Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/kw21YnKvtML1pbvaQbDeUV32Rec.roa
File: kw21YnKvtML1pbvaQbDeUV32Rec.roa (raw, json)
Hash identifier: blxRQWTHqgcPNDkpqtNm4jzcmGPytMzNhPurK4GpR8E=
Subject key identifier: 93:0D:B5:62:72:AF:B4:C2:F5:A5:BB:DA:41:B0:DE:51:5D:F6:45:E7
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01904ACD6ACCEEAAF56694334284FA403294
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/kw21YnKvtML1pbvaQbDeUV32Rec.roa
Signing time: Mon 24 Jun 2024 15:11:34 +0000
ROA not before: Mon 24 Jun 2024 15:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.14.0/23 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 07:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:cd:6a:cc:ee:aa:f5:66:94:33:42:84:fa:40:32:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 24 15:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=930db56272afb4c2f5a5bbda41b0de515df645e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:b9:77:09:a4:c7:22:cb:0a:99:bb:96:39:
95:d2:87:8f:20:0d:df:38:a3:e3:29:2b:97:c6:de:
f7:88:c5:97:07:51:88:07:63:78:4c:62:08:55:e9:
1c:73:f1:db:48:d6:ca:5f:e4:53:f8:e1:9c:bc:e6:
91:6a:5a:97:d1:4f:ba:a4:11:bd:92:f5:e0:15:b7:
7c:e5:a8:fa:b6:99:10:e4:51:56:2c:46:a2:88:59:
d2:d3:47:9f:40:83:8e:54:f9:26:2f:d9:43:89:78:
99:c3:0a:f5:13:e5:ea:08:4f:c7:8a:d4:ee:eb:17:
a6:92:b4:fd:ed:6e:d9:16:2a:3b:ce:39:d8:a6:28:
f8:c7:27:66:f0:23:29:0d:31:fc:bb:29:d4:b9:50:
33:e0:f9:b8:c1:11:e3:bc:0a:2e:3e:45:b8:9d:3b:
cc:87:3a:18:d8:44:ab:e0:16:9f:4f:25:b6:58:46:
1b:4b:40:0c:2e:a1:b2:43:f6:47:80:ba:19:6e:c6:
ac:20:18:d8:8f:fe:df:49:50:ed:33:53:1d:3b:d8:
30:03:29:a6:d0:9f:92:66:88:03:b1:ce:b6:8d:32:
b7:f3:54:e7:b0:53:62:c1:6f:e7:68:32:9d:4d:2e:
f6:09:d7:df:ed:dc:1b:f5:34:56:e8:5a:7c:9c:75:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0D:B5:62:72:AF:B4:C2:F5:A5:BB:DA:41:B0:DE:51:5D:F6:45:E7
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/kw21YnKvtML1pbvaQbDeUV32Rec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.189.0/24
81.21.2.0-81.21.15.255
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:0d:3f:8a:12:dd:df:a4:08:64:94:b9:96:b2:fe:fb:83:20:
bf:b5:3a:8c:4f:8f:50:b4:b3:14:4b:a3:35:57:15:bd:f9:46:
0b:d5:c6:ad:88:4e:8d:fb:25:35:05:b8:3f:65:4a:45:e7:fd:
e4:fb:03:ec:59:7c:61:d5:fc:89:6b:40:cd:9f:b1:c7:cd:db:
6a:c6:0c:7d:e6:d1:b3:77:4b:e2:80:16:53:a9:04:3d:90:7d:
28:18:bd:2c:65:f9:0d:40:29:37:3f:6d:2a:af:6c:63:ca:58:
bf:f7:27:46:ba:5b:62:b8:fc:57:ba:18:70:a9:0b:90:fe:74:
62:81:e6:bd:f0:8b:48:56:ac:06:f5:01:63:bf:5b:9c:d5:9e:
77:01:10:35:e2:a1:b4:0e:6e:26:8d:53:23:0e:16:37:fa:c2:
f9:d5:f3:c1:fa:99:58:34:15:5c:e9:85:20:d3:df:2a:f8:55:
67:01:9d:bc:b5:3b:bd:21:34:b7:f1:e0:4a:5f:de:75:ee:fd:
2b:48:0e:88:8d:00:9a:b8:33:d4:66:23:46:61:8c:a9:2e:a9:
29:17:b1:5f:28:44:dc:8a:39:e8:45:ee:1d:44:53:25:f3:fd:
e9:05:ae:06:fc:19:58:94:f3:7f:cb:81:50:88:f0:35:aa:d5:
27:94:bc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 08:57:53 2024 by rpki-client on console-ams.rpki-client.org