Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/qDLHlVU9WeJZ8TUMJAlMZsLf3VU.roa
File: qDLHlVU9WeJZ8TUMJAlMZsLf3VU.roa (raw, json)
Hash identifier: BiMIt173kfFiRMiAzKoo+yEGz/L+q5LPAu8V42zMDy4=
Subject key identifier: A8:32:C7:95:55:3D:59:E2:59:F1:35:0C:24:09:4C:66:C2:DF:DD:55
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018E9DAD9EF269E5FA45EE3CF7D28F7C0E74
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/qDLHlVU9WeJZ8TUMJAlMZsLf3VU.roa
Signing time: Tue 02 Apr 2024 07:19:45 +0000
ROA not before: Tue 02 Apr 2024 07:19:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.183.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 12:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:ad:9e:f2:69:e5:fa:45:ee:3c:f7:d2:8f:7c:0e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 2 07:19:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a832c795553d59e259f1350c24094c66c2dfdd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2a:0a:26:19:bf:e9:dc:3b:5a:7b:6b:aa:9f:
25:66:74:03:72:ec:77:0c:a0:06:91:43:21:28:15:
fa:2f:82:ce:03:1a:7c:04:62:31:a1:dc:29:c8:57:
a3:ae:a0:82:1e:7f:d0:05:b6:e3:4c:48:a7:89:b6:
3f:1d:3c:8a:dc:89:38:66:2b:aa:a3:68:5f:fb:a1:
5b:ce:46:c6:3b:fe:a8:16:29:72:93:78:6a:86:9f:
53:ad:c9:b7:f1:fc:c1:82:7b:a2:ba:7d:05:ea:d9:
a7:e1:a7:3a:0a:1f:69:67:4b:58:bd:6b:b8:8c:c7:
27:a8:c8:63:f9:f1:55:8a:cd:96:27:d0:a4:6e:e0:
71:5d:15:7f:ad:db:9a:3e:fe:6d:7f:ec:af:99:3c:
d5:20:0d:f8:94:cc:83:8a:60:65:5e:aa:7e:00:65:
b3:df:b5:64:79:53:19:e5:10:40:67:84:26:22:32:
75:74:2e:0f:3b:88:17:5a:cc:c0:85:56:e7:d2:6f:
c5:82:10:cb:01:7a:ab:ef:c0:8f:9f:1a:3b:15:97:
4f:51:39:98:0a:85:8d:2a:3e:bb:5d:6e:76:35:cc:
f7:84:85:c7:9b:00:8c:f2:9c:70:ca:0d:57:d9:79:
a9:83:ef:ed:1d:14:db:81:d9:1e:f0:3f:f8:2d:fb:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:32:C7:95:55:3D:59:E2:59:F1:35:0C:24:09:4C:66:C2:DF:DD:55
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/qDLHlVU9WeJZ8TUMJAlMZsLf3VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.183.0/24
62.72.189.0/24
81.21.2.0-81.21.7.255
81.21.9.0-81.21.15.255
176.57.59.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
28:93:9f:d7:88:c6:00:f3:95:bd:0a:8f:90:5e:fb:4c:91:9c:
16:48:ac:93:9c:64:42:08:bb:62:e0:f9:44:2c:92:67:22:bc:
9a:2e:0b:a0:84:9f:dc:a0:b7:e8:9b:a8:48:1f:90:43:51:1a:
d4:0e:f0:3e:16:05:62:4f:89:7a:b9:4f:29:eb:db:dd:31:0f:
77:f9:4a:39:71:47:0e:e2:13:b8:2b:71:dd:16:4c:3c:f9:d3:
70:fe:fc:6e:6f:31:76:59:3a:3a:2e:4f:a0:f8:1e:c7:48:50:
84:1e:91:4f:ce:5a:98:5f:98:19:60:bd:80:2d:dc:8c:f2:72:
cf:ad:4e:0e:61:a6:a9:e7:e3:4b:22:f8:e4:8c:5d:57:a2:e5:
96:1d:ba:00:51:6c:c1:25:cd:27:ca:43:c4:56:01:92:5b:46:
27:69:f0:f2:21:20:bd:bd:48:1c:89:a1:fa:14:08:dd:8a:85:
52:bd:a2:8c:0c:9f:eb:a7:88:08:10:0b:dd:79:fb:41:6a:ea:
8e:da:c1:e2:55:3b:30:36:78:64:ac:5b:66:9c:6c:bb:07:3b:
87:e4:17:29:c1:1b:03:e1:1d:2e:80:44:c7:55:c0:d8:27:4c:
08:7b:1a:4f:15:d8:0f:0f:5e:09:23:f0:4c:99:0a:fc:04:f6:
b0:4b:01:94
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAY6drZ7yaeX6Re4899KPfA50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwNDAyMDcxOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODMyYzc5NTU1M2Q1OWUyNTlmMTM1MGMyNDA5NGM2NmMyZGZkZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyoKJhm/6dw7Wntrqp8lZnQDcux3
DKAGkUMhKBX6L4LOAxp8BGIxodwpyFejrqCCHn/QBbbjTEinibY/HTyK3Ik4Ziuq
o2hf+6FbzkbGO/6oFilyk3hqhp9Trcm38fzBgnuiun0F6tmn4ac6Ch9pZ0tYvWu4
jMcnqMhj+fFVis2WJ9CkbuBxXRV/rduaPv5tf+yvmTzVIA34lMyDimBlXqp+AGWz
37VkeVMZ5RBAZ4QmIjJ1dC4PO4gXWszAhVbn0m/FghDLAXqr78CPnxo7FZdPUTmY
CoWNKj67XW52Ncz3hIXHmwCM8pxwyg1X2Xmpg+/tHRTbgdke8D/4Lfv7IQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFKgyx5VVPVniWfE1DCQJTGbC391VMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvcURMSGxWVTlXZUpaOFRVTUpBbE1ac0xmM1ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCMAwDBAE+SKID
BAM+SKADBAA+SLcDBAA+SL0wDAMEAVEVAgMEA1EVADAMAwQAURUJAwQEURUAAwQA
sDk7AwQAsDk/MA0GCSqGSIb3DQEBCwUAA4IBAQAok5/XiMYA85W9Co+QXvtMkZwW
SKyTnGRCCLti4PlELJJnIryaLgughJ/coLfom6hIH5BDURrUDvA+FgViT4l6uU8p
69vdMQ93+Uo5cUcO4hO4K3HdFkw8+dNw/vxubzF2WTo6Lk+g+B7HSFCEHpFPzlqY
X5gZYL2ALdyM8nLPrU4OYaap5+NLIvjkjF1XouWWHboAUWzBJc0nykPEVgGSW0Yn
afDyISC9vUgciaH6FAjdioVSvaKMDJ/rp4gIEAvdeftBauqO2sHiVTswNnhkrFtm
nGy7BzuH5BcpwRsD4R0ugETHVcDYJ0wIexpPFdgPD14JI/BMmQr8BPawSwGU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org