Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/jIkdDr8rmIVR1UYAN6D6Lw8q63Y.roa
File: jIkdDr8rmIVR1UYAN6D6Lw8q63Y.roa (raw, json)
Hash identifier: K+hOamvWsd59sm+28b+/K5DzgciVuu1pEBf0jqENxvA=
Subject key identifier: 8C:89:1D:0E:BF:2B:98:85:51:D5:46:00:37:A0:FA:2F:0F:2A:EB:76
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01946A091101AD583620BE8E5816CE2CF6C8
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/jIkdDr8rmIVR1UYAN6D6Lw8q63Y.roa
Signing time: Wed 15 Jan 2025 12:56:06 +0000
ROA not before: Wed 15 Jan 2025 12:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.168.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 12:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:09:11:01:ad:58:36:20:be:8e:58:16:ce:2c:f6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 15 12:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c891d0ebf2b988551d5460037a0fa2f0f2aeb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:5b:19:65:15:91:90:fa:b9:82:6a:94:a3:
28:5d:67:0e:50:a9:01:65:cb:4c:ae:a8:ec:a4:0c:
2c:a9:e4:90:8f:5c:8a:2f:88:9b:78:a8:e2:f2:9e:
58:99:5f:88:a8:ed:75:9e:e2:b7:60:5f:19:cf:c9:
6f:f5:85:cd:fc:62:f7:4b:2f:94:89:63:a4:d0:b3:
11:11:d0:49:8c:bf:d2:c4:10:07:1e:47:ad:5a:c3:
99:6c:4a:a4:36:c5:02:18:2b:fb:ff:a6:2a:8b:ad:
dc:d2:f6:4e:46:49:87:d8:03:0a:91:f6:c0:d2:21:
f8:dd:7b:d6:d9:6f:c8:58:e1:cb:d8:6b:ec:43:d4:
66:8b:3f:95:57:3a:54:29:43:74:71:af:eb:fa:0c:
ec:de:a7:8a:fc:a8:fd:53:12:e1:c7:65:7d:63:1e:
b3:1c:bd:05:ff:4f:1b:c5:a8:f9:b6:3c:71:de:17:
66:b3:31:38:5e:be:cd:59:98:d1:91:9c:70:7e:fe:
32:b5:75:e9:0e:7a:39:ac:eb:55:64:56:50:f2:bd:
08:8c:0b:3d:b3:ae:03:f0:85:0d:ff:5c:a4:ef:f3:
76:c1:c2:5a:7f:96:2a:23:ca:bf:fe:a9:13:62:cd:
6d:2a:40:e6:fa:5d:19:d2:af:5e:d6:21:89:70:9b:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:89:1D:0E:BF:2B:98:85:51:D5:46:00:37:A0:FA:2F:0F:2A:EB:76
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/jIkdDr8rmIVR1UYAN6D6Lw8q63Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.185.0/24
81.21.2.0-81.21.7.255
176.57.56.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:cd:d1:6f:a7:76:9e:ff:14:28:9c:ef:97:4f:d4:d5:c0:f5:
7a:5b:10:37:8e:55:9c:db:38:4f:4e:b9:db:61:0b:be:6b:23:
ed:38:b4:89:90:99:43:a1:d5:9d:6e:21:46:4b:7f:8c:d7:f1:
61:1f:3f:d8:0b:82:cb:65:3a:91:c2:f1:69:8e:51:cf:2b:23:
05:e5:24:42:66:c3:53:e3:d4:f5:60:08:93:dc:6a:46:8b:aa:
21:d9:94:03:21:d0:b9:29:67:ed:27:3e:4a:bf:6a:8b:59:6a:
2b:96:98:c2:b5:16:dc:28:b7:25:22:c7:81:a9:e1:83:30:05:
70:e5:97:f1:04:d8:32:c8:78:b1:f4:c4:d2:0b:cd:73:60:04:
9e:5c:28:0a:85:ec:70:a2:93:a3:a7:6e:c8:d3:db:9f:1f:73:
3f:2f:9c:92:ac:e2:42:c6:d0:9a:2a:e3:27:85:ab:1a:cb:45:
a4:3a:36:62:b1:06:ef:11:8c:d4:25:1f:c6:b4:a4:c5:df:67:
ce:c5:8d:95:43:96:4c:a6:c5:2d:70:fa:50:cc:93:4c:9a:66:
a9:67:59:a8:f9:9f:0f:7c:a3:ad:0b:bf:09:3f:6d:63:d5:59:
c2:c8:28:99:d8:99:b7:3c:e9:a0:a7:eb:ce:11:51:f7:eb:c6:
f3:6a:b9:43
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZRqCREBrVg2IL6OWBbOLPbIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjUwMTE1MTI1NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yzg5MWQwZWJmMmI5ODg1NTFkNTQ2MDAzN2EwZmEyZjBmMmFlYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgJbGWUVkZD6uYJqlKMoXWcOUKkB
ZctMrqjspAwsqeSQj1yKL4ibeKji8p5YmV+IqO11nuK3YF8Zz8lv9YXN/GL3Sy+U
iWOk0LMREdBJjL/SxBAHHketWsOZbEqkNsUCGCv7/6Yqi63c0vZORkmH2AMKkfbA
0iH43XvW2W/IWOHL2GvsQ9Rmiz+VVzpUKUN0ca/r+gzs3qeK/Kj9UxLhx2V9Yx6z
HL0F/08bxaj5tjxx3hdmszE4Xr7NWZjRkZxwfv4ytXXpDno5rOtVZFZQ8r0IjAs9
s64D8IUN/1yk7/N2wcJaf5YqI8q//qkTYs1tKkDm+l0Z0q9e1iGJcJvWYQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFIyJHQ6/K5iFUdVGADeg+i8PKut2MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvaklrZERyOHJtSVZSMVVZQU42RDZMdzhxNjNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAE+SKID
BAA+SKgDBAA+SLkwDAMEAVEVAgMEA1EVAAMEALA5OAMEALA5PzANBgkqhkiG9w0B
AQsFAAOCAQEAv83Rb6d2nv8UKJzvl0/U1cD1elsQN45VnNs4T06522ELvmsj7Ti0
iZCZQ6HVnW4hRkt/jNfxYR8/2AuCy2U6kcLxaY5RzysjBeUkQmbDU+PU9WAIk9xq
RouqIdmUAyHQuSln7Sc+Sr9qi1lqK5aYwrUW3Ci3JSLHganhgzAFcOWX8QTYMsh4
sfTE0gvNc2AEnlwoCoXscKKTo6duyNPbnx9zPy+ckqziQsbQmirjJ4WrGstFpDo2
YrEG7xGM1CUfxrSkxd9nzsWNlUOWTKbFLXD6UMyTTJpmqWdZqPmfD3yjrQu/CT9t
Y9VZwsgomdiZtzzpoKfrzhFR9+vG82q5Qw==
-----END CERTIFICATE-----
Generated at Wed Mar 12 20:03:33 2025 by rpki-client