Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/XWLCSYjt2D2hwDKFnwvNoYbnsSc.roa
File: XWLCSYjt2D2hwDKFnwvNoYbnsSc.roa (raw, json)
Hash identifier: fycdjda68/JhCXVlI/SzvlsH+4PYQGsitzOVqsFRgPw=
Subject key identifier: 5D:62:C2:49:88:ED:D8:3D:A1:C0:32:85:9F:0B:CD:A1:86:E7:B1:27
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019251D9992A5BFFB14F690FAC831455B896
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/XWLCSYjt2D2hwDKFnwvNoYbnsSc.roa
Signing time: Thu 03 Oct 2024 10:07:47 +0000
ROA not before: Thu 03 Oct 2024 10:07:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.14.0/23 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 06:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:d9:99:2a:5b:ff:b1:4f:69:0f:ac:83:14:55:b8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 3 10:07:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d62c24988edd83da1c032859f0bcda186e7b127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9d:2b:da:2c:42:bf:f0:27:92:50:4e:ef:16:
6e:65:2c:64:92:24:f0:1b:7a:4e:e0:a8:ce:e3:45:
15:83:f0:29:2d:e8:04:88:10:39:05:84:ad:e4:bd:
cc:fd:cb:64:88:35:4e:57:14:a0:ce:04:e0:d2:09:
3f:22:58:9e:b7:04:ba:af:6d:8a:7a:66:4f:e1:2a:
05:57:91:6f:88:6c:cf:5e:a7:2b:17:bc:99:c6:a5:
3c:1b:7a:0b:61:24:c1:63:bc:1f:8b:f3:8e:86:fc:
87:b9:2b:2f:7b:0e:88:cd:e9:59:30:5a:ed:ce:ec:
15:da:68:33:4d:9d:c8:73:ee:0f:0f:fe:19:81:a2:
3a:9b:15:99:de:68:6f:e5:0b:2a:8b:5c:df:34:a5:
07:07:37:77:3d:da:d2:77:6e:0b:cb:76:e7:59:c4:
18:a8:19:e5:9c:d8:18:c3:be:d0:f4:14:75:73:48:
04:ed:b1:8d:2a:e7:1f:43:20:fa:8d:e9:e5:5d:64:
11:e5:05:ec:f2:b8:89:bd:1c:a6:f4:fe:8a:14:ee:
e7:13:8e:65:b1:f0:d6:2d:b8:23:a1:d0:2a:33:7b:
62:cb:52:f7:44:33:cd:ca:ef:09:fd:64:a3:24:10:
27:1a:17:6b:c2:84:e1:3d:4a:d3:67:e0:ca:30:c4:
c3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:62:C2:49:88:ED:D8:3D:A1:C0:32:85:9F:0B:CD:A1:86:E7:B1:27
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/XWLCSYjt2D2hwDKFnwvNoYbnsSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.189.0/24
81.21.2.0-81.21.15.255
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:6c:32:22:86:4f:4b:b9:11:65:1b:62:f3:af:c1:73:2c:ca:
7c:dc:a5:0a:e4:1d:08:26:14:ad:62:30:18:e3:da:ad:55:f6:
b8:5f:3f:19:dd:fc:07:5f:c4:28:0b:66:95:a0:f7:37:75:0d:
27:d5:a5:ab:22:2b:8d:3a:d6:8d:d0:7b:18:80:e9:9c:c9:0d:
b5:c4:5e:19:ef:f2:cb:46:f4:c8:5e:e1:3e:2f:f7:47:5e:4c:
91:ee:0f:e5:d1:fc:a6:a7:ca:fe:ce:06:89:9a:0b:68:93:ca:
ff:c4:ca:d3:e1:0b:92:ef:88:bf:a8:b7:02:62:6c:83:e8:57:
f5:30:1a:3f:5b:af:99:95:b3:3c:42:2a:71:bd:09:73:2c:f8:
80:ce:51:9b:04:9e:a8:7f:65:80:90:fc:c9:d0:db:9a:a9:9b:
a1:42:4e:e9:68:c5:85:06:f6:88:32:4f:0a:37:d2:6b:89:8b:
f0:2f:64:5d:b4:6c:48:3c:87:84:69:4c:8d:5a:7f:fc:e1:ce:
7f:3c:9a:aa:c3:ff:b1:73:54:e3:1a:e2:ca:43:37:d5:da:d8:
2e:da:6c:05:5e:04:ea:38:c0:ce:8b:49:77:e0:8e:03:eb:dd:
fa:e5:c8:c8:18:bb:b2:fa:69:1e:fe:d7:2c:e8:85:94:44:0a:
d9:dc:7b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 07:27:47 2024 by rpki-client on console-ams.rpki-client.org