Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/eL-5B851HieMrbWslBYLIrBxPx4.roa
File: eL-5B851HieMrbWslBYLIrBxPx4.roa (raw, json)
Hash identifier: RhUD2N3X0Gu2GFWq/qhnYt0PkXFYi7Sd8oLFQ+YBiOI=
Subject key identifier: 78:BF:B9:07:CE:75:1E:27:8C:AD:B5:AC:94:16:0B:22:B0:71:3F:1E
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C5390B150FD68C3A8D1880CE845DFAF2A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/eL-5B851HieMrbWslBYLIrBxPx4.roa
Signing time: Sun 10 Dec 2023 11:50:40 +0000
ROA not before: Sun 10 Dec 2023 11:50:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.164.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.168.0/22 maxlen: 22
62.72.170.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.174.0/23 maxlen: 23
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.180.0/23 maxlen: 23
62.72.184.0/22 maxlen: 22
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.4.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 11 Dec 2023 07:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:53:90:b1:50:fd:68:c3:a8:d1:88:0c:e8:45:df:af:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 10 11:50:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78bfb907ce751e278cadb5ac94160b22b0713f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:02:b5:08:4b:5d:f2:81:7e:7d:1c:c8:58:
aa:4b:8c:49:0c:3f:d6:bb:92:5e:25:d2:90:c6:20:
01:7c:13:1f:e0:40:47:21:3e:e5:a2:1e:7e:ca:d1:
fd:2b:9d:e3:24:f3:33:03:96:ec:55:83:9e:3c:b0:
55:82:b7:aa:49:32:03:cb:98:06:18:f1:b1:f1:e8:
1c:9f:1d:1a:34:61:04:b4:d7:f5:0e:86:e2:e9:f9:
3f:db:52:04:1d:18:ff:cd:74:47:2e:39:f0:08:15:
24:4c:91:13:11:4d:76:29:e0:80:d0:99:0d:e8:e3:
ef:1f:1a:e3:92:b8:1e:87:10:b8:01:13:4c:a5:db:
bd:2c:ec:82:a3:9e:bc:31:97:f1:50:ca:10:45:4a:
98:9a:46:96:3a:21:86:f2:04:e9:66:94:0e:c2:95:
5f:8c:4a:a4:47:6b:29:33:68:9b:37:0b:95:cf:c6:
10:fd:2f:b3:75:d2:8d:af:8c:a2:23:07:7b:21:ec:
fa:ce:51:a4:98:b2:9a:45:62:b6:75:61:f2:43:19:
a8:f2:70:82:e4:ea:46:ee:bc:61:d4:9b:34:f2:36:
21:c9:d9:52:41:53:48:d2:cf:e9:02:ef:e4:5b:32:
63:34:24:a1:7e:e4:aa:12:7d:7c:cd:e9:f6:bf:de:
11:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BF:B9:07:CE:75:1E:27:8C:AD:B5:AC:94:16:0B:22:B0:71:3F:1E
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/eL-5B851HieMrbWslBYLIrBxPx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.171.255
62.72.173.0-62.72.175.255
62.72.180.0/23
62.72.184.0/22
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b4:10:84:83:b6:21:43:54:5e:80:21:8d:eb:df:93:fe:05:
41:c1:91:48:1d:20:27:90:59:a2:3d:fb:fe:2e:25:ef:5e:5b:
e6:06:92:11:ce:3c:bf:2f:bf:b8:22:44:78:6a:e3:3e:27:1b:
e4:ce:b0:1e:ed:6d:14:b7:2b:2a:63:3b:b8:17:9b:6c:1a:8d:
a0:76:9a:14:0e:ac:19:78:ac:e0:7e:b0:f6:f6:a9:74:5a:d4:
09:fd:17:01:ff:d2:47:c2:b2:72:fc:bd:3b:c7:ca:6f:f7:65:
85:1f:73:16:79:db:16:75:be:fa:87:66:5c:ad:f7:07:8a:71:
0a:ba:fb:bd:b1:29:47:d8:aa:77:c6:d2:dc:50:8f:5c:75:91:
44:91:75:8f:2d:3f:05:62:54:3a:bb:8a:7b:b7:c0:b7:50:3e:
3d:4b:7f:36:ac:60:5e:02:ad:61:38:e9:bb:72:08:5f:e0:fb:
87:07:df:7c:47:28:81:db:1a:25:05:79:55:96:e5:ec:2a:43:
8e:7b:c6:c3:d3:69:f5:0c:fc:d3:12:fb:b9:dd:51:cb:46:32:
35:f9:f7:ec:9d:95:fc:ed:d5:b8:2a:84:20:85:ad:9a:57:1b:
11:6c:d0:4e:64:4e:94:1c:81:c1:89:19:fc:12:3a:ad:0f:f9:
91:33:ae:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org