Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Xl-4GGOiRuQFDGAig4KyqgmoH60.roa
File: Xl-4GGOiRuQFDGAig4KyqgmoH60.roa (raw, json)
Hash identifier: fwdBjqcEok2YqXRl871XuP3j/Vmba+vAnhcWXhyOSQI=
Subject key identifier: 5E:5F:B8:18:63:A2:46:E4:05:0C:60:22:83:82:B2:AA:09:A8:1F:AD
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018E41E75C43EE96784A950C2BDE07088B95
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Xl-4GGOiRuQFDGAig4KyqgmoH60.roa
Signing time: Fri 15 Mar 2024 11:37:45 +0000
ROA not before: Fri 15 Mar 2024 11:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.189.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 06:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:e7:5c:43:ee:96:78:4a:95:0c:2b:de:07:08:8b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 15 11:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e5fb81863a246e4050c60228382b2aa09a81fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:1e:58:1e:78:f4:cd:7c:8f:ab:1b:09:d8:
53:37:5c:3c:9a:fb:54:6d:57:4f:b4:d9:e4:cc:36:
64:fa:68:cc:e7:cd:f3:5a:59:05:fb:fe:94:60:c2:
52:23:4e:66:54:fa:b8:93:e6:cd:61:2f:11:06:4d:
77:72:e9:7d:54:a2:5e:e6:f2:04:b4:f2:2c:f1:6f:
d0:85:d5:82:e0:73:dd:75:b5:0a:b6:83:0f:dc:c9:
21:9b:cb:b8:b8:07:7a:fe:7a:1d:ec:4a:50:0d:e9:
60:ba:a6:10:62:8d:89:de:e7:3f:29:bd:b3:19:e6:
e8:99:fc:2f:69:01:dd:76:08:e2:75:f8:d1:12:95:
d9:d9:a2:b2:3f:57:a2:6a:36:05:2e:20:e3:2f:f5:
1c:4f:12:fc:0c:8a:40:a7:a7:6c:02:64:09:c8:9a:
af:50:9d:e8:8f:fb:51:38:7c:46:0f:62:78:14:c5:
eb:28:d0:e3:de:19:c9:5f:56:5f:b8:8a:7b:b0:e9:
56:6e:ad:8e:1c:60:17:c5:43:14:d2:1e:6a:36:1d:
82:f1:2a:72:b5:66:86:c3:2c:81:05:94:ea:b8:c0:
3c:8c:c5:ce:08:5f:40:78:ab:4c:9c:85:78:0b:de:
cf:6d:84:b7:41:57:78:7d:78:95:bb:b8:5c:00:b5:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5F:B8:18:63:A2:46:E4:05:0C:60:22:83:82:B2:AA:09:A8:1F:AD
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Xl-4GGOiRuQFDGAig4KyqgmoH60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.189.0-62.72.190.255
81.21.2.0-81.21.7.255
81.21.9.0-81.21.15.255
176.57.59.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
20:da:32:a6:66:af:1b:e3:6b:1d:6b:97:30:4e:0e:2c:6e:dc:
29:e6:97:c9:61:a6:d5:3c:00:20:cf:b5:ac:73:3c:51:5c:34:
35:12:80:45:d9:73:47:a7:25:3b:99:19:87:03:40:7b:dd:da:
c1:13:70:0b:23:22:52:ac:3c:bd:54:03:bd:39:eb:ab:14:0e:
e0:fb:b1:ac:30:26:3e:49:37:66:3c:7e:60:ac:c9:36:2c:02:
3a:64:22:ea:e3:37:70:e3:2a:e3:5a:91:c1:07:23:e1:d4:89:
62:22:a5:cd:cc:64:31:13:e9:d6:bf:32:38:7e:e8:c6:e5:2f:
63:9a:9a:df:20:c2:83:e9:50:cf:2f:f6:63:80:20:0c:41:86:
03:63:df:94:55:a0:81:a0:63:6b:6e:ff:87:c2:3d:41:3d:58:
8d:fd:21:89:43:7e:6a:73:d8:ed:b5:db:fd:22:10:ca:8b:87:
8c:6a:97:b7:bb:1e:32:f8:8d:96:43:03:e5:16:02:79:56:dd:
6d:e9:70:7c:74:f8:bf:31:09:ea:00:00:cc:6c:04:1b:0f:55:
e6:35:00:17:39:35:2f:59:6a:96:6c:62:a1:cd:72:19:bc:6c:
95:7a:3b:66:12:62:ef:b8:0f:a6:3c:70:a6:c9:b7:23:c1:3a:
f1:d0:74:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org