Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hTLu57zDFwO0N95hOXXqVCofCUE.roa
File: hTLu57zDFwO0N95hOXXqVCofCUE.roa (raw, json)
Hash identifier: BZEEzH1PetcvR6pBQiIHeMlmq14VPSwvm195v0hUzYI=
Subject key identifier: 85:32:EE:E7:BC:C3:17:03:B4:37:DE:61:39:75:EA:54:2A:1F:09:41
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018FA4695C31E3CA47DFB89E9E58B2297D1F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hTLu57zDFwO0N95hOXXqVCofCUE.roa
Signing time: Thu 23 May 2024 07:45:19 +0000
ROA not before: Thu 23 May 2024 07:45:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.14.0/23 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 May 2024 08:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a4:69:5c:31:e3:ca:47:df:b8:9e:9e:58:b2:29:7d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 23 07:45:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8532eee7bcc31703b437de613975ea542a1f0941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:ba:c5:0a:ba:b8:45:27:f4:d2:f2:20:34:
48:e7:56:a1:d7:7b:93:0c:dd:dc:fc:8d:90:db:c6:
61:18:eb:d5:87:cc:51:10:cc:ed:02:02:5e:2d:5e:
ac:08:62:07:7e:d0:24:e1:9f:31:88:22:5d:7d:31:
e8:78:64:fc:f3:0d:bc:fb:bc:2b:56:74:17:63:9c:
8e:dd:68:3a:91:c5:7f:b1:60:40:6d:2f:46:76:0f:
5f:a6:12:f2:ff:53:08:f9:66:cc:38:3f:f1:19:95:
31:89:00:fa:11:e7:49:12:57:43:80:33:84:39:b7:
8e:f5:ab:1e:a6:c5:63:e8:56:a9:88:ff:3e:23:50:
23:d4:02:78:d6:d0:63:77:e8:08:17:3a:62:f8:ca:
1a:89:5c:81:6e:7f:e5:c7:fd:59:d2:18:5c:59:3e:
4c:5d:4d:b6:83:a9:78:cf:b7:0d:8a:19:bc:06:de:
7d:71:8c:da:93:91:4c:13:b6:06:4e:1a:76:0f:7e:
2f:64:07:c5:f5:cc:32:60:68:30:ef:ae:d7:99:e0:
13:3e:6b:99:68:77:4e:57:07:5b:10:bc:ce:93:94:
95:23:89:40:05:d2:ce:53:47:88:13:35:d5:3e:5e:
08:cd:8c:90:a9:1a:23:d9:55:f2:1b:ba:ea:2f:28:
eb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:32:EE:E7:BC:C3:17:03:B4:37:DE:61:39:75:EA:54:2A:1F:09:41
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hTLu57zDFwO0N95hOXXqVCofCUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.189.0/24
81.21.2.0-81.21.15.255
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:eb:45:d2:55:fa:43:85:7f:72:61:ce:b2:a2:b5:86:3b:91:
e2:ee:5f:4e:bb:58:2b:ec:67:66:e4:a1:be:aa:d3:a0:30:c5:
0d:ae:65:95:30:a9:fe:50:78:27:53:27:c7:ab:94:88:3a:5e:
ba:b6:67:cd:7d:3d:a8:eb:42:06:1a:3c:bf:f8:53:5c:b8:59:
4e:69:85:5f:a2:16:60:e8:a1:76:54:39:b8:f7:47:47:c4:2c:
7a:ad:8f:5d:ea:15:79:de:d7:c0:46:56:0d:37:ad:6a:b0:f0:
75:90:ca:12:b0:62:ba:5b:9d:90:4a:b3:27:a0:1e:f0:fe:8c:
43:e8:15:a3:da:13:10:68:18:fe:07:c6:d2:b6:26:e1:bb:33:
65:f5:01:b0:ee:1a:73:35:9f:69:83:c4:dc:26:08:55:bf:57:
2f:f8:d0:96:3e:36:00:4d:bd:4a:ba:30:df:f7:03:3f:06:5a:
42:cc:fd:a1:58:21:42:be:eb:2f:f0:e0:bf:1f:ac:95:ea:dc:
ea:96:74:d9:57:2e:72:66:9d:74:77:ac:98:ea:b3:9f:4c:f6:
07:94:fa:3a:43:fe:8e:52:7b:5d:64:0e:04:c0:6f:b5:06:78:
10:99:ea:ce:93:31:1e:78:b1:25:38:55:85:5d:ea:4a:9b:63:
bf:aa:21:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org