Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cXCiqZO1FwNELXfFf72sSkOLgME.roa
File: cXCiqZO1FwNELXfFf72sSkOLgME.roa (raw, json)
Hash identifier: awh8O12m2Hvkt4WEZicAtUMYe70YS2WUlIbCM5CrJrw=
Subject key identifier: 71:70:A2:A9:93:B5:17:03:44:2D:77:C5:7F:BD:AC:4A:43:8B:80:C1
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018D06F735C65300503E319A3623C6CEB649
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cXCiqZO1FwNELXfFf72sSkOLgME.roa
Signing time: Sun 14 Jan 2024 07:54:40 +0000
ROA not before: Sun 14 Jan 2024 07:54:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.164.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.58.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.4.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
176.57.59.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 14:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:06:f7:35:c6:53:00:50:3e:31:9a:36:23:c6:ce:b6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 14 07:54:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7170a2a993b51703442d77c57fbdac4a438b80c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:a7:c3:52:68:d4:e9:d5:33:fa:c3:70:80:
62:60:b0:e0:52:ce:c2:d7:82:68:8b:23:2a:8b:33:
6f:f9:9b:eb:d7:9b:79:81:8e:ac:48:9e:34:e6:39:
bb:fe:0c:83:45:de:44:8e:39:be:da:53:14:70:8a:
b9:0e:12:3d:2e:ca:df:0e:d3:07:3e:b2:96:90:b3:
52:a5:3a:ff:81:3f:e7:d7:29:7b:ea:ca:7f:d4:fa:
a7:b3:6a:c8:47:e4:00:93:2c:8d:cb:5a:16:b2:29:
40:50:3b:f3:2c:5e:21:ff:d4:6b:e5:38:88:10:75:
c8:02:36:22:30:59:09:a8:79:9b:dd:8e:d9:e7:0e:
39:c9:0d:49:c3:b2:83:c8:65:a9:c1:8c:7a:19:48:
16:0c:10:3e:c4:a7:95:87:2e:97:90:e8:f2:72:97:
c2:cb:47:f5:d6:d2:1a:fa:10:4f:d8:c7:48:39:ac:
94:f4:18:4b:50:b2:f3:cf:7b:f6:1f:4d:6a:57:13:
f7:fa:65:b6:83:78:1b:15:af:bd:2c:d3:7d:fd:dc:
46:bf:c4:37:90:5e:53:65:4a:06:4c:e9:6b:74:f0:
1d:e5:cf:47:ac:f3:19:29:25:fa:7d:4c:49:af:7a:
f9:0b:23:ca:46:96:0e:0f:87:2b:f7:16:30:6a:44:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:70:A2:A9:93:B5:17:03:44:2D:77:C5:7F:BD:AC:4A:43:8B:80:C1
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cXCiqZO1FwNELXfFf72sSkOLgME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c5:79:8e:a3:ca:6f:0f:93:eb:59:ce:b6:9b:2b:8b:94:93:
0d:5c:5c:20:b0:99:c2:22:0f:c3:9a:fb:86:b6:48:6f:20:25:
43:a7:bc:b9:0d:c0:f8:ba:90:f9:97:65:46:50:eb:04:22:78:
c0:29:cd:4b:e5:93:86:59:63:e6:57:4b:48:8f:08:14:cc:8c:
3e:03:1e:31:86:16:ef:59:22:68:50:39:7e:1b:0a:9e:cb:36:
b9:67:03:0b:b7:8c:74:94:41:6d:b6:2b:5b:2d:d4:09:9d:c2:
62:5b:17:eb:86:72:48:84:97:1d:cf:0c:57:a0:8f:c5:fc:f4:
ea:5b:45:34:08:2f:22:c1:d8:74:74:f3:80:00:09:cf:c3:20:
f7:78:42:d2:ff:27:43:9b:e4:8c:f2:90:fd:8a:31:02:b9:1e:
5b:7c:0b:c2:0d:6e:7f:a3:e9:f9:9e:da:8b:fe:d4:0e:77:8c:
d0:b0:dc:bf:7a:39:fc:5f:c3:28:8c:0b:87:fe:8e:42:74:97:
1b:d9:6e:03:26:81:f9:26:99:5c:dc:f6:fe:bc:1d:c9:0a:7f:
cc:9e:15:ff:38:28:18:71:11:ad:d0:8b:d1:89:9c:6e:41:b7:
ed:3c:65:9e:e9:8e:b7:1a:68:f8:6c:fc:2f:d0:88:4c:36:87:
1f:f7:dd:f2
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAY0G9zXGUwBQPjGaNiPGzrZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwMTE0MDc1NDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTcwYTJhOTkzYjUxNzAzNDQyZDc3YzU3ZmJkYWM0YTQzOGI4MGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVinw1Jo1OnVM/rDcIBiYLDgUs7C
14JoiyMqizNv+Zvr15t5gY6sSJ405jm7/gyDRd5Ejjm+2lMUcIq5DhI9LsrfDtMH
PrKWkLNSpTr/gT/n1yl76sp/1Pqns2rIR+QAkyyNy1oWsilAUDvzLF4h/9Rr5TiI
EHXIAjYiMFkJqHmb3Y7Z5w45yQ1Jw7KDyGWpwYx6GUgWDBA+xKeVhy6XkOjycpfC
y0f11tIa+hBP2MdIOayU9BhLULLzz3v2H01qVxP3+mW2g3gbFa+9LNN9/dxGv8Q3
kF5TZUoGTOlrdPAd5c9HrPMZKSX6fUxJr3r5CyPKRpYOD4cr9xYwakR5fwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFHFwoqmTtRcDRC13xX+9rEpDi4DBMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvY1hDaXFaTzFGd05FTFhmRmY3MnNTa09MZ01FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2MAwDBAE+SKID
BAM+SKAwDAMEAVEVAgMEA1EVADAMAwQBURUKAwQEURUAAwQBsDk6AwQAsDk/MA0G
CSqGSIb3DQEBCwUAA4IBAQA2xXmOo8pvD5PrWc62myuLlJMNXFwgsJnCIg/DmvuG
tkhvICVDp7y5DcD4upD5l2VGUOsEInjAKc1L5ZOGWWPmV0tIjwgUzIw+Ax4xhhbv
WSJoUDl+Gwqeyza5ZwMLt4x0lEFttitbLdQJncJiWxfrhnJIhJcdzwxXoI/F/PTq
W0U0CC8iwdh0dPOAAAnPwyD3eELS/ydDm+SM8pD9ijECuR5bfAvCDW5/o+n5ntqL
/tQOd4zQsNy/ejn8X8MojAuH/o5CdJcb2W4DJoH5Jplc3Pb+vB3JCn/MnhX/OCgY
cRGt0IvRiZxuQbftPGWe6Y63Gmj4bPwv0IhMNocf993y
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org