Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/j6EXQQN9vwczC3lLlKzRqL6naGQ.roa
File: j6EXQQN9vwczC3lLlKzRqL6naGQ.roa (raw, json)
Hash identifier: RbN4hKOTnx/b6jS/Rt17xgAheAvQ0qEFnn4fme68Hxk=
Subject key identifier: 8F:A1:17:41:03:7D:BF:07:33:0B:79:4B:94:AC:D1:A8:BE:A7:68:64
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018A7DBF2149E743EA03FCD74895D203233F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/j6EXQQN9vwczC3lLlKzRqL6naGQ.roa
Signing time: Sun 10 Sep 2023 06:19:52 +0000
ROA not before: Sun 10 Sep 2023 06:19:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.164.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
62.72.171.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.1.0/24 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Sep 2023 18:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7d:bf:21:49:e7:43:ea:03:fc:d7:48:95:d2:03:23:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 10 06:19:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fa11741037dbf07330b794b94acd1a8bea76864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:3f:ce:e5:54:51:76:d2:0c:3e:4a:d7:c2:
98:82:c9:4d:9c:be:4b:1a:7d:67:18:9d:02:24:10:
4e:1e:3a:ac:13:5e:54:11:46:30:8f:8b:79:49:53:
ef:9e:2b:d1:76:c2:58:5a:4a:3e:4f:08:b8:cd:62:
24:c5:41:8c:52:6d:7d:89:b3:fa:ed:de:2c:73:7d:
9a:b6:e7:92:96:0c:2d:46:10:e9:c0:04:41:76:56:
06:c7:19:b0:9f:34:fd:1c:a4:a7:cd:35:96:43:fe:
bd:65:f2:96:58:ff:a6:ea:e5:bc:1a:3a:fb:33:ad:
1d:58:38:f6:04:12:73:a9:07:4f:63:6d:ec:7c:a2:
bc:39:89:87:0f:b4:eb:2c:a6:33:fb:0a:b1:cc:8e:
eb:f1:ed:bf:92:99:eb:ca:d2:12:2e:4f:96:41:09:
94:8e:4c:c5:58:14:69:66:a9:c0:28:a2:03:88:f7:
2c:06:71:cd:05:ec:e0:bb:55:b5:59:ce:f5:d5:e7:
e8:76:47:09:03:f1:e6:58:17:fd:c0:c9:60:2a:2c:
c5:e4:fb:0b:59:26:ca:6a:c6:17:54:26:13:fa:b0:
f3:36:b5:d4:7c:92:97:0e:93:d6:a8:8f:e4:6d:fa:
0b:35:b6:03:07:8e:98:dd:69:44:a0:06:d6:e4:30:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A1:17:41:03:7D:BF:07:33:0B:79:4B:94:AC:D1:A8:BE:A7:68:64
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/j6EXQQN9vwczC3lLlKzRqL6naGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.165.255
62.72.168.0/22
62.72.173.0-62.72.175.255
62.72.177.0/24
62.72.179.0/24
62.72.181.0-62.72.182.255
62.72.184.0-62.72.189.255
62.72.191.0/24
81.21.1.0-81.21.8.255
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.58.0/23
176.57.62.0/23
Signature Algorithm: sha256WithRSAEncryption
84:92:e8:c3:26:c3:4b:7d:85:d5:87:ff:87:28:03:04:cf:5c:
dc:06:ce:35:27:c1:4b:09:d5:0b:68:24:8c:f9:9f:be:b8:bc:
c5:c0:7f:9a:8e:52:29:d5:2a:ff:a4:78:49:91:55:9f:bb:3d:
7b:a1:f1:fc:91:93:6f:e4:0c:22:40:d4:ac:2c:73:fb:b7:df:
a0:7b:8b:c1:b4:ee:38:84:96:3f:7e:2e:7e:9f:76:e6:89:eb:
fe:ff:57:7e:0d:35:a1:31:bb:f6:3f:f9:9a:1c:6f:4f:4d:15:
0a:c5:b6:0a:9a:51:34:2a:d8:64:07:8c:3b:1c:d9:e3:93:5c:
a6:47:c9:81:77:87:91:32:dd:cd:5c:c9:5d:88:61:96:86:72:
62:fe:35:f4:25:26:ac:31:53:57:eb:38:ec:42:0d:17:a1:aa:
31:7b:19:25:55:4f:5d:58:03:09:66:97:87:d9:77:80:82:86:
dc:1c:ca:ed:d1:64:33:22:e5:e1:7f:73:d4:0a:1d:32:b4:6f:
b9:50:d5:e4:62:5b:2c:2e:ba:21:02:f8:c1:68:40:8c:40:7a:
8e:6f:ae:58:b6:8f:ad:74:3d:8b:5c:03:05:96:08:87:0a:40:
62:fb:a9:5c:a2:67:b7:36:c0:3c:56:1a:32:7e:6d:1d:8c:6c:
15:41:d2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org