Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cGMkrE7zpy8O43NiOfgAAhi3GIo.roa
File: cGMkrE7zpy8O43NiOfgAAhi3GIo.roa (raw, json)
Hash identifier: Ok9Vb3JQafAqh4/ZtBjQx9IMYGIuLyUT2mVmGH6wWwA=
Subject key identifier: 70:63:24:AC:4E:F3:A7:2F:0E:E3:73:62:39:F8:00:02:18:B7:18:8A
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CFED461C61390835343237D85ABD909B4
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cGMkrE7zpy8O43NiOfgAAhi3GIo.roa
Signing time: Fri 12 Jan 2024 17:59:40 +0000
ROA not before: Fri 12 Jan 2024 17:59:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.58.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.4.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 07:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:d4:61:c6:13:90:83:53:43:23:7d:85:ab:d9:09:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 12 17:59:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=706324ac4ef3a72f0ee3736239f8000218b7188a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:63:48:bb:9b:cd:ba:d0:54:d4:28:33:c3:
e9:d9:81:41:92:2d:08:eb:05:9f:05:63:08:91:71:
57:12:3c:89:28:0a:1f:e3:64:81:5b:7c:e0:95:e9:
60:7a:41:b6:12:df:12:6e:16:65:2e:de:5c:0e:47:
56:ec:7f:9e:03:12:c1:c1:e2:34:8d:f9:f8:f0:06:
72:b3:0f:5c:87:fc:6a:9c:30:52:54:bd:63:46:19:
fb:4a:7c:16:37:35:1b:58:47:51:3e:01:e6:1e:4c:
5a:4a:96:f2:94:24:7b:17:0d:1c:a8:8b:c2:45:36:
0c:5f:97:d3:95:3e:eb:bb:7e:3a:2a:27:22:4f:e7:
4f:2b:40:c9:23:04:78:2a:7d:0c:5a:35:d5:9b:ee:
9e:48:f7:2e:a2:d3:30:b8:61:6d:a8:99:8f:a7:1f:
4c:d2:57:96:8b:93:f6:87:6f:1c:70:7b:7c:61:ca:
a9:89:e4:fe:20:47:20:48:70:bb:66:5e:f2:24:fd:
9a:f0:ec:f9:40:34:67:cd:9d:05:ea:1e:c2:94:23:
82:cf:27:3b:c3:94:6e:32:cb:05:67:88:be:81:e3:
1d:31:c4:ec:69:3a:ae:1e:54:fc:5b:bd:1f:a9:f3:
7e:a7:8d:a6:5c:4d:70:69:05:be:c5:54:ec:a4:9f:
cc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:63:24:AC:4E:F3:A7:2F:0E:E3:73:62:39:F8:00:02:18:B7:18:8A
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cGMkrE7zpy8O43NiOfgAAhi3GIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c1:e2:58:ab:7a:5b:0e:9d:06:93:38:1c:e1:5a:da:3d:5f:
1e:3a:11:ba:4f:ce:7a:27:d0:4c:88:62:32:1b:22:9e:6c:54:
87:a6:b4:bd:1e:01:18:d6:8b:94:f7:9a:4f:fa:5c:c1:c3:6e:
37:b1:b5:55:51:04:0a:c3:57:2c:d1:75:11:29:fe:47:c1:34:
38:4d:b7:b9:b4:ad:5b:85:22:b9:88:50:e5:94:fc:dd:be:ce:
3b:86:3c:eb:39:20:fd:d7:fd:9f:ed:df:31:6c:e4:c7:6a:0a:
36:6c:60:12:65:a7:2c:df:7b:ed:e2:5b:4c:ec:a0:25:6c:59:
2d:d5:0d:b6:6f:02:4f:1f:63:7d:06:a7:39:fe:5e:9a:38:4e:
a9:84:00:ec:21:a6:42:b8:7a:05:53:f0:63:13:12:68:ec:a1:
3c:d5:97:08:a1:fd:40:9c:1b:4a:5f:2f:49:f2:56:9c:c7:7a:
ad:05:16:15:50:b1:93:7a:d5:d5:0b:24:56:a4:fc:85:95:ea:
40:41:97:e7:f3:5c:0a:28:89:3a:ce:f2:66:11:19:e5:0a:23:
6d:ad:4d:77:b5:36:f4:5a:41:7c:94:1c:4e:5a:bb:7f:ed:3a:
7d:49:94:4d:eb:46:92:45:e5:e2:24:30:e4:d6:e4:ba:17:4c:
5e:c2:3d:71
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYz+1GHGE5CDU0MjfYWr2Qm0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwMTEyMTc1OTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDYzMjRhYzRlZjNhNzJmMGVlMzczNjIzOWY4MDAwMjE4YjcxODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwpjSLubzbrQVNQoM8Pp2YFBki0I
6wWfBWMIkXFXEjyJKAof42SBW3zglelgekG2Et8SbhZlLt5cDkdW7H+eAxLBweI0
jfn48AZysw9ch/xqnDBSVL1jRhn7SnwWNzUbWEdRPgHmHkxaSpbylCR7Fw0cqIvC
RTYMX5fTlT7ru346KiciT+dPK0DJIwR4Kn0MWjXVm+6eSPcuotMwuGFtqJmPpx9M
0leWi5P2h28ccHt8YcqpieT+IEcgSHC7Zl7yJP2a8Oz5QDRnzZ0F6h7ClCOCzyc7
w5RuMssFZ4i+geMdMcTsaTquHlT8W70fqfN+p42mXE1waQW+xVTspJ/MOQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFHBjJKxO86cvDuNzYjn4AAIYtxiKMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvY0dNa3JFN3pweThPNDNOaU9mZ0FBaGkzR0lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2MAwDBAE+SKID
BAM+SKAwDAMEAVEVAgMEA1EVADAMAwQBURUKAwQEURUAAwQBsDk6AwQAsDk/MA0G
CSqGSIb3DQEBCwUAA4IBAQBGweJYq3pbDp0Gkzgc4VraPV8eOhG6T856J9BMiGIy
GyKebFSHprS9HgEY1ouU95pP+lzBw243sbVVUQQKw1cs0XURKf5HwTQ4Tbe5tK1b
hSK5iFDllPzdvs47hjzrOSD91/2f7d8xbOTHago2bGASZacs33vt4ltM7KAlbFkt
1Q22bwJPH2N9Bqc5/l6aOE6phADsIaZCuHoFU/BjExJo7KE81ZcIof1AnBtKXy9J
8lacx3qtBRYVULGTetXVCyRWpPyFlepAQZfn81wKKIk6zvJmERnlCiNtrU13tTb0
WkF8lBxOWrt/7Tp9SZRN60aSReXiJDDk1uS6F0xewj1x
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org