Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZQEJIQiFP-XqVAUEpcQeVR_ih7w.roa
File: ZQEJIQiFP-XqVAUEpcQeVR_ih7w.roa (raw, json)
Hash identifier: bFNs6bJqKkWks0uZEI6AiZeBAkWF9QMgIA3oFi/rdqg=
Subject key identifier: 65:01:09:21:08:85:3F:E5:EA:54:05:04:A5:C4:1E:55:1F:E2:87:BC
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018BDD2DB2B2D3FCA43458E108382D69A7DE
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZQEJIQiFP-XqVAUEpcQeVR_ih7w.roa
Signing time: Fri 17 Nov 2023 12:07:21 +0000
ROA not before: Fri 17 Nov 2023 12:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.168.0/22 maxlen: 22
62.72.174.0/23 maxlen: 23
62.72.180.0/23 maxlen: 23
62.72.184.0/22 maxlen: 22
62.72.191.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.4.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
176.57.59.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 19:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:2d:b2:b2:d3:fc:a4:34:58:e1:08:38:2d:69:a7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 17 12:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6501092108853fe5ea540504a5c41e551fe287bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:c5:49:57:14:8a:d8:c9:88:0f:48:ff:e0:
da:da:23:11:4a:e3:a3:31:ab:7d:a9:e0:c7:55:02:
fd:c6:b6:4c:d0:9d:a8:35:05:f1:4e:f5:84:de:32:
77:f5:ef:91:d9:f0:91:89:a5:11:d5:90:24:50:65:
c6:2c:d8:03:5c:ed:4d:1b:af:e4:cd:d9:37:c7:29:
1a:fa:e1:50:d8:ff:4c:a9:5c:79:60:b4:1d:f5:6f:
e6:0f:64:3a:a6:81:70:10:36:7f:1a:6b:c6:1e:d3:
b1:a8:f7:10:75:3c:8b:a5:d9:26:a0:21:56:92:de:
b6:f1:8b:7d:0e:d4:4d:7e:fd:0e:ac:3a:3a:9f:3a:
76:71:db:5e:d6:a2:30:28:c0:6e:fe:a5:0f:d4:67:
7c:72:e3:73:c1:20:97:eb:28:51:7e:dc:b7:c9:4f:
34:46:9e:45:dd:25:55:93:c8:82:85:19:28:74:07:
30:d7:e7:40:e2:3d:0d:b2:28:69:20:1b:26:fd:28:
f1:66:55:ba:91:0a:f0:04:92:db:2e:54:55:2e:5c:
42:ad:e6:f4:18:75:48:12:bc:87:f7:41:af:12:fc:
1e:5c:bd:21:66:25:71:b7:16:65:60:dd:9a:0b:f9:
1a:be:85:cb:7a:5f:b6:47:e1:dc:87:eb:8d:5a:00:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:01:09:21:08:85:3F:E5:EA:54:05:04:A5:C4:1E:55:1F:E2:87:BC
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZQEJIQiFP-XqVAUEpcQeVR_ih7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.171.255
62.72.174.0/23
62.72.180.0/23
62.72.184.0-62.72.189.255
62.72.191.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
13:53:41:8d:76:81:73:5b:bb:49:8a:5c:66:6f:51:d4:b3:90:
c1:33:2f:d0:21:b4:e1:f9:2b:c3:52:db:57:17:6b:90:3e:cf:
47:e8:39:0e:eb:6e:51:00:69:37:0a:11:63:7b:b9:ce:dc:9d:
11:e3:b2:7a:f6:45:fc:05:bc:86:ae:76:60:a5:2a:69:76:b3:
cc:c5:45:2f:38:79:41:8e:65:84:fb:9f:0f:7f:f1:28:dd:74:
1d:3b:c6:c8:9b:fb:d1:9f:e0:cb:0a:31:6a:db:08:9f:9a:94:
06:1e:e7:fc:b0:15:ef:5a:25:d5:19:f7:d1:5d:68:0a:7d:a2:
c2:f0:53:f8:c3:89:1d:23:b4:71:83:4d:20:a0:12:a1:ad:f1:
fd:f3:c7:f4:b5:a3:9a:47:e1:02:7d:52:fe:12:09:2d:0f:5e:
cf:66:e1:cf:a1:41:c7:8f:75:01:07:64:ea:9f:79:76:80:72:
57:87:8e:44:1d:fb:53:bc:f8:ea:90:93:6e:92:39:c7:f1:4b:
c1:bf:42:d3:bb:cd:f5:7a:7b:51:05:bc:e0:e8:56:82:bc:bb:
48:9d:fa:e8:c6:c9:a7:d2:26:5d:7f:7c:3e:1c:ed:b2:7e:e6:
89:b9:41:a8:8d:28:f1:4f:ed:c6:d9:de:79:da:e1:f8:ab:03:
86:6c:d7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org