Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/farXzPmdAJY4WF5iz4qa_jPrQjs.roa
File: farXzPmdAJY4WF5iz4qa_jPrQjs.roa (raw, json)
Hash identifier: ZTFNAqYTqRkPqu6aoU4AP4itUaE/RdNRzW5EBFY5c44=
Subject key identifier: 7D:AA:D7:CC:F9:9D:00:96:38:58:5E:62:CF:8A:9A:FE:33:EB:42:3B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018DB66C85972D8755A8DD748C1B1D3C324F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/farXzPmdAJY4WF5iz4qa_jPrQjs.roa
Signing time: Sat 17 Feb 2024 09:36:21 +0000
ROA not before: Sat 17 Feb 2024 09:36:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.167.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.52.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 08:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b6:6c:85:97:2d:87:55:a8:dd:74:8c:1b:1d:3c:32:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 17 09:36:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7daad7ccf99d009638585e62cf8a9afe33eb423b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:cb:04:45:ee:05:ca:77:d2:d3:5f:a6:b8:
41:20:12:39:38:95:3d:8e:13:ea:79:d3:4b:ec:0e:
08:7c:52:56:34:43:df:5e:08:85:93:78:7a:c8:d1:
1f:4c:52:67:e6:87:f8:23:b7:e4:23:3f:91:f5:cc:
95:f1:bc:e2:e2:7d:b6:ec:87:45:8d:9e:18:67:da:
c3:50:c9:fa:60:69:0e:50:24:ca:ba:b6:85:9c:f9:
d8:ad:40:ec:d2:68:b5:9e:f5:4b:17:25:39:69:fa:
bc:68:3b:ae:4b:49:47:0f:fc:fe:03:4d:3a:2e:43:
99:f1:03:6a:c0:97:94:ed:c5:3b:3a:02:5e:15:45:
6a:b8:d1:d1:d1:da:7e:9c:95:15:03:33:68:18:9a:
14:6b:60:c1:af:f0:06:a8:7b:7a:b6:91:03:be:25:
95:81:0f:c6:f2:a7:24:51:69:1a:cd:86:1d:8f:fc:
f2:10:9e:9d:67:04:e0:36:0e:a9:24:0b:f3:3f:81:
ec:e1:1d:45:90:f3:9e:ef:e6:1e:7a:a1:ad:e2:14:
58:d6:13:18:28:52:6e:a0:8c:8b:6d:b0:89:a7:88:
79:9b:fc:6b:f9:27:a2:53:77:53:88:7e:f8:9c:59:
15:5a:49:9e:6d:8b:b1:71:3d:9e:ea:61:e2:59:cf:
0e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AA:D7:CC:F9:9D:00:96:38:58:5E:62:CF:8A:9A:FE:33:EB:42:3B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/farXzPmdAJY4WF5iz4qa_jPrQjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.189.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.52.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
62:fb:6d:98:6c:30:d1:cf:7e:dd:a4:35:24:a7:e3:04:8a:ae:
75:8d:34:b5:e7:78:6e:a2:88:e6:11:40:c9:50:4f:9b:eb:0f:
09:e4:4a:c3:76:a9:b9:00:bd:8b:87:5c:c4:5b:9a:24:64:c3:
f3:04:38:ca:51:c2:62:b8:29:09:f2:88:5f:26:d8:61:98:7a:
65:82:b0:f6:fa:63:ce:18:e6:d2:ee:d5:32:e7:41:68:32:fc:
bb:62:e5:69:1c:92:25:41:43:88:a7:c8:53:6c:ea:39:e5:f6:
10:2f:0e:60:38:dd:83:bb:31:47:5f:e2:3e:88:60:0f:a8:f9:
ae:f0:ec:06:e0:5a:5d:a7:31:55:3b:d2:7f:de:cc:db:f4:c1:
68:79:c0:7f:5d:9a:9a:50:c9:b3:7b:12:66:f9:e4:36:68:60:
b5:95:06:24:70:6b:f3:a1:0f:dc:f6:f7:9c:87:f3:f9:34:8f:
07:7c:25:f3:56:bd:dd:5c:91:f6:23:59:7d:5e:0e:4b:a4:94:
bd:bf:3d:11:41:0c:bf:bf:e4:b8:6d:7c:25:31:c7:76:91:23:
98:0e:4c:0a:5e:25:e2:58:7a:8e:90:3c:47:f8:c7:dd:0f:9d:
4a:92:3f:5c:14:6e:c8:bc:9a:30:2a:0b:f7:ca:20:28:f7:fb:
f7:f3:4b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org