Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/kkjK6WMidYmMCSVRFWwlryDUkvg.roa
File: kkjK6WMidYmMCSVRFWwlryDUkvg.roa (raw, json)
Hash identifier: ZIoDg0XXHdwcuBSSkVCAXyb9gRuyNtO8XOTJwEAvLJA=
Subject key identifier: 92:48:CA:E9:63:22:75:89:8C:09:25:51:15:6C:25:AF:20:D4:92:F8
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0188A41460EC69B42B0B0DD9D2E4A0AC00B5
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/kkjK6WMidYmMCSVRFWwlryDUkvg.roa
Signing time: Sat 10 Jun 2023 06:52:58 +0000
ROA not before: Sat 10 Jun 2023 06:52:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Jun 2023 17:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a4:14:60:ec:69:b4:2b:0b:0d:d9:d2:e4:a0:ac:00:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 10 06:52:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9248cae9632275898c092551156c25af20d492f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:19:e3:bd:26:10:0e:b3:57:f3:07:04:d4:d4:
95:1d:07:6c:8b:48:71:1e:c5:72:53:c7:f2:a8:fa:
dd:ba:c6:4a:ea:80:ab:b6:c5:ce:8e:38:a5:a8:fa:
22:90:cf:ee:80:8c:bc:6f:66:39:96:40:3e:0e:8c:
e2:d9:16:08:28:8e:82:2e:8c:62:48:90:14:92:51:
eb:62:0b:0c:74:0f:1b:13:5b:ea:a6:6c:b0:3c:e8:
9c:a8:d0:1e:1a:fb:34:c4:43:48:34:4b:31:03:61:
0c:1c:36:bd:53:1f:d9:e5:21:ee:51:4e:6c:11:cd:
f9:48:57:78:11:a9:14:5c:c9:0f:c8:7e:86:14:b9:
cc:45:91:3c:7b:2c:2e:10:1b:d5:71:7f:95:9b:bb:
38:90:91:c4:0f:f4:e6:5e:ed:16:5b:04:1c:00:73:
18:51:90:c7:4a:62:24:47:b2:b2:56:39:6d:8f:d9:
5d:11:be:20:2d:cb:11:72:57:3e:46:79:da:88:7d:
a0:4a:8b:5a:ff:60:8e:9a:f9:3c:25:cb:ff:f5:f1:
e4:5b:5e:ab:66:aa:ad:cb:95:c3:c6:84:1a:67:02:
c7:20:c7:86:56:9d:d4:24:84:75:b9:5c:55:12:75:
b8:46:b5:fa:67:11:5d:5a:1d:69:f3:50:65:9d:24:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:48:CA:E9:63:22:75:89:8C:09:25:51:15:6C:25:AF:20:D4:92:F8
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/kkjK6WMidYmMCSVRFWwlryDUkvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0/24
62.72.185.0-62.72.187.255
62.72.190.0/23
81.21.12.0/22
176.57.51.0/24
176.57.53.0/24
176.57.62.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:07:76:b0:fa:bb:86:b9:40:6d:9c:da:38:2b:ad:5c:76:c1:
3c:cd:15:ff:f3:a3:1d:1c:d1:6b:3b:6e:bf:69:72:ac:82:e8:
b6:86:80:00:e6:f7:d9:e6:cd:8b:7c:12:37:54:30:91:03:54:
02:fd:de:83:86:75:1e:14:ff:7c:1b:50:5e:4d:99:6f:c8:46:
90:94:ea:6f:bd:03:64:89:c2:45:8f:a8:46:39:97:83:a0:62:
5b:33:be:2b:00:c5:2c:ba:6a:e9:ca:f8:8d:dd:a6:43:59:7c:
49:b8:ac:93:30:6c:1b:27:12:86:85:d4:f9:a6:43:3b:56:3f:
59:aa:75:ae:2f:94:01:c9:e5:95:31:e7:b7:96:03:d6:ad:7a:
e3:f5:d2:62:05:66:b6:a4:e4:56:7b:39:75:97:e3:ea:d1:ac:
34:27:54:98:55:cc:cc:f2:d9:70:4f:b9:4a:41:36:27:cf:1a:
7b:aa:20:79:03:93:19:9f:ce:4d:14:3e:98:16:42:41:71:76:
1e:15:0a:4d:6d:3a:28:ed:32:b2:79:9d:ac:cf:71:c3:da:d0:
b5:04:39:a6:e2:7a:17:8e:40:40:5b:7b:ed:36:ce:15:e1:e5:
59:47:7c:ed:e2:01:fe:be:31:df:3f:e6:9f:57:e8:8c:d8:7b:
ff:c5:db:aa
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYikFGDsabQrCw3Z0uSgrAC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwNjEwMDY1MjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjQ4Y2FlOTYzMjI3NTg5OGMwOTI1NTExNTZjMjVhZjIwZDQ5MmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBnjvSYQDrNX8wcE1NSVHQdsi0hx
HsVyU8fyqPrdusZK6oCrtsXOjjilqPoikM/ugIy8b2Y5lkA+Dozi2RYIKI6CLoxi
SJAUklHrYgsMdA8bE1vqpmywPOicqNAeGvs0xENINEsxA2EMHDa9Ux/Z5SHuUU5s
Ec35SFd4EakUXMkPyH6GFLnMRZE8eywuEBvVcX+Vm7s4kJHED/TmXu0WWwQcAHMY
UZDHSmIkR7KyVjltj9ldEb4gLcsRclc+RnnaiH2gSota/2COmvk8Jcv/9fHkW16r
Zqqty5XDxoQaZwLHIMeGVp3UJIR1uVxVEnW4RrX6ZxFdWh1p81BlnSTOMQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFJJIyuljInWJjAklURVsJa8g1JL4MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEva2tqSzZXTWlkWW1NQ1NWUkZXd2xyeURVa3ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAPkiiMAwD
BAA+SLkDBAI+SLgDBAE+SL4DBAJRFQwDBACwOTMDBACwOTUDBAGwOT4wDQYJKoZI
hvcNAQELBQADggEBAB0HdrD6u4a5QG2c2jgrrVx2wTzNFf/zox0c0Ws7br9pcqyC
6LaGgADm99nmzYt8EjdUMJEDVAL93oOGdR4U/3wbUF5NmW/IRpCU6m+9A2SJwkWP
qEY5l4OgYlszvisAxSy6aunK+I3dpkNZfEm4rJMwbBsnEoaF1PmmQztWP1mqda4v
lAHJ5ZUx57eWA9ateuP10mIFZrak5FZ7OXWX4+rRrDQnVJhVzMzy2XBPuUpBNifP
GnuqIHkDkxmfzk0UPpgWQkFxdh4VCk1tOijtMrJ5nazPccPa0LUEOabieheOQEBb
e+02zhXh5VlHfO3iAf6+Md8/5p9X6IzYe//F26o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org