Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/u4TUnrlwZ7e5zptfBXuxrAP0Zd8.roa
File: u4TUnrlwZ7e5zptfBXuxrAP0Zd8.roa (raw, json)
Hash identifier: RgehRDpuzaoX+g30VJnp+G8QJXcTM00RBxBHAtxLEaI=
Subject key identifier: BB:84:D4:9E:B9:70:67:B7:B9:CE:9B:5F:05:7B:B1:AC:03:F4:65:DF
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018B3DC0BC6688B36BA0871455B3CF91F463
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/u4TUnrlwZ7e5zptfBXuxrAP0Zd8.roa
Signing time: Tue 17 Oct 2023 13:08:43 +0000
ROA not before: Tue 17 Oct 2023 13:08:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
62.72.162.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.163.0/24 maxlen: 24
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.165.0/24 maxlen: 24
62.72.166.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.168.0/22 maxlen: 22
62.72.170.0/24 maxlen: 24
62.72.167.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.174.0/23 maxlen: 23
62.72.174.0/24 maxlen: 24
62.72.175.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.180.0/23 maxlen: 23
62.72.180.0/24 maxlen: 24
62.72.184.0/22 maxlen: 22
62.72.181.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 19 Oct 2023 05:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:c0:bc:66:88:b3:6b:a0:87:14:55:b3:cf:91:f4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 17 13:08:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb84d49eb97067b7b9ce9b5f057bb1ac03f465df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3f:a2:98:ce:61:60:63:5d:f4:d7:fa:64:74:
80:85:b0:9f:54:74:2c:24:ec:59:fd:3c:1c:ca:ef:
9e:37:90:bc:90:f1:b9:a3:e2:4c:81:bf:a9:ee:43:
8e:e0:4e:9f:76:b3:f1:10:12:c3:8d:78:5f:4f:01:
2c:d9:87:d3:f3:3f:59:2a:15:03:c4:d4:c2:35:be:
d3:15:72:88:49:72:6d:42:85:f6:5f:1d:21:10:ad:
03:2e:77:69:48:08:ef:45:34:f5:62:05:e7:c9:a9:
cb:75:f2:e9:42:ff:ad:c6:39:3c:0a:01:ea:e3:fc:
57:38:dc:bf:ca:4e:12:21:be:81:83:2d:1d:1f:ad:
d1:89:9e:c6:1e:a8:d5:e2:cf:71:b9:91:1d:c4:79:
1f:99:2d:fd:70:24:38:96:3c:c3:9e:50:bf:c6:00:
c1:5b:e3:46:da:86:a9:36:2b:a8:94:26:36:60:d2:
83:23:6b:d6:5e:b4:73:c7:ca:09:f3:2f:04:97:03:
4e:ab:81:24:fa:c2:1c:f5:69:47:90:13:07:0d:7b:
0b:f8:61:0e:1c:02:39:1c:8a:21:93:42:be:db:dd:
ca:d7:68:d1:fe:ee:da:12:42:3d:a2:a8:a2:fb:6a:
ba:4b:24:05:0a:c1:6e:30:08:19:06:a1:05:ee:06:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:84:D4:9E:B9:70:67:B7:B9:CE:9B:5F:05:7B:B1:AC:03:F4:65:DF
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/u4TUnrlwZ7e5zptfBXuxrAP0Zd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.171.255
62.72.173.0-62.72.175.255
62.72.179.0-62.72.181.255
62.72.184.0/22
62.72.191.0/24
81.21.2.0-81.21.8.255
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b0:9d:5a:ee:23:db:3c:b7:33:64:b7:0d:4a:69:7f:e1:43:
58:03:24:b3:2a:c8:27:f9:f4:a5:43:02:bf:f7:05:00:24:ff:
b3:fe:c8:94:89:10:a7:dd:4d:2f:fb:f6:e8:d2:2e:24:f9:4c:
48:ab:b3:d4:93:b3:51:6e:65:e9:28:51:28:23:96:1e:a9:db:
f1:d5:c9:7c:4a:d9:45:ec:05:22:4b:2b:5b:28:94:50:bf:b7:
32:5a:ac:25:a5:4e:be:a9:c7:ca:e3:ea:4c:1b:eb:ee:cf:8f:
60:1b:7f:93:49:0a:43:4b:df:33:e8:86:5b:74:01:7c:b7:ea:
0a:df:57:e2:15:2e:7a:99:5b:fc:db:de:6f:79:83:49:4e:14:
b4:22:69:00:61:6e:16:55:1f:b1:27:5f:0d:61:e8:e4:bc:07:
1b:b4:0c:26:4c:d5:dd:47:e3:d2:59:7e:93:91:7f:36:09:95:
19:f0:12:88:21:20:24:34:86:c0:de:9c:66:60:51:e2:b0:29:
49:b2:10:16:53:4c:d2:7e:5d:1c:20:d4:93:2b:cb:e2:46:a3:
ab:52:87:07:5b:d5:bf:1c:32:5e:f7:aa:67:7f:09:bf:f4:03:
0f:95:62:d9:db:33:4d:ad:cf:0c:90:18:63:c8:0c:91:0a:de:
1f:a7:8b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org