Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i6ovlf5cE9B3XQEnZU2PuiBtpQI.roa
File: i6ovlf5cE9B3XQEnZU2PuiBtpQI.roa (raw, json)
Hash identifier: KI9sdCzoGChQrptHouOjgKpPLSnMZAxrsjrm3P8tFpw=
Subject key identifier: 8B:AA:2F:95:FE:5C:13:D0:77:5D:01:27:65:4D:8F:BA:20:6D:A5:02
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0189D92097AC560B7D0FF8392D8FABF357F3
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i6ovlf5cE9B3XQEnZU2PuiBtpQI.roa
Signing time: Wed 09 Aug 2023 07:08:59 +0000
ROA not before: Wed 09 Aug 2023 07:08:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/24 maxlen: 24
81.21.3.0/24 maxlen: 24
81.21.1.0/24 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 07:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:20:97:ac:56:0b:7d:0f:f8:39:2d:8f:ab:f3:57:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 9 07:08:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8baa2f95fe5c13d0775d0127654d8fba206da502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f5:9a:95:f5:58:c4:e0:8e:09:3f:b1:1e:55:
a0:66:a9:27:87:8e:7a:35:b7:04:71:33:88:8e:fb:
b5:d7:e1:c6:6a:ba:c2:9b:ee:48:e6:c0:4e:3e:49:
8e:a9:9b:f6:2a:bb:5c:8f:94:1d:48:43:a8:f3:5c:
03:00:92:72:cb:b5:b3:52:c4:d1:3b:00:4c:f5:56:
33:39:ea:ee:37:e8:ea:1c:6f:f5:0f:e2:9e:b9:7a:
51:a6:ad:d0:c7:01:b4:fc:99:28:7f:b5:34:8b:0c:
af:a7:3c:98:78:66:90:65:8a:3f:38:d0:0b:20:1c:
f3:b7:a8:a8:c9:d6:7f:5a:5f:49:01:a1:c7:9f:43:
c2:9d:23:34:76:4b:2e:15:b9:56:48:2e:a1:ec:2d:
fc:ac:27:8e:46:82:3e:08:04:90:86:85:06:a8:91:
20:37:c8:69:44:09:7a:aa:9a:8d:4f:99:13:d2:ec:
ee:b4:ae:df:ac:f6:47:f7:65:f9:dd:18:20:2f:59:
df:e7:10:ac:82:2d:79:bb:2e:0b:37:d2:89:e9:58:
da:7e:ec:1c:ee:ce:a2:a2:5b:ae:b6:64:f9:89:5f:
0e:e3:d4:ec:63:eb:83:b8:df:e8:4f:32:b8:30:42:
a4:7d:b7:2c:f7:87:89:00:ba:fc:e0:d8:29:58:36:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AA:2F:95:FE:5C:13:D0:77:5D:01:27:65:4D:8F:BA:20:6D:A5:02
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i6ovlf5cE9B3XQEnZU2PuiBtpQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.163.255
62.72.165.0/24
62.72.169.0-62.72.170.255
62.72.175.0/24
62.72.177.0/24
62.72.179.0/24
62.72.181.0-62.72.182.255
62.72.185.0/24
62.72.187.0-62.72.189.255
62.72.191.0/24
81.21.1.0-81.21.3.255
81.21.8.0/24
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
19:cf:f3:4b:35:ec:41:3d:f6:85:c2:89:8e:50:2e:51:04:b8:
02:ba:1c:f8:37:70:e1:65:b1:04:33:f8:87:de:01:1d:36:b2:
48:29:60:25:ab:62:14:d5:69:1a:e3:85:36:83:2a:2f:b6:3f:
e7:2e:f7:c7:83:3b:fb:06:96:d8:00:21:ae:6f:8c:36:37:48:
1c:88:9f:7d:05:75:5d:4c:8b:e9:52:dc:16:5d:e7:72:bd:3c:
d6:4b:fe:ee:6e:e4:4a:45:80:da:4b:2f:c3:26:d6:b3:80:e2:
b1:bd:b1:33:ce:ff:26:3b:3a:4a:88:78:1a:9d:57:e1:34:19:
f0:bd:1d:49:4d:f5:31:7a:44:7c:62:32:86:6f:47:e8:b3:4f:
09:7e:9d:37:55:1c:bb:ed:f2:c7:4d:78:e4:ba:e3:d7:60:c3:
9a:b5:56:5a:b4:a5:5d:12:26:8e:6e:0e:ad:c7:4c:f5:89:fe:
fb:46:14:4e:2f:cf:ac:08:00:26:aa:0c:a6:17:4a:46:46:4b:
29:c0:e4:29:5b:b8:01:51:42:b0:5d:96:a9:a3:07:eb:08:47:
1c:04:d1:60:43:ae:2d:a6:fe:2d:ab:fa:3c:2d:a0:67:25:cf:
e5:50:df:ff:32:4f:db:db:5b:a8:a9:7b:54:65:c0:c9:b4:5a:
0d:dc:34:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org