Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Yk0XqvdmUL_Kj3ifGVGxz-9pN9I.roa
File: Yk0XqvdmUL_Kj3ifGVGxz-9pN9I.roa (raw, json)
Hash identifier: LsI58Wn8nwqv4qLf3v3rMsrDi3xMRVfPFFAQPOEyp2A=
Subject key identifier: 62:4D:17:AA:F7:66:50:BF:CA:8F:78:9F:19:51:B1:CF:EF:69:37:D2
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01938133B5F28D5245EC99B34861BC39F64E
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Yk0XqvdmUL_Kj3ifGVGxz-9pN9I.roa
Signing time: Sun 01 Dec 2024 07:51:10 +0000
ROA not before: Sun 01 Dec 2024 07:51:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.168.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:81:33:b5:f2:8d:52:45:ec:99:b3:48:61:bc:39:f6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 1 07:51:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=624d17aaf76650bfca8f789f1951b1cfef6937d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:ea:5f:ef:96:10:78:1c:84:f2:55:bd:dc:
d6:17:86:ef:c3:d5:d6:a2:f1:48:98:5c:c6:82:39:
3f:48:f6:fe:16:ce:3c:a7:f7:44:bc:68:aa:e6:ca:
72:8a:fc:d6:c5:e9:70:b2:41:c9:3f:ba:65:a2:bd:
86:83:96:57:58:34:e0:83:21:a1:79:76:d9:10:d4:
56:40:b0:9c:99:6a:f1:8d:4d:4c:ce:b8:de:a4:58:
c3:af:62:08:9f:f2:bc:f6:cf:e3:b6:19:18:53:a7:
a9:0a:10:ad:78:dc:e7:e1:12:a2:3d:01:ee:06:56:
9e:ae:8b:bb:2b:3c:cb:d2:87:dc:10:d9:b7:63:4e:
46:a1:f6:22:0a:1e:b3:18:b3:e2:8a:55:d6:09:e6:
3c:ca:f6:4f:b4:56:de:68:eb:36:c1:16:7e:e9:48:
47:ec:6c:7a:08:e4:e7:61:aa:65:ab:a5:58:cc:21:
1f:a5:f9:54:72:89:23:94:e6:14:0a:ed:3d:48:24:
82:15:aa:b4:d9:3e:56:ed:7d:3b:81:78:65:90:11:
c3:a8:e6:65:6a:e0:3c:69:0a:7e:35:c0:1b:f0:ce:
83:43:0e:f1:7d:0e:c1:d4:04:66:45:cc:4d:b7:9a:
8b:0d:59:c2:ca:ac:9e:bf:44:c7:0b:88:a0:f3:49:
d7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4D:17:AA:F7:66:50:BF:CA:8F:78:9F:19:51:B1:CF:EF:69:37:D2
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Yk0XqvdmUL_Kj3ifGVGxz-9pN9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.185.0/24
81.21.2.0-81.21.7.255
176.57.56.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a7:28:f5:2f:7d:e5:a9:e5:c2:cb:d6:f4:8a:fd:2e:db:25:
00:98:02:7a:5a:d1:c7:d1:72:eb:6e:6e:d1:a1:7c:b6:83:be:
96:c6:fe:b2:56:d5:2b:0c:9f:c6:7d:50:94:2a:7c:88:98:a0:
89:6e:15:da:5a:b9:5e:ad:fe:69:b1:55:73:3b:5e:99:a4:bf:
7a:3e:9c:85:70:27:a4:e4:52:b5:59:12:77:33:0a:98:89:d7:
9b:e5:4f:1d:bf:9e:2a:68:d4:93:85:01:27:bb:43:9a:e4:a9:
f4:ff:c5:64:40:26:54:53:44:32:0a:e8:16:1d:7f:97:fd:53:
44:ae:51:f1:23:ea:fc:52:14:2f:87:77:28:4c:7f:3e:f7:9d:
34:87:7f:bf:36:b0:6b:96:fd:91:f3:2f:fd:dc:87:8d:1f:df:
fc:8f:62:20:06:ee:68:68:29:10:1a:84:87:eb:67:92:f0:e7:
a7:af:55:42:cc:40:20:eb:fa:5e:98:ed:92:94:a9:3b:4b:7c:
0e:a6:cd:1c:ee:07:7a:1a:cc:f4:c2:35:95:a9:ee:a3:25:0c:
08:af:b1:86:3c:9d:7d:33:62:20:3d:5f:68:d8:5e:a4:b2:2e:
9b:92:1d:16:b0:84:30:25:49:1b:00:ec:f4:2f:80:47:02:32:
bc:04:a3:81
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZOBM7XyjVJF7JmzSGG8OfZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQxMjAxMDc1MTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjRkMTdhYWY3NjY1MGJmY2E4Zjc4OWYxOTUxYjFjZmVmNjkzN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvufqX++WEHgchPJVvdzWF4bvw9XW
ovFImFzGgjk/SPb+Fs48p/dEvGiq5spyivzWxelwskHJP7plor2Gg5ZXWDTggyGh
eXbZENRWQLCcmWrxjU1MzrjepFjDr2IIn/K89s/jthkYU6epChCteNzn4RKiPQHu
Blaerou7KzzL0ofcENm3Y05GofYiCh6zGLPiilXWCeY8yvZPtFbeaOs2wRZ+6UhH
7Gx6COTnYaplq6VYzCEfpflUcokjlOYUCu09SCSCFaq02T5W7X07gXhlkBHDqOZl
auA8aQp+NcAb8M6DQw7xfQ7B1ARmRcxNt5qLDVnCyqyev0THC4ig80nXeQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFGJNF6r3ZlC/yo94nxlRsc/vaTfSMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvWWswWHF2ZG1VTF9LajNpZkdWR3h6LTlwTjlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAE+SKID
BAA+SKgDBAA+SLkwDAMEAVEVAgMEA1EVAAMEALA5OAMEALA5PzANBgkqhkiG9w0B
AQsFAAOCAQEAPKco9S995anlwsvW9Ir9LtslAJgCelrRx9Fy625u0aF8toO+lsb+
slbVKwyfxn1QlCp8iJigiW4V2lq5Xq3+abFVcztemaS/ej6chXAnpORStVkSdzMK
mInXm+VPHb+eKmjUk4UBJ7tDmuSp9P/FZEAmVFNEMgroFh1/l/1TRK5R8SPq/FIU
L4d3KEx/PvedNId/vzawa5b9kfMv/dyHjR/f/I9iIAbuaGgpEBqEh+tnkvDnp69V
QsxAIOv6XpjtkpSpO0t8DqbNHO4HehrM9MI1lanuoyUMCK+xhjydfTNiID1faNhe
pLIum5IdFrCEMCVJGwDs9C+ARwIyvASjgQ==
-----END CERTIFICATE-----
Generated at Wed Mar 12 20:03:28 2025 by rpki-client