Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/dPAxI-SQTEwBOwNsCbqFobM37BY.roa
File: dPAxI-SQTEwBOwNsCbqFobM37BY.roa (raw, json)
Hash identifier: AOcv+HQmA4Q/BdnlFp5/l1MrXjAzagaMgv8fKCeB5XQ=
Subject key identifier: 74:F0:31:23:E4:90:4C:4C:01:3B:03:6C:09:BA:85:A1:B3:37:EC:16
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018B466C5454F61844B8A8F4B981E58EDFA3
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/dPAxI-SQTEwBOwNsCbqFobM37BY.roa
Signing time: Thu 19 Oct 2023 05:33:06 +0000
ROA not before: Thu 19 Oct 2023 05:33:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.166.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.168.0/22 maxlen: 22
62.72.170.0/24 maxlen: 24
62.72.167.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.174.0/23 maxlen: 23
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.180.0/23 maxlen: 23
62.72.180.0/24 maxlen: 24
62.72.184.0/22 maxlen: 22
62.72.181.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 19 Oct 2023 18:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:6c:54:54:f6:18:44:b8:a8:f4:b9:81:e5:8e:df:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 19 05:33:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74f03123e4904c4c013b036c09ba85a1b337ec16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:28:7e:b5:34:63:44:3c:65:4a:92:56:66:
50:1d:af:a3:2d:31:84:c0:af:d2:7a:af:c2:f1:28:
e7:22:71:f5:03:ff:8b:22:14:d0:57:49:96:36:b3:
52:77:01:49:12:71:ef:c7:9c:a8:d9:5c:da:50:6a:
4b:e1:68:74:a8:58:7c:88:92:10:a9:c7:50:ce:4e:
34:5b:de:51:c2:ab:b2:71:01:61:12:de:82:32:d5:
82:e1:39:3d:48:e6:69:1a:16:e7:13:c9:b5:d3:54:
ec:3d:f8:91:37:99:44:81:8f:ae:95:5c:a8:c6:1f:
20:e0:b5:92:89:e2:ca:18:16:62:2e:1f:1f:f0:0c:
d9:b6:64:3a:7f:e9:d7:99:2f:de:62:af:e4:24:21:
04:12:60:85:98:fe:c0:14:c6:86:9a:54:79:41:e4:
2f:d8:03:65:ed:06:9d:65:7f:68:ac:a4:a5:3a:68:
63:92:3a:6c:1e:c6:d4:c4:66:8c:42:78:43:59:d7:
58:e8:f0:74:67:04:d7:d6:6b:ea:ac:ac:e3:76:b5:
9d:5c:5e:9b:90:15:09:e5:bf:27:45:93:c3:4d:89:
33:74:4e:e2:ed:bc:11:d3:d7:8d:d6:b0:2c:65:1a:
2b:74:10:66:1e:5a:64:11:d7:71:f5:09:5c:f5:89:
ee:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F0:31:23:E4:90:4C:4C:01:3B:03:6C:09:BA:85:A1:B3:37:EC:16
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/dPAxI-SQTEwBOwNsCbqFobM37BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.171.255
62.72.173.0-62.72.175.255
62.72.179.0-62.72.181.255
62.72.184.0/22
62.72.191.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
75:82:0d:0e:12:05:77:0d:ae:02:09:2b:6c:34:23:94:82:a0:
a0:2c:31:4a:38:6d:26:31:76:60:2c:c8:7b:05:b8:8e:dd:cb:
23:dc:22:87:0f:0b:97:87:b3:de:12:dd:4c:5e:32:7e:38:c4:
e1:3e:e2:dc:11:8e:2e:b6:43:62:18:1a:27:98:50:00:5c:e8:
9b:02:ec:4b:d0:1b:2f:71:d6:f5:34:71:44:0c:f0:04:52:87:
9e:fd:b3:0d:61:9a:7c:70:1c:dd:07:cf:b2:39:c6:2b:08:da:
10:68:29:ec:d0:01:df:35:3c:d3:15:5a:8f:22:35:ad:28:08:
4b:3c:09:f2:cb:d3:b6:45:e9:ae:59:93:b6:ed:2c:0a:b2:7e:
24:eb:8a:14:94:e2:17:34:ae:29:b3:b2:bb:ab:54:1e:88:5e:
39:fd:40:2f:46:7c:de:e1:fb:93:1d:d7:0c:51:e5:91:07:d4:
2d:4d:21:35:d0:d2:42:ff:5e:20:a1:cc:6b:8f:29:69:6c:5e:
cd:21:b1:49:ff:d6:df:66:02:71:18:f5:b0:4a:46:1c:af:dc:
c7:ec:42:6d:7f:8d:63:b0:aa:c8:72:9b:72:ff:16:58:b8:0f:
42:8f:d3:d6:e6:fa:65:2a:3e:23:1d:df:76:50:e3:b4:37:8b:
63:cd:c0:c9
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAYtGbFRU9hhEuKj0uYHljt+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMxMDE5MDUzMzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGYwMzEyM2U0OTA0YzRjMDEzYjAzNmMwOWJhODVhMWIzMzdlYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEsofrU0Y0Q8ZUqSVmZQHa+jLTGE
wK/Seq/C8SjnInH1A/+LIhTQV0mWNrNSdwFJEnHvx5yo2VzaUGpL4Wh0qFh8iJIQ
qcdQzk40W95RwquycQFhEt6CMtWC4Tk9SOZpGhbnE8m101TsPfiRN5lEgY+ulVyo
xh8g4LWSieLKGBZiLh8f8AzZtmQ6f+nXmS/eYq/kJCEEEmCFmP7AFMaGmlR5QeQv
2ANl7QadZX9orKSlOmhjkjpsHsbUxGaMQnhDWddY6PB0ZwTX1mvqrKzjdrWdXF6b
kBUJ5b8nRZPDTYkzdE7i7bwR09eN1rAsZRordBBmHlpkEddx9Qlc9YnugwIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFHTwMSPkkExMATsDbAm6haGzN+wWMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvZFBBeEktU1FURXdCT3dOc0NicUZvYk0zN0JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwajAMAwQBPkii
AwQCPkioMAwDBAA+SK0DBAQ+SKAwDAMEAD5IswMEAT5ItAMEAj5IuAMEAD5IvzAM
AwQBURUCAwQDURUAMAwDBAFRFQoDBARRFQADBACwOTMDBACwOTUDBAGwOToDBACw
OT8wDQYJKoZIhvcNAQELBQADggEBAHWCDQ4SBXcNrgIJK2w0I5SCoKAsMUo4bSYx
dmAsyHsFuI7dyyPcIocPC5eHs94S3UxeMn44xOE+4twRji62Q2IYGieYUABc6JsC
7EvQGy9x1vU0cUQM8ARSh579sw1hmnxwHN0Hz7I5xisI2hBoKezQAd81PNMVWo8i
Na0oCEs8CfLL07ZF6a5Zk7btLAqyfiTrihSU4hc0rimzsrurVB6IXjn9QC9GfN7h
+5Md1wxR5ZEH1C1NITXQ0kL/XiChzGuPKWlsXs0hsUn/1t9mAnEY9bBKRhyv3Mfs
Qm1/jWOwqshym3L/Fli4D0KP09bm+mUqPiMd33ZQ47Q3i2PNwMk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org