EB:96:52:C4:D4:E9:FC:15:4B:B2
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/WyJcTCT_C_yG1OuWUsTU6fwVS7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.175.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:53:16:56:60:ad:90:c5:0d:94:83:b8:3c:2d:b5:43:a2:6c:
a2:1b:68:0b:6f:dc:c6:56:b7:95:f3:18:53:2a:52:d5:d4:fa:
4a:03:d6:b8:76:e8:30:17:f0:fc:61:07:a1:05:ad:d5:21:6e:
6c:d1:75:78:c7:61:24:ef:36:59:ce:91:18:49:37:6a:e0:66:
16:26:92:df:e0:f5:64:82:d5:90:d6:9e:0e:86:3d:89:47:dc:
f7:ff:dc:78:32:7f:a0:b4:e9:7e:4b:71:7a:c2:73:84:21:d1:
c3:51:2a:a1:e7:5d:c2:14:cf:96:d9:aa:9d:9b:a2:e3:51:7b:
f1:28:75:42:3f:05:5d:36:b0:17:48:32:ef:9c:86:78:f2:3a:
ec:67:c7:a9:32:1a:a5:06:19:35:5b:10:38:62:a0:d6:7b:da:
fc:22:09:e9:ed:66:30:01:9b:79:a9:1a:5c:b9:00:05:c4:d3:
0b:c4:b7:4c:20:14:38:83:ee:57:5c:67:86:d0:90:a5:f4:38:
fb:99:1d:c6:88:8f:91:94:c9:75:fb:f8:db:f6:a1:66:41:bb:
95:bb:7a:f1:e9:b4:ba:ab:a7:99:1d:64:fa:ad:ff:fb:1c:9b:
b5:25:55:28:ea:de:01:d3:8c:f3:50:9e:0a:26:bf:93:6c:d2:
d0:57:69:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org