Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lwC-bSRHMfqfnpnYmkI5BYfv1HI.roa
File: lwC-bSRHMfqfnpnYmkI5BYfv1HI.roa (raw, json)
Hash identifier: SrRIKBenMZkNbAgspolNSJB2GXdyrWOP3veVvXG9540=
Subject key identifier: 97:00:BE:6D:24:47:31:FA:9F:9E:99:D8:9A:42:39:05:87:EF:D4:72
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0192BE2E6DFD60728C4D8990B8AC23500029
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lwC-bSRHMfqfnpnYmkI5BYfv1HI.roa
Signing time: Thu 24 Oct 2024 10:59:26 +0000
ROA not before: Thu 24 Oct 2024 10:59:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.185.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Oct 2024 08:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:2e:6d:fd:60:72:8c:4d:89:90:b8:ac:23:50:00:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 24 10:59:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9700be6d244731fa9f9e99d89a42390587efd472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:60:43:c5:d5:18:f2:e5:0a:59:2e:1d:91:
fa:20:ff:79:b8:1c:35:49:d2:2a:7a:7e:ad:bd:9f:
14:d9:80:f6:56:19:8a:9e:67:3c:09:ea:0f:58:c1:
6a:1b:d8:56:9f:8c:01:87:b7:80:83:2a:2e:cb:bf:
3a:6c:91:67:2f:3a:90:d6:19:60:37:45:41:94:e6:
ee:46:38:fb:f9:4f:bb:c0:c0:ed:94:cd:f7:1e:6c:
07:18:9d:03:33:ba:65:bb:e5:92:30:6a:00:ca:1e:
31:6d:b9:4c:ee:11:09:14:b2:bd:52:18:dc:03:f7:
06:64:79:f1:00:b9:67:78:fe:a9:14:77:b9:1d:fd:
33:58:41:d8:5b:ff:5b:47:ad:64:e1:0e:a8:2d:12:
d0:16:41:92:1c:00:26:10:8a:a8:0b:d4:23:78:9c:
e9:9b:5a:c8:a4:f7:83:51:c4:54:4a:ab:9b:fd:e3:
fd:e1:03:ca:57:db:f7:9a:6e:f5:55:f0:d3:0d:a6:
41:8b:ad:d1:51:99:8e:6d:05:de:61:31:c9:a8:0d:
de:af:ce:28:63:17:41:78:07:46:8c:b7:f9:ca:43:
97:e4:a9:21:02:86:34:9c:20:dc:33:65:65:4b:62:
e8:5b:65:f5:b0:9d:e7:86:32:19:4d:15:b0:f2:e5:
29:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:00:BE:6D:24:47:31:FA:9F:9E:99:D8:9A:42:39:05:87:EF:D4:72
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lwC-bSRHMfqfnpnYmkI5BYfv1HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.185.0/24
62.72.189.0/24
81.21.2.0-81.21.12.255
81.21.15.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
29:55:01:f1:f5:4b:a3:b3:65:c0:bf:48:f1:c9:4c:33:26:82:
44:a9:1c:c8:18:c1:de:95:76:11:6e:cd:03:9b:9d:37:c9:c0:
25:b0:68:db:88:22:47:3a:56:dc:7d:39:a4:fa:ff:87:b6:fd:
ad:cb:8c:e5:6b:00:d4:af:06:40:02:3d:00:6c:c2:d9:ba:c2:
0f:3a:5a:fd:6a:59:95:b0:2b:76:7f:23:25:1a:22:e6:5b:f3:
14:9b:47:6f:20:6a:14:9d:64:79:e1:97:83:19:5e:4c:35:52:
43:4d:d0:03:b1:71:85:b6:d7:6a:01:16:2f:1d:e9:d3:fe:e3:
23:78:6c:10:19:25:34:8e:56:df:63:fa:57:b6:cf:a8:d1:13:
51:df:bd:20:5b:e7:66:e4:fe:12:95:67:77:8d:60:a5:bf:ba:
d5:7d:7a:28:d1:0d:07:14:14:a5:20:82:b7:41:4b:b0:24:73:
4f:52:03:bb:8f:8c:af:87:bd:2e:53:e0:ac:0b:a4:ef:db:57:
d5:1a:8e:d0:7a:88:12:e4:21:d9:ff:dd:d1:b6:3e:32:07:4a:
fa:9c:b6:c8:76:72:4c:88:ec:d0:70:79:b1:8a:6b:2b:3c:0e:
24:b8:40:78:06:ff:74:cb:0c:bb:b8:cc:d0:99:0a:f7:63:b6:
6a:18:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 27 10:02:23 2024 by rpki-client on console-fra.rpki-client.org