Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Z12jiM8J6ODHHE1h7Di6FbpcFVE.roa
File: Z12jiM8J6ODHHE1h7Di6FbpcFVE.roa (raw, json)
Hash identifier: 4isKGx/kiTQRMQq00jSd5maNPWi/TauU0zzc4SNgjyk=
Subject key identifier: 67:5D:A3:88:CF:09:E8:E0:C7:1C:4D:61:EC:38:BA:15:BA:5C:15:51
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018A69402C6EC373FE0A7B6885110A66D6ED
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Z12jiM8J6ODHHE1h7Di6FbpcFVE.roa
Signing time: Wed 06 Sep 2023 06:48:47 +0000
ROA not before: Wed 06 Sep 2023 06:48:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.164.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
62.72.171.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.1.0/24 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Sep 2023 06:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:40:2c:6e:c3:73:fe:0a:7b:68:85:11:0a:66:d6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 6 06:48:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=675da388cf09e8e0c71c4d61ec38ba15ba5c1551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:f1:f6:96:a6:a3:97:9c:f4:05:d4:9a:08:
29:41:b4:b8:e0:0a:04:97:11:e6:c4:4c:cc:7a:04:
b4:eb:be:dd:47:17:2a:6d:8c:c0:1e:42:52:c2:bc:
a1:59:f2:df:1c:96:fb:e3:8c:62:4a:e6:b2:58:b1:
dc:71:07:26:be:56:8a:51:93:5a:18:d3:1d:3c:53:
0e:a9:07:3b:48:8d:68:97:3f:4e:b6:1e:19:11:1c:
2c:53:c0:d2:46:6b:35:af:ba:01:d8:79:e2:46:12:
34:ec:29:ac:ce:59:88:9c:ab:94:13:eb:7d:77:b9:
96:de:85:49:96:a8:f5:76:a6:f5:15:80:b8:74:66:
8c:c6:e5:01:5f:87:ec:a7:cd:27:e8:34:b4:7f:67:
d8:a9:99:ff:10:84:05:79:40:d7:5a:51:36:a7:10:
77:67:0f:c6:18:a2:6e:fe:a8:77:ce:ea:8f:e4:ca:
94:e2:bb:b0:a1:51:f2:2f:12:16:78:8d:5c:ab:d3:
1f:bf:98:2b:8f:39:d9:1c:04:dd:d6:08:0a:72:7f:
3b:8b:ba:17:84:06:a1:65:2c:6f:b2:c8:be:2f:e6:
1f:a6:33:30:2a:0f:8f:a6:04:be:5d:8f:99:06:29:
07:3d:d9:2d:f6:5a:4b:60:9b:63:e8:b5:0b:f2:5d:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5D:A3:88:CF:09:E8:E0:C7:1C:4D:61:EC:38:BA:15:BA:5C:15:51
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Z12jiM8J6ODHHE1h7Di6FbpcFVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.165.255
62.72.168.0/22
62.72.173.0-62.72.175.255
62.72.177.0/24
62.72.179.0/24
62.72.181.0-62.72.182.255
62.72.185.0-62.72.189.255
62.72.191.0/24
81.21.1.0-81.21.8.255
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.58.0/23
176.57.62.0/23
Signature Algorithm: sha256WithRSAEncryption
51:e7:3b:8f:e0:6a:32:aa:82:f6:64:15:8e:2d:2e:c0:bd:a2:
08:f0:b7:88:e5:56:6b:04:81:07:b0:77:b8:25:4c:89:48:bf:
d2:e3:c8:9a:90:b3:7d:4c:11:ce:21:75:af:4a:c8:2c:88:4f:
28:aa:27:56:4b:a3:27:4a:15:50:b1:e8:46:92:95:45:47:77:
50:f4:05:f3:86:44:54:d7:4c:bb:a1:5f:de:f5:d7:68:f3:a9:
51:8c:38:e4:35:ef:74:cd:de:6a:a3:f2:0c:5b:5a:69:1f:ab:
33:b0:78:9c:57:e4:16:d3:a2:be:38:c7:83:c2:76:09:c9:da:
19:88:c9:cf:d4:dc:1b:f2:a8:7b:f7:ac:c7:b0:3d:74:57:6b:
87:ef:e6:42:52:12:44:6c:f7:fe:e2:64:e9:40:4e:07:a8:78:
a6:85:2e:6e:ea:d2:35:cc:2e:b1:1e:16:9a:27:1b:a5:23:34:
bc:47:00:08:55:c1:d9:80:29:41:e4:4c:1d:ed:f8:20:8e:72:
7a:40:29:82:86:7c:b0:06:0f:17:9f:fc:43:8b:b2:23:1d:a5:
fa:97:4c:10:52:e9:0e:cb:45:c4:2a:73:85:b4:45:77:53:91:
e4:d3:37:ca:d4:0e:f4:3f:50:4c:c8:e0:be:3b:b1:5f:1e:2c:
6d:bd:f7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org