Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/h8AuLP9KauGU2VXkV2Dwd9CWqus.roa
File: h8AuLP9KauGU2VXkV2Dwd9CWqus.roa (raw, json)
Hash identifier: EiHykbtzSyymFgZF9NUR53vYUAjQw0oPxcNjyo/HeNw=
Subject key identifier: 87:C0:2E:2C:FF:4A:6A:E1:94:D9:55:E4:57:60:F0:77:D0:96:AA:EB
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C8750DC78003F0CC33DA831CB508C6625
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/h8AuLP9KauGU2VXkV2Dwd9CWqus.roa
Signing time: Wed 20 Dec 2023 13:01:12 +0000
ROA not before: Wed 20 Dec 2023 13:01:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.181.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.59.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 09:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:50:dc:78:00:3f:0c:c3:3d:a8:31:cb:50:8c:66:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 20 13:01:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87c02e2cff4a6ae194d955e45760f077d096aaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:68:f4:d7:ae:78:a2:35:f1:41:9c:2a:53:
93:49:a4:9e:da:f4:c8:df:8c:3b:eb:74:fb:0f:78:
64:60:82:fe:c8:ca:53:d1:d2:6f:07:e0:f8:49:6a:
58:bd:01:c6:7d:76:6c:41:39:6b:1c:c6:9c:90:ca:
d6:95:d4:33:34:f9:02:b8:a6:f0:58:0c:54:fd:9e:
ea:bf:65:d8:64:8e:ea:5e:fa:b9:b3:8c:a4:18:f7:
ea:31:5e:b8:6e:80:da:da:b3:61:60:a2:28:5c:28:
44:51:72:74:80:fe:41:a1:72:b6:e8:ca:45:19:4f:
ee:fe:3f:0f:88:13:a3:2e:7d:6d:dc:07:19:be:c3:
e2:26:f4:1b:55:03:07:db:fd:47:72:ad:94:12:75:
d9:ab:46:09:92:f2:78:65:e3:a7:70:79:3f:10:84:
fe:8b:4e:40:80:29:a1:58:15:a4:5b:f3:fa:64:11:
68:04:bf:f2:b9:c3:4e:02:c3:c7:e4:2b:6b:fe:a5:
a3:34:b0:70:96:d3:9f:cd:bb:7a:24:c5:d6:e9:4e:
4e:dd:9d:e3:76:0c:4b:9c:80:c6:a1:c2:8e:43:6d:
7f:a6:94:a5:eb:71:8f:78:e5:54:c2:fb:ca:85:5e:
4d:81:f0:2a:9f:7d:d6:0e:3e:b8:8b:c3:fb:ae:3e:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C0:2E:2C:FF:4A:6A:E1:94:D9:55:E4:57:60:F0:77:D0:96:AA:EB
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/h8AuLP9KauGU2VXkV2Dwd9CWqus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.181.0/24
62.72.188.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.53.0/24
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:5c:30:45:93:9e:ca:a7:4f:85:08:23:73:e1:b3:85:63:36:
13:55:d2:d5:0f:80:8d:51:5a:73:33:d2:0a:4b:43:55:ee:3c:
98:fe:06:44:ab:2e:ce:f3:4e:1c:fb:b0:38:05:2c:80:00:3d:
58:72:c0:a1:63:bf:a4:cc:6a:1d:13:95:5c:5b:3e:65:d0:b3:
e6:de:4e:0f:d8:6d:88:2e:96:ae:13:33:be:da:a7:a9:3b:a2:
f2:6a:62:a8:d1:59:6f:ce:54:ab:64:c2:9c:f0:04:9d:04:af:
b4:7b:6a:a6:63:f9:fd:a6:58:35:8a:f5:4f:b3:b9:c6:e8:c5:
ee:0d:92:d2:e1:e3:7a:9b:ff:cd:df:08:80:40:10:da:2d:04:
17:e9:d4:2b:d1:d5:f8:47:b4:77:0c:70:39:26:4e:4d:b9:ea:
f4:2f:5f:68:dd:73:09:55:50:0b:44:54:13:d5:16:ce:8c:41:
10:36:16:4e:e2:3f:cb:6a:e9:94:6a:8f:11:d0:e8:36:16:d6:
4e:9f:0a:81:0d:e3:a6:3c:71:5a:38:99:a7:c3:69:54:63:b8:
64:16:1d:f7:84:93:ef:08:63:3f:e6:17:c4:fc:9d:43:2f:13:
06:00:b3:32:b5:a0:47:f3:bf:1c:ed:62:80:ae:0e:22:f7:40:
45:70:c6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org