Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fykNfYiHd0c0NyZp-wKEx3DEaN4.roa
File: fykNfYiHd0c0NyZp-wKEx3DEaN4.roa (raw, json)
Hash identifier: PgxFCliUGwqqYste/m1fhU52jSJiQwdGMeDyJKtfmE4=
Subject key identifier: 7F:29:0D:7D:88:87:77:47:34:37:26:69:FB:02:84:C7:70:C4:68:DE
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01894B00819C4675E9EF9176FB36CBA1F06A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fykNfYiHd0c0NyZp-wKEx3DEaN4.roa
Signing time: Wed 12 Jul 2023 16:47:51 +0000
ROA not before: Wed 12 Jul 2023 16:47:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.3.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jul 2023 05:09:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4b:00:81:9c:46:75:e9:ef:91:76:fb:36:cb:a1:f0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jul 12 16:47:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f290d7d8887774734372669fb0284c770c468de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:bd:c4:02:03:32:b8:e9:98:fc:92:f1:4e:
56:c5:52:8a:8f:84:00:5a:56:82:d7:8f:90:13:6e:
54:9b:c8:63:87:e3:04:90:bd:ec:2d:53:66:d4:55:
7e:3e:a9:6c:ae:fd:e3:08:dc:6b:19:c8:84:d7:97:
aa:7b:bd:ab:14:32:c6:62:10:7f:0b:90:5b:a9:d3:
28:71:bb:ad:75:41:e6:1f:13:47:67:54:17:74:e9:
d8:3f:3a:86:52:b4:74:e8:9b:e0:45:4b:85:d1:db:
ae:ec:12:37:9b:73:ba:d8:bb:c5:87:3a:75:76:98:
5e:ed:f1:83:66:9b:86:46:ee:53:f0:ec:59:ca:f5:
a0:49:0e:a1:2f:88:01:04:fd:0d:1c:fd:f9:78:7c:
93:ca:4e:d0:27:6e:63:b7:31:4e:74:a5:d3:72:86:
c4:b6:70:02:51:f0:ec:45:93:73:5b:51:95:59:3b:
d1:56:6e:36:60:07:54:62:be:17:3d:a5:8a:a7:be:
1d:ea:48:92:f5:16:bd:9e:7d:fb:64:bf:f0:e6:d0:
92:32:d0:8b:f1:6f:37:74:d7:d5:47:c8:5f:ec:80:
b8:41:c4:86:1e:63:be:6e:94:1a:18:8e:1a:7d:b3:
3e:d5:cd:d9:6e:5a:37:4f:12:2e:3c:0f:32:a4:71:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:29:0D:7D:88:87:77:47:34:37:26:69:FB:02:84:C7:70:C4:68:DE
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/fykNfYiHd0c0NyZp-wKEx3DEaN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.163.255
62.72.169.0/24
62.72.177.0/24
62.72.179.0/24
62.72.181.0-62.72.182.255
62.72.185.0/24
62.72.187.0-62.72.189.255
62.72.191.0/24
81.21.3.0/24
81.21.9.0-81.21.15.255
176.57.51.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
19:44:81:60:b4:71:7d:88:7c:5e:58:f1:ff:18:7f:d1:67:d3:
08:6f:ba:fc:68:d6:9a:8c:11:76:e9:8c:f7:21:62:2a:2c:75:
43:ae:66:63:d5:77:fc:1c:d8:6c:62:d3:a1:47:4e:91:64:f1:
4b:1d:53:60:ad:13:51:50:c5:6f:22:93:c1:c8:f2:c2:39:89:
d6:33:1f:ec:31:30:0b:15:ad:c0:11:bc:ee:31:06:98:fe:c7:
05:3e:b7:45:99:9e:5e:10:b8:67:02:c3:02:99:13:33:f3:88:
b5:3f:43:7a:e0:42:57:d2:84:50:dc:fe:f3:26:ae:ec:76:5e:
2c:5c:26:e2:83:e3:11:8e:40:6a:85:a9:72:29:76:bc:cf:94:
4d:98:18:9a:44:e3:4f:22:ba:fb:7a:5b:a4:0b:c3:43:a8:46:
0b:ec:d7:41:5c:d7:15:04:89:c4:23:02:94:f8:c8:0b:88:a9:
a1:3b:95:c8:3c:50:d9:24:61:0b:7a:0f:13:43:f8:28:c8:30:
bc:62:b7:22:52:e4:22:a4:44:1e:40:6e:66:44:da:d1:dc:8d:
bf:e5:f7:cc:99:72:15:d5:24:e9:6f:b6:a0:f7:18:ab:f7:4a:
4e:9c:17:59:ce:bd:9e:f3:92:f2:9f:3d:c6:c0:c1:38:cc:ef:
fd:fc:db:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org