Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/mTCLBhzr2Py_zxlfuAmjxRytla4.roa
File: mTCLBhzr2Py_zxlfuAmjxRytla4.roa (raw, json)
Hash identifier: W+pGBudaYUyzq/ku9cbi+213qxQkcWIEA5zQjtpGhRQ=
Subject key identifier: 99:30:8B:06:1C:EB:D8:FC:BF:CF:19:5F:B8:09:A3:C5:1C:AD:95:AE
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018D47797A6F54CBBD50A2B08764E649494E
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/mTCLBhzr2Py_zxlfuAmjxRytla4.roa
Signing time: Fri 26 Jan 2024 20:32:39 +0000
ROA not before: Fri 26 Jan 2024 20:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.185.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 07:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:47:79:7a:6f:54:cb:bd:50:a2:b0:87:64:e6:49:49:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 26 20:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99308b061cebd8fcbfcf195fb809a3c51cad95ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fc:ab:af:1f:5f:a6:6d:96:77:17:81:40:ff:
e7:6a:9e:80:4d:f3:45:aa:33:50:05:65:22:11:4f:
30:5b:ff:39:cf:de:96:41:96:0f:44:40:27:d5:09:
0d:ac:77:c7:e2:ce:39:91:24:34:7e:ec:18:a4:7c:
38:48:0c:9b:ae:e8:27:27:5f:7b:53:f3:9d:30:0b:
27:16:dd:38:7a:6f:f3:1f:ac:ac:26:15:46:db:99:
8c:a2:74:dc:cf:65:ae:8a:4b:a0:99:d5:d3:90:77:
d9:94:e1:39:6f:48:53:3d:42:59:a0:8e:bc:45:8f:
12:96:48:14:42:89:41:9d:1b:04:02:8e:23:a3:cc:
fc:79:76:bb:87:5b:f7:54:20:2b:b6:27:7b:1c:79:
28:27:56:ce:14:c8:d6:95:c5:20:47:20:a2:58:87:
ba:5b:77:a2:87:9c:9a:5b:9c:b8:70:0e:09:72:fa:
46:ff:87:2b:2d:43:f4:09:59:be:99:15:b9:27:c3:
45:1b:65:25:0b:b9:04:af:3a:66:69:00:e1:b5:f0:
fd:3c:5d:fc:30:35:32:03:65:83:c9:1e:fa:a5:f6:
8b:2c:68:b5:06:90:a1:b9:45:29:27:b2:15:8f:ef:
69:ad:ae:29:f2:1e:69:1f:d1:24:15:72:4e:3a:6e:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:30:8B:06:1C:EB:D8:FC:BF:CF:19:5F:B8:09:A3:C5:1C:AD:95:AE
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/mTCLBhzr2Py_zxlfuAmjxRytla4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.185.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:15:df:13:0b:6c:73:7d:b3:0b:5f:fd:b2:26:3e:b3:15:fd:
ea:a7:7f:44:7b:c7:23:a9:da:44:d1:19:02:91:09:5c:ef:ad:
fc:c5:d7:39:18:66:f2:e9:90:86:19:91:51:6c:c2:22:ee:c7:
3e:c4:00:59:11:bd:e7:ab:13:a7:e6:21:5c:1a:a7:23:a8:32:
b6:d7:c0:21:57:cc:3b:6c:1f:89:a3:76:1c:d6:83:7e:d2:dc:
71:39:a0:ec:20:d5:2b:4a:0a:b9:ac:d5:79:6c:b8:a3:c8:45:
52:81:c8:02:80:75:05:b4:5b:73:4d:38:39:6c:ef:fc:7b:56:
f9:b1:19:7c:6b:a9:49:85:4d:cb:32:95:1b:d3:e6:5f:27:bb:
16:80:26:47:56:13:0a:52:c3:94:ee:71:94:62:fa:8d:57:4d:
50:be:2d:57:b0:82:5b:a2:0a:21:b8:55:cd:0d:8d:b7:85:cd:
c7:13:76:aa:e7:e9:90:54:76:2f:16:c5:7a:8f:42:16:0a:04:
d9:7d:65:e8:08:69:4c:56:3b:d7:d8:1f:eb:6c:0f:2a:a6:bb:
01:dc:8c:03:02:9d:5b:cf:0a:d7:b9:69:9b:54:cf:44:16:68:
ea:27:88:9f:be:75:41:30:82:d9:8c:33:69:e8:95:e8:f6:80:
97:4d:ad:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org