Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/oTHrUBPkhZEGk5I9nZ-WWae6tHc.roa
File: oTHrUBPkhZEGk5I9nZ-WWae6tHc.roa (raw, json)
Hash identifier: zkqw59xiWDxcaJIhltFHcuEr1YFynRzJAhp2vhjJ4MQ=
Subject key identifier: A1:31:EB:50:13:E4:85:91:06:93:92:3D:9D:9F:96:59:A7:BA:B4:77
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0190D47162644D5A383E4159A69513DEDF89
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/oTHrUBPkhZEGk5I9nZ-WWae6tHc.roa
Signing time: Sun 21 Jul 2024 08:38:38 +0000
ROA not before: Sun 21 Jul 2024 08:38:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.14.0/23 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jul 2024 06:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d4:71:62:64:4d:5a:38:3e:41:59:a6:95:13:de:df:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jul 21 08:38:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a131eb5013e485910693923d9d9f9659a7bab477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e1:c8:23:a1:8e:13:37:7e:cc:bd:03:56:90:
50:a0:5a:05:a7:b8:ba:d4:64:5e:b1:12:ad:06:4e:
0f:63:c8:0c:b8:e4:36:9e:eb:f7:de:f5:44:59:f2:
26:27:74:74:6c:58:8c:bc:44:4e:00:4e:20:16:54:
00:44:a9:f5:4c:60:50:dd:2f:a8:ae:c9:0f:33:c8:
ee:c7:18:dc:20:0e:cb:7e:4f:f9:66:2c:92:cf:f7:
c4:7a:9f:de:86:a9:e1:00:9b:f1:ad:e8:97:6e:e4:
cd:59:4b:fc:64:81:5f:3f:be:4f:ee:b3:62:bf:bd:
6e:f1:16:15:13:db:b8:8a:3a:bc:1c:c8:70:b0:18:
64:9c:80:ed:5c:43:0b:2c:ae:eb:b1:2f:ce:ed:20:
f7:b7:40:a0:73:23:d6:da:9f:4e:e0:27:79:9e:60:
88:4a:dd:17:e4:c7:2d:a8:45:f3:d0:cc:36:df:9a:
e2:ad:90:a1:61:88:9f:15:63:20:56:44:fe:ba:13:
d2:23:3d:6e:1b:a9:b9:8c:ff:96:97:34:11:62:5b:
85:d2:6e:a8:09:7e:66:dd:56:48:81:8a:89:14:d0:
18:36:36:38:e4:9e:8f:a0:a9:ae:45:81:6c:b8:2e:
08:22:88:8b:65:43:9b:b9:54:1b:87:7f:f1:72:23:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:31:EB:50:13:E4:85:91:06:93:92:3D:9D:9F:96:59:A7:BA:B4:77
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/oTHrUBPkhZEGk5I9nZ-WWae6tHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.186.0/24
62.72.189.0/24
81.21.2.0-81.21.15.255
176.57.57.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
39:1a:0d:02:36:40:09:f7:19:2e:e6:bc:40:5d:94:38:7b:8a:
58:b7:31:48:33:a1:ee:47:22:de:b8:c6:1e:6e:e1:dc:b5:de:
f4:85:59:16:61:58:ae:5d:26:4b:f3:92:b6:c0:f2:cb:2e:c3:
f8:da:fa:62:90:73:9a:c2:e0:3d:38:ed:e3:ff:f9:b6:74:9a:
35:31:ab:3f:62:a8:35:45:99:79:39:78:90:60:da:cf:60:f6:
2b:09:07:df:86:5c:e7:b2:7a:a3:3d:0f:7f:c3:a7:30:0e:a2:
4b:10:ac:e0:a1:6d:cd:b8:c0:bb:02:31:da:06:3f:c2:a2:c0:
b3:8d:c6:64:66:5f:0a:e5:02:e0:2b:38:bc:80:13:b4:05:02:
92:bf:65:b8:6f:3d:0d:ac:88:b1:b8:17:82:42:93:f2:08:d7:
c4:ca:3c:04:9b:0f:e9:22:55:ff:bb:3e:5f:73:c6:5c:cf:e8:
17:a7:90:26:60:96:0e:41:0d:92:ac:21:8d:9c:f2:f2:f4:d1:
0b:0e:a3:9a:89:62:f1:95:1e:3c:62:f4:25:d3:74:33:99:68:
13:e2:d2:b2:f1:83:4b:73:f5:2a:55:df:d9:17:7d:c1:c5:e4:
e3:fc:d1:e3:94:90:38:ee:e0:e1:9a:61:41:af:25:76:4f:9d:
10:1c:92:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 09:54:23 2024 by rpki-client on console-ams.rpki-client.org