Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i2smvWokVZBkz_5A_CJkb3CynHw.roa
File: i2smvWokVZBkz_5A_CJkb3CynHw.roa (raw, json)
Hash identifier: tT92Qi86Nk8R0nvDpovg2UY7pTj3Ffbt8rDNdSHkx5c=
Subject key identifier: 8B:6B:26:BD:6A:24:55:90:64:CF:FE:40:FC:22:64:6F:70:B2:9C:7C
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0192F1F4236DFC6D4879D0F2028725624BC3
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i2smvWokVZBkz_5A_CJkb3CynHw.roa
Signing time: Sun 03 Nov 2024 12:16:01 +0000
ROA not before: Sun 03 Nov 2024 12:16:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.185.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Nov 2024 11:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f1:f4:23:6d:fc:6d:48:79:d0:f2:02:87:25:62:4b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 3 12:16:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b6b26bd6a24559064cffe40fc22646f70b29c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:6a:9e:c9:4d:cc:74:6a:97:28:44:44:35:
c2:7b:43:2a:50:93:b6:6b:c9:86:ab:61:48:0c:ce:
9f:87:70:0f:10:89:f4:13:6f:6e:f6:49:b2:f5:e6:
0f:e5:c1:e5:05:13:a1:64:20:c8:4b:0e:3e:c8:23:
8e:19:a0:af:0e:9e:a2:68:0d:ac:c5:d5:68:c3:0f:
b1:bd:f7:5c:1a:c0:e6:c0:b2:71:aa:8f:0e:5c:18:
9a:e0:e9:9f:6a:54:b8:40:2e:68:7e:0f:31:c1:d6:
01:9f:ef:35:1a:5f:8c:6d:35:a4:ed:74:6f:d9:51:
f5:68:fe:b2:29:52:fb:bd:00:36:8e:c7:69:f5:af:
a2:e7:bd:32:ba:99:dc:9f:eb:83:85:7e:2e:3a:a5:
ac:e4:9a:00:e6:9e:08:fd:d2:b0:a2:4c:a5:a8:9c:
78:27:f9:fc:0d:fb:d8:b6:8a:ce:0b:40:65:23:d1:
9a:37:81:f6:83:b5:93:43:43:f3:a7:62:6b:3f:03:
1f:20:98:1a:0c:c2:99:89:04:f1:70:85:3a:77:0e:
fe:8e:68:79:d9:20:9b:ea:5d:f9:4b:96:ea:c4:d6:
2e:e3:d7:ef:e2:df:56:25:b5:50:d3:e4:29:b7:16:
65:8b:c5:b4:65:b2:ac:a8:11:9b:f9:46:0a:c7:cb:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6B:26:BD:6A:24:55:90:64:CF:FE:40:FC:22:64:6F:70:B2:9C:7C
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i2smvWokVZBkz_5A_CJkb3CynHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.185.0/24
81.21.2.0-81.21.7.255
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:20:86:08:a2:28:66:da:07:17:30:dc:4f:e5:0a:83:59:71:
3c:d0:dd:8a:f9:a2:01:e8:3f:fa:e2:42:85:c3:22:a1:92:ce:
0c:2f:73:93:68:24:33:ce:51:2e:e2:72:65:ed:a1:e7:94:f8:
ca:34:97:70:dd:8a:3a:3b:84:1b:25:ee:82:a3:b3:be:ec:3a:
0a:bd:47:b2:99:65:4e:05:58:f1:96:0d:0f:ea:9a:13:45:c9:
d2:90:f9:88:2a:7d:d4:d5:26:3c:8d:3f:1e:05:01:31:6d:f4:
9e:e1:3d:e9:12:f0:41:43:2b:e1:8c:44:52:11:01:2b:fc:3c:
6f:54:c3:01:3f:7a:39:fc:bd:0a:1f:b4:8d:cc:24:04:19:e2:
94:7e:cc:06:97:4b:b9:36:8c:7c:60:9c:62:0a:48:1e:06:62:
d9:31:d4:79:0c:b8:a3:80:53:68:83:44:8e:b3:05:e9:57:8c:
60:d0:d1:2e:a4:c1:e5:6d:b4:5a:c4:46:fa:66:ec:b9:fa:bb:
68:16:e5:e2:b4:56:e8:19:ba:75:27:8a:eb:5b:67:e4:8a:0d:
9d:6f:8d:8c:d0:97:69:e3:75:53:01:69:84:fa:b1:34:c1:8b:
14:df:24:c8:1c:f6:57:ba:5e:71:f6:ee:b5:89:ad:a4:55:f4:
20:49:01:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:05 2025 by rpki-client