Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/XCKwh9DfXFKhacRGBo3Fe-qwigw.roa
File: XCKwh9DfXFKhacRGBo3Fe-qwigw.roa (raw, json)
Hash identifier: VNylrDOnfVXvQZKdZL4MTFD/aZfo9KVQQ7n14M0woGc=
Subject key identifier: 5C:22:B0:87:D0:DF:5C:52:A1:69:C4:46:06:8D:C5:7B:EA:B0:8A:0C
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018B22A8E4C8D0FCA832EE097152600DF420
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/XCKwh9DfXFKhacRGBo3Fe-qwigw.roa
Signing time: Thu 12 Oct 2023 06:52:55 +0000
ROA not before: Thu 12 Oct 2023 06:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.166.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.168.0/22 maxlen: 22
62.72.170.0/24 maxlen: 24
62.72.167.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.174.0/23 maxlen: 23
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.180.0/23 maxlen: 23
62.72.180.0/24 maxlen: 24
62.72.184.0/22 maxlen: 22
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 12 Oct 2023 13:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:22:a8:e4:c8:d0:fc:a8:32:ee:09:71:52:60:0d:f4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 12 06:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c22b087d0df5c52a169c446068dc57beab08a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:aa:37:4a:56:06:a3:0f:2d:bd:5a:db:d8:95:
0a:77:7f:95:23:c3:c1:1f:f7:34:b7:bd:31:e0:0c:
35:95:c9:d8:f9:29:ab:4c:7b:84:f7:02:6a:5f:d6:
7f:2d:fc:6c:63:05:3e:8c:b3:b9:7b:5a:9b:65:6d:
24:26:7f:25:1b:82:3f:e5:d2:8d:41:24:61:13:9d:
ac:9d:c5:13:4b:48:bf:14:d2:4a:a7:b1:78:7d:9f:
10:ea:0c:6a:64:f1:ab:6e:71:37:cb:9b:ea:c9:35:
62:1b:9a:d1:00:2e:d3:b1:02:db:fb:1d:b8:6d:69:
4a:41:c1:b4:4a:e7:b8:c3:d9:84:02:a0:68:13:5f:
3e:93:65:1c:3f:88:4f:10:ab:b0:5d:13:f8:f2:5f:
88:d9:e7:97:c4:bc:81:e2:f8:50:51:2c:98:1e:e9:
b3:1e:2e:60:6e:bb:fc:13:88:63:1f:61:0e:db:71:
16:3c:20:e3:73:40:b4:7f:4e:c6:d2:79:3f:86:f8:
a8:37:a2:90:e9:e0:2e:70:29:33:7a:3f:66:51:12:
de:9e:68:74:57:33:f1:20:ef:87:a6:bc:34:c1:1c:
9a:41:f1:88:a8:f6:c3:2a:23:e7:0a:6e:bd:a5:f4:
7f:81:f5:4d:92:3a:7a:1b:24:f2:be:bc:ba:ae:c3:
f1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:22:B0:87:D0:DF:5C:52:A1:69:C4:46:06:8D:C5:7B:EA:B0:8A:0C
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/XCKwh9DfXFKhacRGBo3Fe-qwigw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.171.255
62.72.173.0-62.72.175.255
62.72.179.0-62.72.182.255
62.72.184.0-62.72.189.255
62.72.191.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:eb:58:35:e7:70:59:a0:9c:77:86:b7:e0:3f:e8:47:e2:df:
23:5c:25:f9:0a:47:ee:14:82:b3:31:18:75:3a:30:81:61:3f:
43:76:7d:50:0c:49:d5:c5:2e:54:6d:46:c2:da:24:3e:8d:58:
f9:f6:fd:27:62:39:1e:3a:81:65:58:a4:33:15:fc:ed:f0:8b:
3e:7f:04:43:39:07:4a:99:99:23:f6:05:4b:cc:23:57:63:4a:
4d:bd:6e:45:bb:ca:a1:c2:a0:f2:b0:1c:2f:6b:2d:4d:72:4e:
07:3d:84:0b:3e:fe:8c:08:42:80:99:68:b9:27:98:50:dd:e0:
68:37:3e:fe:90:96:6d:d0:b6:44:85:0d:f7:ee:3e:e6:0e:a0:
45:40:2b:b9:19:c4:3f:ff:dc:df:00:de:a3:43:52:88:1a:7b:
d7:e1:c9:30:0d:40:9a:0d:36:4a:4d:88:f2:c2:7b:13:c4:50:
04:2c:20:56:a8:ec:86:27:0e:4f:12:a3:ed:13:f0:69:36:d6:
09:f4:db:5a:ba:fc:f4:3f:54:1d:71:e4:ab:30:76:4d:1a:98:
7f:b7:42:52:bf:eb:b7:1e:99:c4:5a:d4:8b:c8:50:d9:04:c7:
02:7f:ac:97:2d:da:4b:08:26:39:73:5e:f8:ea:ed:11:8e:43:
06:6a:1b:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org