Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZPjDCVoUg7m-QezXS-wjd1epFII.roa
File: ZPjDCVoUg7m-QezXS-wjd1epFII.roa (raw, json)
Hash identifier: 2OhpJe55zPsDq8I0+oGBmcLZbuvQ/NriZzDR5rEkJEY=
Subject key identifier: 64:F8:C3:09:5A:14:83:B9:BE:41:EC:D7:4B:EC:23:77:57:A9:14:82
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0189D3D9465A0B578FF8AFD589A7AF8A9F2B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZPjDCVoUg7m-QezXS-wjd1epFII.roa
Signing time: Tue 08 Aug 2023 06:32:59 +0000
ROA not before: Tue 08 Aug 2023 06:32:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/24 maxlen: 24
81.21.3.0/24 maxlen: 24
81.21.1.0/24 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Aug 2023 07:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:d9:46:5a:0b:57:8f:f8:af:d5:89:a7:af:8a:9f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 8 06:32:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64f8c3095a1483b9be41ecd74bec237757a91482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b0:ad:a3:a4:19:56:22:4f:b1:94:e9:2b:85:
07:3c:27:b3:3d:d5:c9:23:8c:2c:e5:c2:cc:2e:ae:
2f:50:69:58:47:c1:56:59:3a:7a:69:a8:50:94:d1:
f2:89:ef:c6:cd:43:0a:d7:f4:b5:c6:93:d0:96:30:
84:e4:2f:f0:4b:9b:46:f2:f3:3f:34:75:d8:b0:41:
12:7a:f7:6a:a5:ce:7f:ce:58:61:e7:b7:cc:8b:e1:
69:d8:da:5f:6b:fc:59:ea:30:f4:4d:bf:e5:f6:7e:
c7:92:c0:c2:69:d8:fb:05:cb:c4:08:b7:53:a5:4f:
58:e7:8b:dd:54:4f:9c:58:09:67:58:52:ac:c5:7f:
37:a8:e1:c3:78:7c:b2:de:19:45:19:5d:e7:2a:45:
07:13:a3:c3:b0:b1:d3:10:d8:e5:aa:21:47:fa:0f:
e8:c3:88:3c:1d:c3:4e:54:fe:da:27:36:45:25:da:
71:12:33:88:47:9e:10:43:bf:b2:18:c7:52:fc:23:
cd:1d:36:9f:5d:03:0f:fe:a1:b4:78:ff:2e:8c:6f:
1e:c2:2a:b0:3f:59:a9:65:0c:30:ea:cf:0d:8d:6a:
c1:0c:4b:ae:c4:cd:03:e9:be:46:3e:0c:58:01:7f:
7d:d4:d7:f5:ca:d6:c3:be:06:4c:25:c7:48:b0:20:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F8:C3:09:5A:14:83:B9:BE:41:EC:D7:4B:EC:23:77:57:A9:14:82
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZPjDCVoUg7m-QezXS-wjd1epFII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.163.255
62.72.165.0/24
62.72.169.0-62.72.170.255
62.72.177.0/24
62.72.179.0/24
62.72.181.0-62.72.182.255
62.72.185.0/24
62.72.187.0-62.72.189.255
62.72.191.0/24
81.21.1.0-81.21.3.255
81.21.8.0/24
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d3:a5:a1:be:92:80:e8:0f:fb:fc:dc:15:85:7b:bf:a9:c7:
05:2a:bf:a1:03:f7:94:54:ed:11:41:9e:c2:1b:e1:a6:80:61:
11:7c:23:95:b9:0e:87:31:3c:20:90:05:7f:bb:4a:dc:99:f8:
cc:a3:67:74:fb:8a:28:4b:7f:9e:cf:7e:75:a5:10:41:10:1a:
6f:e6:0b:57:81:db:dd:f5:5c:03:ba:9b:3d:b5:99:d6:c0:c2:
c8:c4:f8:82:1b:95:ea:7e:2a:be:e5:77:f6:be:4b:38:86:67:
4d:38:bf:75:55:9c:a8:d2:ee:d4:37:c5:bb:24:c5:9a:32:5b:
4e:51:11:94:63:09:31:a7:0d:06:9c:70:fc:ac:21:e2:93:9b:
13:c8:e5:b4:c7:ac:f6:9b:55:64:fc:ea:a2:5a:8a:e6:8a:83:
ca:61:84:0e:74:26:ae:bc:9a:a2:88:fc:e1:c2:24:24:09:d9:
e6:35:d5:4c:be:da:eb:cd:56:3a:bd:9c:ff:31:25:5c:cd:c6:
e7:29:d6:96:0d:87:24:4c:03:55:3e:e3:3c:83:40:1f:3f:f6:
3f:c6:7e:46:7d:9e:6d:80:80:6a:76:a0:29:d8:f8:6a:73:72:
c5:31:d5:0f:14:3f:65:36:17:a7:ba:83:46:7c:fd:83:d9:68:
38:5d:7c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org