Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lztRLi_vmE_JRWUonAi83hDRwMQ.roa
File: lztRLi_vmE_JRWUonAi83hDRwMQ.roa (raw, json)
Hash identifier: HG7iOAX9SOPWxIz0tcPBM1wkzBDJRqqbeaq/ZXDdJ/s=
Subject key identifier: 97:3B:51:2E:2F:EF:98:4F:C9:45:65:28:9C:08:BC:DE:10:D1:C0:C4
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0189DE75A4437F4AE8FA617F2D1CC8F01BB9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lztRLi_vmE_JRWUonAi83hDRwMQ.roa
Signing time: Thu 10 Aug 2023 07:59:58 +0000
ROA not before: Thu 10 Aug 2023 07:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.13.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.170.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.1.0/24 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 20:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:75:a4:43:7f:4a:e8:fa:61:7f:2d:1c:c8:f0:1b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 10 07:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=973b512e2fef984fc94565289c08bcde10d1c0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:06:d0:2c:b5:ef:c1:ad:cd:10:59:95:71:04:
ae:ae:5e:66:1a:f1:74:8a:7a:4c:7a:90:70:4b:d1:
c5:18:bf:05:72:82:c7:6d:51:6c:34:ac:f4:0a:44:
2b:13:2e:2b:4f:f3:de:b8:f0:5e:bf:92:6d:f8:f0:
b0:8d:98:d4:f1:c2:cf:e8:c3:59:06:d8:a3:e7:0b:
f1:31:c6:74:70:c3:bb:53:93:b7:5b:ae:a5:75:de:
ed:92:bf:3d:ee:b2:d9:a8:a3:ce:e0:0d:f9:fc:f0:
f2:81:4d:1d:b5:82:d9:db:e8:5a:65:54:fc:99:31:
54:5e:f5:6a:be:ae:d7:93:8a:8b:1d:8a:de:4a:62:
86:c5:dd:42:43:86:ad:82:74:e3:65:dd:ec:52:8b:
e7:18:41:28:37:db:10:bd:90:0a:9f:90:d2:48:fc:
59:05:47:75:eb:b1:4e:a5:23:ff:e5:24:1f:ba:7c:
71:7c:00:03:2f:52:bd:de:de:bb:37:87:f4:78:ba:
07:c5:92:d2:21:c4:37:2f:4e:af:1f:8d:cb:18:31:
40:ed:4d:8c:12:a1:66:13:3a:35:23:c9:23:43:f1:
08:95:22:97:da:5e:0a:80:97:07:fb:9a:38:c9:d8:
4f:0f:e3:38:12:81:d6:4a:a1:41:b6:ac:e8:7f:42:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3B:51:2E:2F:EF:98:4F:C9:45:65:28:9C:08:BC:DE:10:D1:C0:C4
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/lztRLi_vmE_JRWUonAi83hDRwMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.163.255
62.72.165.0/24
62.72.169.0-62.72.170.255
62.72.175.0/24
62.72.177.0/24
62.72.179.0/24
62.72.181.0-62.72.182.255
62.72.185.0/24
62.72.187.0-62.72.189.255
62.72.191.0/24
81.21.1.0-81.21.3.255
81.21.8.0/24
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:df:da:8c:a4:f6:b3:15:cf:36:29:a3:22:d2:a4:39:79:1e:
5a:9e:5d:95:c9:d5:c3:b8:67:e9:79:61:61:b5:4d:87:31:81:
f5:96:e5:74:06:a9:3d:86:3a:a9:6b:b4:60:95:8e:48:74:a1:
80:56:7d:ce:b1:62:51:22:3f:d8:f0:d0:62:0a:7a:98:20:bc:
27:68:9c:f9:91:59:ea:00:c4:ad:18:31:ec:c9:b6:d1:7b:7a:
2a:0f:35:12:36:b7:40:2d:fa:08:85:6c:83:ee:9f:a0:e0:d9:
15:68:ff:75:e6:b1:67:15:0b:8b:b3:d9:b3:f2:60:20:11:5f:
7f:15:3b:b1:a5:d3:1b:53:8c:a2:10:5e:f9:53:c2:10:8b:48:
ed:a0:6b:10:30:a1:83:6a:71:7c:36:9e:8e:ce:af:56:71:ce:
b4:be:05:3a:10:fb:f8:b5:e4:12:9a:32:bb:69:5b:39:05:e3:
05:fe:4d:fb:3e:96:18:8e:4b:8d:77:94:e0:d2:af:d9:55:e0:
6b:45:85:0a:17:1f:d1:d1:6a:bd:3d:45:49:f8:74:e9:87:7f:
8c:14:88:08:ef:90:b7:9e:ae:b8:95:4c:2f:6f:24:7e:32:bc:
7f:9f:50:a2:94:cc:f9:d8:dd:ec:1f:e1:78:f9:93:08:e0:7a:
c2:66:21:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org