Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gkjKUwjXPOOnkQKWyMFURSO9LuQ.roa
File: gkjKUwjXPOOnkQKWyMFURSO9LuQ.roa (raw, json)
Hash identifier: 0HlmgLRqFcseUGeAg9vonCxorC9pI5t6lr9akHDdEzM=
Subject key identifier: 82:48:CA:53:08:D7:3C:E3:A7:91:02:96:C8:C1:54:45:23:BD:2E:E4
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0188709AAB345FF645A40F8FEFD5941E330A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gkjKUwjXPOOnkQKWyMFURSO9LuQ.roa
Signing time: Wed 31 May 2023 06:59:24 +0000
ROA not before: Wed 31 May 2023 06:59:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.11.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 18:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:70:9a:ab:34:5f:f6:45:a4:0f:8f:ef:d5:94:1e:33:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 31 06:59:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8248ca5308d73ce3a7910296c8c1544523bd2ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:91:d8:6b:95:da:6a:fa:04:3d:4a:ac:39:a9:
84:0d:e2:7e:fa:04:1f:c7:c6:a4:ed:18:e9:d1:1d:
d0:4f:35:80:15:d2:0a:45:92:14:76:35:ff:94:8d:
fe:41:15:29:99:db:9a:e4:4a:83:46:78:6a:b1:0d:
fa:84:82:59:dc:bf:c9:e9:e4:01:4a:65:57:76:b1:
60:9f:d0:e8:17:7c:38:bc:ad:d9:ee:89:47:23:8f:
85:15:17:e3:27:f8:3e:11:db:6f:9c:61:f5:d4:c3:
b1:36:46:00:33:b7:76:c1:5e:f0:e4:56:3a:c2:bf:
14:de:ca:a1:d5:e7:91:fd:08:6f:34:ef:ed:77:2a:
00:ac:fa:b8:94:e6:2c:6b:9e:0c:2b:c6:8c:c7:78:
07:4b:88:8b:a3:d3:f8:92:3e:8a:98:0d:e8:e2:a9:
52:58:30:72:fd:c1:c9:94:e0:a7:69:93:65:be:f0:
26:83:75:05:e8:1b:17:a8:27:7b:33:63:c7:b2:52:
de:f6:9c:8a:5d:65:7b:d4:63:5f:85:4e:d7:d2:8a:
4d:ce:15:29:82:99:25:7d:d4:a4:03:a4:01:6b:ff:
67:02:24:0c:9c:a0:ac:26:71:c1:7e:9f:88:b2:ec:
f2:82:a3:a3:2e:17:e6:9f:6c:42:aa:d2:55:52:12:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:48:CA:53:08:D7:3C:E3:A7:91:02:96:C8:C1:54:45:23:BD:2E:E4
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gkjKUwjXPOOnkQKWyMFURSO9LuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0/24
62.72.177.0/24
62.72.191.0/24
81.21.8.0/21
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ea:5e:5d:b5:a3:d1:bd:77:45:fb:a4:44:78:4c:50:fc:74:
08:c0:09:2f:e1:6f:ac:1a:79:91:23:7d:a0:3b:b6:82:e4:87:
7d:b7:52:ae:c9:e0:47:f9:6d:49:bb:4d:2f:74:2c:a4:ae:39:
7a:ab:47:10:84:6c:07:7b:c6:f3:1e:51:e7:20:72:e8:8a:85:
b8:c4:29:5a:2d:f0:8e:9f:bd:3d:e9:c8:6c:f9:af:be:86:ed:
31:93:a3:d1:ab:91:89:8d:c4:44:2b:d9:1b:95:48:c7:3b:52:
73:4b:d0:0a:91:24:9a:0c:bc:fb:09:72:ff:9e:35:44:9d:a0:
8c:df:f7:85:13:5e:0f:71:b0:86:c5:06:55:9d:3f:89:ad:5a:
82:42:a7:ff:87:8f:b9:ab:05:f2:1f:2b:11:05:c9:84:90:1b:
5d:0d:4b:24:e3:b0:5a:ef:2c:30:d4:ae:98:70:6b:06:32:2d:
28:19:08:f2:d4:4d:32:99:0b:33:05:86:5f:73:be:8a:f0:ae:
b8:60:ae:01:dd:2e:45:85:f2:88:4f:02:78:65:27:c7:f9:0b:
e9:b7:82:cc:81:bf:d2:e1:5f:cd:ab:22:4c:6c:9f:a0:d4:58:
82:89:c6:54:d8:6f:17:6b:17:77:29:ab:bf:9c:a5:0f:f6:ad:
04:eb:64:9d
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYhwmqs0X/ZFpA+P79WUHjMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwNTMxMDY1OTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjQ4Y2E1MzA4ZDczY2UzYTc5MTAyOTZjOGMxNTQ0NTIzYmQyZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5HYa5XaavoEPUqsOamEDeJ++gQf
x8ak7Rjp0R3QTzWAFdIKRZIUdjX/lI3+QRUpmdua5EqDRnhqsQ36hIJZ3L/J6eQB
SmVXdrFgn9DoF3w4vK3Z7olHI4+FFRfjJ/g+EdtvnGH11MOxNkYAM7d2wV7w5FY6
wr8U3sqh1eeR/QhvNO/tdyoArPq4lOYsa54MK8aMx3gHS4iLo9P4kj6KmA3o4qlS
WDBy/cHJlOCnaZNlvvAmg3UF6BsXqCd7M2PHslLe9pyKXWV71GNfhU7X0opNzhUp
gpklfdSkA6QBa/9nAiQMnKCsJnHBfp+IsuzygqOjLhfmn2xCqtJVUhL9DQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIJIylMI1zzjp5EClsjBVEUjvS7kMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvZ2tqS1V3alhQT09ua1FLV3lNRlVSU085THVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAPkiiAwQA
PkixAwQAPki/AwQDURUIAwQAsDk/MA0GCSqGSIb3DQEBCwUAA4IBAQBJ6l5dtaPR
vXdF+6REeExQ/HQIwAkv4W+sGnmRI32gO7aC5Id9t1KuyeBH+W1Ju00vdCykrjl6
q0cQhGwHe8bzHlHnIHLoioW4xClaLfCOn7096chs+a++hu0xk6PRq5GJjcREK9kb
lUjHO1JzS9AKkSSaDLz7CXL/njVEnaCM3/eFE14PcbCGxQZVnT+JrVqCQqf/h4+5
qwXyHysRBcmEkBtdDUsk47Ba7yww1K6YcGsGMi0oGQjy1E0ymQszBYZfc76K8K64
YK4B3S5FhfKITwJ4ZSfH+Qvpt4LMgb/S4V/NqyJMbJ+g1FiCicZU2G8Xaxd3Kau/
nKUP9q0E62Sd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org