Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/b_Ab7UKM8Rmluwo_8zriPY5s35g.roa
File: b_Ab7UKM8Rmluwo_8zriPY5s35g.roa (raw, json)
Hash identifier: VyQ5T76qrTx4BPjOECqAavQHGNjJ6H4JMkL/Z3ZY1+Q=
Subject key identifier: 6F:F0:1B:ED:42:8C:F1:19:A5:BB:0A:3F:F3:3A:E2:3D:8E:6C:DF:98
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C9765C4DD9C56B1960152E25AD5C04475
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/b_Ab7UKM8Rmluwo_8zriPY5s35g.roa
Signing time: Sat 23 Dec 2023 15:57:58 +0000
ROA not before: Sat 23 Dec 2023 15:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
176.57.58.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.59.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
176.57.63.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:97:65:c4:dd:9c:56:b1:96:01:52:e2:5a:d5:c0:44:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 23 15:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ff01bed428cf119a5bb0a3ff33ae23d8e6cdf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:87:60:4c:94:a8:e8:c1:f1:0f:33:c1:c7:
68:88:11:21:b4:c0:1d:21:35:40:c5:03:40:e7:72:
a2:84:e2:da:cf:ac:41:7d:6f:8f:d3:09:ae:64:05:
1f:e2:13:b3:a3:22:3b:5e:11:a3:31:87:06:c3:22:
05:21:d5:e9:cd:b1:3e:28:f1:0c:df:71:1f:e4:d0:
dd:f3:be:23:8b:33:e6:d2:2a:19:2a:3d:a5:c4:52:
dc:f5:d0:c5:1d:c3:ac:37:4d:0c:5d:06:8f:64:eb:
be:f6:c9:4d:51:ae:d9:db:e3:ca:8a:b5:72:37:a1:
d8:c2:5d:8f:8e:7c:5a:37:a7:ae:da:9c:6b:68:57:
16:85:20:ba:c7:8d:a9:4c:13:78:ee:dc:c4:9f:dd:
b5:2a:4b:99:54:48:bb:24:e4:79:bb:b6:c0:a8:64:
02:7f:98:14:13:b9:a3:b5:9b:e0:3a:bc:b6:4e:2f:
f8:4f:ae:09:33:89:e6:f2:b2:1b:3d:33:ee:55:29:
2a:4e:81:23:63:a2:f4:78:99:66:c9:b3:71:77:d8:
4a:77:f7:bb:a1:64:4f:dd:98:37:f1:43:20:08:5a:
37:13:71:7c:1c:3b:b3:4c:86:28:b5:14:1a:c3:d9:
62:26:ff:bd:2d:21:f2:fe:ac:8e:0e:07:f3:2b:10:
57:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F0:1B:ED:42:8C:F1:19:A5:BB:0A:3F:F3:3A:E2:3D:8E:6C:DF:98
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/b_Ab7UKM8Rmluwo_8zriPY5s35g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:77:bf:d6:af:83:ae:45:b0:7f:ca:4a:26:50:84:e7:fc:3d:
e8:2c:1e:fb:3c:d2:cc:f5:c9:76:87:a4:60:f0:f3:c0:9f:9c:
ea:42:1d:c1:13:13:63:8e:28:e9:ae:17:03:8c:49:82:7d:90:
ad:5b:6c:07:5d:2a:c2:95:f2:7a:06:21:e5:f4:07:82:53:ff:
4f:12:eb:40:59:ad:94:a7:14:0f:dd:7e:7c:28:df:f5:40:bc:
eb:ae:ac:0c:08:bb:a2:38:43:7b:1f:a4:bb:b2:2c:56:28:1c:
a7:06:06:01:96:c1:9a:87:58:f4:56:7b:df:30:df:16:28:40:
02:ba:81:a8:2c:c2:59:34:4b:d7:54:45:5e:0e:8e:67:2b:61:
d5:df:50:3b:d9:94:bb:d5:bf:d3:ff:06:5d:25:86:3e:e2:ef:
64:c7:ab:82:d9:51:fd:55:94:fb:46:10:11:73:a9:41:33:61:
b7:7d:ab:1d:66:06:a7:4a:02:2d:b0:bc:ab:4f:4d:bd:e8:fc:
cf:01:3d:65:f3:97:2d:ae:bf:f1:b2:a0:5b:e3:90:b7:8b:e3:
f5:46:4b:cd:24:53:2e:46:17:d6:b0:dd:0c:4b:30:54:67:c9:
93:59:ee:d3:4d:10:be:ab:a6:bd:0b:eb:8d:21:e2:e7:01:74:
17:57:28:16
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYyXZcTdnFaxlgFS4lrVwER1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMxMjIzMTU1NzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmYwMWJlZDQyOGNmMTE5YTViYjBhM2ZmMzNhZTIzZDhlNmNkZjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXSHYEyUqOjB8Q8zwcdoiBEhtMAd
ITVAxQNA53KihOLaz6xBfW+P0wmuZAUf4hOzoyI7XhGjMYcGwyIFIdXpzbE+KPEM
33Ef5NDd874jizPm0ioZKj2lxFLc9dDFHcOsN00MXQaPZOu+9slNUa7Z2+PKirVy
N6HYwl2PjnxaN6eu2pxraFcWhSC6x42pTBN47tzEn921KkuZVEi7JOR5u7bAqGQC
f5gUE7mjtZvgOry2Ti/4T64JM4nm8rIbPTPuVSkqToEjY6L0eJlmybNxd9hKd/e7
oWRP3Zg38UMgCFo3E3F8HDuzTIYotRQaw9liJv+9LSHy/qyODgfzKxBXEwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFG/wG+1CjPEZpbsKP/M64j2ObN+YMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvYl9BYjdVS004Um1sdXdvXzh6cmlQWTVzMzVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2MAwDBAE+SKID
BAM+SKAwDAMEAVEVAgMEA1EVADAMAwQBURUKAwQEURUAAwQBsDk6AwQAsDk/MA0G
CSqGSIb3DQEBCwUAA4IBAQB6d7/Wr4OuRbB/ykomUITn/D3oLB77PNLM9cl2h6Rg
8PPAn5zqQh3BExNjjijprhcDjEmCfZCtW2wHXSrClfJ6BiHl9AeCU/9PEutAWa2U
pxQP3X58KN/1QLzrrqwMCLuiOEN7H6S7sixWKBynBgYBlsGah1j0VnvfMN8WKEAC
uoGoLMJZNEvXVEVeDo5nK2HV31A72ZS71b/T/wZdJYY+4u9kx6uC2VH9VZT7RhAR
c6lBM2G3fasdZganSgItsLyrT0296PzPAT1l85ctrr/xsqBb45C3i+P1RkvNJFMu
RhfWsN0MSzBUZ8mTWe7TTRC+q6a9C+uNIeLnAXQXVygW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org