Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gapbwKg-_yWQ-jlTiaABA-ZUm50.roa
File: gapbwKg-_yWQ-jlTiaABA-ZUm50.roa (raw, json)
Hash identifier: r7IIXYEYlRAbYiHBl3Lg6vnmmtKdhF+c/5AYJcC3lX8=
Subject key identifier: 81:AA:5B:C0:A8:3E:FF:25:90:FA:39:53:89:A0:01:03:E6:54:9B:9D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0197162E6E87D496F55462DCDE1D966BE826
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gapbwKg-_yWQ-jlTiaABA-ZUm50.roa
Signing time: Wed 28 May 2025 09:17:10 +0000
ROA not before: Wed 28 May 2025 09:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.170.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 06:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:2e:6e:87:d4:96:f5:54:62:dc:de:1d:96:6b:e8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 28 09:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81aa5bc0a83eff2590fa395389a00103e6549b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:65:de:c2:30:91:29:60:8d:5c:50:c8:d6:e3:
28:3e:5e:4c:b0:cb:ed:be:50:e5:59:23:1d:5c:a5:
eb:4d:12:a7:65:4c:7c:3d:46:0b:e7:da:d1:ec:f4:
83:49:16:34:7d:70:3c:63:9e:71:06:11:36:42:a5:
5c:8d:37:d0:1d:fa:47:a0:43:d5:5e:06:50:c8:84:
59:fd:a0:1f:29:9a:0a:6b:7f:2d:9c:77:03:6e:51:
43:d3:f5:b1:0a:87:e3:f9:76:83:f1:a3:28:37:31:
6c:d2:e1:c2:cd:73:fe:5d:fa:3c:7a:91:7d:a1:39:
8d:bd:63:03:f2:ad:8f:cd:cc:eb:5e:ee:d4:44:ea:
1e:b5:20:d0:8f:6d:db:dc:62:ac:22:d1:a3:2c:fb:
4d:38:57:36:08:64:35:96:79:6b:a8:af:69:46:a6:
cf:cb:a3:5c:12:dd:ff:d1:de:e6:fb:00:e4:cb:da:
f7:6c:47:a3:db:dd:28:2b:39:02:9a:0d:6e:a6:3f:
56:fd:92:ee:71:51:b5:69:30:a1:30:87:cf:fb:fb:
84:48:4d:17:18:a1:e5:09:fd:92:35:b8:ff:29:81:
b1:0b:71:83:c9:22:f0:2e:fb:2b:76:f5:c5:0b:60:
1e:55:33:91:f6:09:6a:4c:1e:d4:5b:e7:15:e0:80:
ef:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AA:5B:C0:A8:3E:FF:25:90:FA:39:53:89:A0:01:03:E6:54:9B:9D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gapbwKg-_yWQ-jlTiaABA-ZUm50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.170.0/24
62.72.174.0/24
62.72.187.0/24
62.72.191.0/24
81.21.2.0-81.21.7.255
176.57.51.0/24
176.57.56.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:7b:5f:3e:1e:12:c6:51:d0:8c:57:48:e6:f3:1d:a6:68:b2:
a4:57:56:38:6b:f0:86:2a:05:49:31:9f:0c:c8:b7:a5:42:b1:
6e:58:63:7a:b7:38:df:4d:8f:6e:08:03:fe:a0:e4:cd:c8:e7:
b5:fb:0e:15:4f:45:a9:fc:72:bb:a6:9b:40:70:d0:8f:94:cb:
d3:3c:ff:c3:6f:62:4b:6b:2e:bd:84:a6:0e:92:fa:ba:27:14:
a3:73:63:a3:7b:e8:6c:a1:8f:25:10:30:8c:5c:92:32:17:c0:
14:f8:06:88:87:1a:d7:ff:5e:16:86:77:9e:29:08:17:f4:7c:
d5:e6:98:54:76:d4:6a:48:05:64:7f:96:2f:02:99:55:07:11:
06:20:bb:fa:52:d3:c3:cb:5f:1f:1b:0d:ac:a5:f6:6a:37:86:
a6:0d:68:ea:bc:cc:64:bc:f3:52:83:2e:bf:25:f3:38:ce:4f:
f3:b1:4f:c9:14:55:ed:c4:60:40:0b:07:b0:1b:99:67:c5:86:
e7:71:80:c2:d2:5b:32:1b:81:21:57:78:6c:52:d0:d4:3c:63:
3d:c2:13:3b:d1:7e:c4:41:7a:3c:43:0c:a5:37:4a:e1:30:8f:
6e:5d:46:69:7e:4f:29:c3:24:d0:87:ef:7a:8d:92:05:6f:93:
15:cb:76:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:55:40 2025 by rpki-client