Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_kOTCp4xDK4Tn8s7plYRpFuey8I.roa
File: _kOTCp4xDK4Tn8s7plYRpFuey8I.roa (raw, json)
Hash identifier: QK7xCgFwRaNCp0EINOsUC0ujUjxrZsp5Dv/gqop1WEM=
Subject key identifier: FE:43:93:0A:9E:31:0C:AE:13:9F:CB:3B:A6:56:11:A4:5B:9E:CB:C2
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018B24171A6ABF642C79727FB91969B24E5D
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_kOTCp4xDK4Tn8s7plYRpFuey8I.roa
Signing time: Thu 12 Oct 2023 13:32:55 +0000
ROA not before: Thu 12 Oct 2023 13:32:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.166.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.168.0/22 maxlen: 22
62.72.170.0/24 maxlen: 24
62.72.167.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.174.0/23 maxlen: 23
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.180.0/23 maxlen: 23
62.72.180.0/24 maxlen: 24
62.72.184.0/22 maxlen: 22
62.72.181.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 13 Oct 2023 03:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:24:17:1a:6a:bf:64:2c:79:72:7f:b9:19:69:b2:4e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 12 13:32:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe43930a9e310cae139fcb3ba65611a45b9ecbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:b5:4d:76:4d:97:84:30:ad:c8:52:cc:50:
c5:d5:e2:69:29:bb:07:3d:cf:ad:0d:f1:5f:bf:12:
2b:7b:4a:c6:19:81:4d:b9:e1:09:3b:77:92:da:ad:
69:57:0d:c8:73:aa:1c:05:98:0f:14:39:49:ce:47:
0f:8b:ae:cb:54:2d:ac:fa:88:ad:f5:df:ca:f1:d4:
9b:c7:d1:c8:af:24:fa:50:7c:f3:2f:97:20:2a:53:
61:26:58:8a:ce:b7:45:94:24:10:4c:6e:9f:61:9b:
8f:c8:16:79:1f:4f:b2:59:92:a9:6b:db:74:6a:8e:
1d:92:09:77:7e:0b:3c:2a:82:c8:d5:e5:67:fb:4d:
1e:e1:35:f0:a7:1f:06:be:ad:00:04:0c:cc:36:96:
09:c7:f1:24:66:14:a4:9c:af:d3:ea:45:ce:de:71:
bf:0d:58:34:8d:77:5d:72:42:e8:13:84:07:7d:a8:
39:7c:ac:b5:ad:d3:21:5b:df:60:53:7d:3e:2c:2a:
09:f8:48:dd:71:59:d1:e3:a0:1c:76:91:b3:7b:42:
2e:14:d7:bf:5e:04:2c:62:a1:eb:2d:9a:3f:7f:89:
5e:3b:1c:3b:78:71:38:cc:6f:ef:52:9b:5c:52:e6:
73:b1:f2:74:1d:fc:63:08:f1:94:ac:80:c1:a1:17:
98:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:43:93:0A:9E:31:0C:AE:13:9F:CB:3B:A6:56:11:A4:5B:9E:CB:C2
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_kOTCp4xDK4Tn8s7plYRpFuey8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.171.255
62.72.173.0-62.72.175.255
62.72.179.0-62.72.181.255
62.72.184.0/22
62.72.191.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:3e:45:89:fd:4b:50:21:68:18:c0:b7:81:87:12:4f:4c:50:
8b:a9:93:b7:f7:75:3e:46:97:57:a8:39:63:35:a1:7d:3b:3e:
db:f8:df:9b:bf:25:b0:03:a2:ba:93:e9:1c:ea:17:72:a8:55:
ee:c1:3d:1c:b8:f1:a9:6e:df:e2:e6:0d:a1:41:f1:98:34:0b:
cf:e1:65:cd:b2:f6:cb:66:22:41:36:fa:10:66:eb:9c:ba:7f:
65:3a:da:3b:c6:ed:cf:26:32:60:62:ce:0d:b8:9c:ef:03:cc:
e8:68:18:20:18:ef:4d:8a:e5:57:97:50:82:64:f4:07:a6:8c:
bb:e9:ce:f3:be:6b:be:07:13:04:0d:3c:87:cb:7e:6f:94:f3:
8c:c8:ab:33:b4:78:42:b6:19:56:9b:49:b4:e5:39:03:46:b9:
5c:87:fb:84:58:e9:e4:0a:83:55:9e:9f:45:2f:5d:bd:6a:57:
32:13:c9:81:2d:0f:1a:ec:25:9a:92:6b:a6:7c:ad:ed:27:ab:
2c:e8:58:5a:a7:96:c7:cd:58:21:a9:c4:4c:33:e9:91:da:97:
62:cc:e0:62:65:a7:be:49:35:bb:45:5f:77:b9:ef:8e:8e:15:
53:a4:3c:a5:dd:89:f6:b4:2e:ea:48:61:3e:44:2f:21:c0:cb:
c4:e0:73:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org