Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_At4arKmg3Yb2n8XgTGnvcM6fZI.roa
File: _At4arKmg3Yb2n8XgTGnvcM6fZI.roa (raw, json)
Hash identifier: VG/Tmdef6WS8En6ZutVEvS05pe6jaRgsa1YTerhhOQM=
Subject key identifier: FC:0B:78:6A:B2:A6:83:76:1B:DA:7F:17:81:31:A7:BD:C3:3A:7D:92
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019483B2E385D331839E6DE725CABEE68D0F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_At4arKmg3Yb2n8XgTGnvcM6fZI.roa
Signing time: Mon 20 Jan 2025 12:32:06 +0000
ROA not before: Mon 20 Jan 2025 12:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.185.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.5.0/24 maxlen: 24
81.21.6.0/24 maxlen: 24
81.21.7.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 08:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:b2:e3:85:d3:31:83:9e:6d:e7:25:ca:be:e6:8d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 20 12:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc0b786ab2a683761bda7f178131a7bdc33a7d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d1:9a:9b:bb:e2:2f:26:00:e4:20:f0:50:71:
e7:ce:1b:b1:57:e8:00:39:7b:d7:3a:c5:16:a6:3e:
7b:25:e7:9c:03:e3:9c:f6:b5:dd:e2:d8:21:76:c3:
29:bd:2f:43:76:b3:66:fc:ce:07:50:9d:5b:08:34:
82:c9:fc:95:00:02:55:3a:78:0a:5d:95:3d:02:e3:
65:3c:e6:59:87:49:d5:28:0b:78:2e:e2:e7:15:4a:
1a:7e:dc:16:88:d5:c1:63:2d:81:9a:de:72:d5:17:
ce:9f:8d:ea:90:17:12:eb:68:9a:da:ad:94:09:db:
67:a0:f9:6b:f6:4a:c3:ac:34:70:04:bb:1e:40:c2:
98:fa:bf:dd:20:95:63:57:0d:29:2d:2d:b4:73:a1:
40:a8:cc:73:90:c7:7a:bb:6e:e4:18:87:aa:86:b7:
b1:4a:28:30:be:38:90:66:49:cf:88:84:39:17:c3:
36:24:a9:ad:8e:3e:48:98:9c:c3:81:60:77:6e:ff:
72:de:61:3c:77:61:b2:9d:18:98:a7:8e:ee:87:e9:
6c:57:ed:a7:55:de:fa:32:80:44:08:8a:15:56:69:
db:c3:44:cd:e3:df:18:7b:4a:54:f9:b5:00:90:1e:
b1:f3:49:b0:7f:41:35:35:45:66:c0:a3:d8:d7:12:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0B:78:6A:B2:A6:83:76:1B:DA:7F:17:81:31:A7:BD:C3:3A:7D:92
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_At4arKmg3Yb2n8XgTGnvcM6fZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.185.0/24
62.72.191.0/24
81.21.2.0-81.21.7.255
176.57.51.0/24
176.57.56.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:97:1c:89:5e:f4:59:8b:c0:10:9e:07:d2:8a:9b:f9:23:94:
90:f3:f4:e7:8a:ba:bc:11:76:35:68:be:ae:66:f6:2f:f7:a7:
e8:23:d9:6d:43:d5:5a:f3:a6:e9:9f:fd:27:59:b0:5a:12:ed:
0f:90:13:ae:3c:e3:14:91:af:4b:e3:d1:a9:6b:00:06:17:fa:
2d:bc:0e:f9:91:7f:b5:f2:69:a9:37:13:1f:db:6e:a1:5e:76:
fc:60:e9:59:54:4a:af:7b:95:9f:59:42:ea:ef:0c:c6:33:1a:
95:c6:d9:4b:a5:2b:be:f3:5b:e7:cf:1b:b7:e5:0a:47:a8:d9:
d0:d5:7d:5c:34:fb:03:e3:52:a0:c9:db:1b:2b:91:48:80:ad:
a8:65:80:71:2b:c8:6c:ec:5e:ba:ea:d1:7f:b2:9f:92:63:d0:
69:60:37:37:f9:14:0d:88:bd:8c:bb:fe:94:00:af:7a:e1:a3:
0a:f8:9a:cf:e5:36:50:83:09:07:07:15:16:5b:b0:6c:77:ad:
10:a0:41:87:61:50:0f:66:9f:21:da:37:4c:47:49:a2:94:cb:
98:48:2d:67:bc:f7:1f:f2:0e:9f:ba:6d:c9:f3:45:6e:16:72:
a3:68:0a:7a:b0:40:f0:dd:5a:32:b7:89:48:b0:59:24:c4:9c:
d1:1e:65:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 20:04:41 2025 by rpki-client