Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/v5t7SmnXKFkrwPyqmz9cfa03gak.roa
File: v5t7SmnXKFkrwPyqmz9cfa03gak.roa (raw, json)
Hash identifier: t4v7N0UcFGheQ07xjj/lyb5oDP+B93/So0RwFEOhPlM=
Subject key identifier: BF:9B:7B:4A:69:D7:28:59:2B:C0:FC:AA:9B:3F:5C:7D:AD:37:81:A9
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018F35016BFD3CC0AADE53C70D6B170D924A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/v5t7SmnXKFkrwPyqmz9cfa03gak.roa
Signing time: Wed 01 May 2024 16:33:56 +0000
ROA not before: Wed 01 May 2024 16:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 May 2024 05:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:35:01:6b:fd:3c:c0:aa:de:53:c7:0d:6b:17:0d:92:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 1 16:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf9b7b4a69d728592bc0fcaa9b3f5c7dad3781a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a1:e5:3e:01:36:7d:29:c9:69:32:c6:44:2e:
9a:b6:d0:cf:00:ad:75:50:8d:08:50:84:bd:3f:58:
8f:a8:66:10:f0:23:39:f9:f7:88:e1:3f:8a:63:dc:
99:2c:db:56:fa:fb:a0:89:fa:81:ea:d7:c5:b8:3e:
21:4f:fe:1f:d0:c5:26:f9:d6:46:d4:89:bb:5c:49:
f6:d8:aa:19:8f:00:de:6d:58:50:57:18:78:a0:e9:
32:0b:bc:5e:ea:95:77:6a:44:c3:91:a9:f2:51:74:
6f:68:35:69:83:b3:a2:59:8d:6b:72:8e:84:fb:73:
a1:b8:23:a3:d2:58:fd:2b:fd:b6:8c:5a:21:9a:6a:
92:0a:e7:d8:a8:48:43:5c:ba:4f:11:58:d5:a9:86:
22:3f:31:0e:db:28:ee:1f:21:c1:bb:21:65:4e:74:
fa:34:14:ae:b3:6f:66:0b:3a:2a:6b:c9:df:96:a9:
e8:21:69:07:80:85:df:3d:d2:7a:87:0c:3b:23:5e:
76:46:c1:ec:db:03:da:12:31:32:81:5f:50:01:fe:
e6:93:60:45:68:d0:68:e7:bb:44:7e:c3:da:13:46:
cc:2e:39:58:e5:d5:23:d6:64:5e:3d:72:8f:c6:84:
d2:82:a7:ec:fd:37:c7:4b:37:2e:35:d2:fa:f0:3c:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9B:7B:4A:69:D7:28:59:2B:C0:FC:AA:9B:3F:5C:7D:AD:37:81:A9
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/v5t7SmnXKFkrwPyqmz9cfa03gak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.189.0/24
81.21.2.0-81.21.15.255
176.57.59.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
03:90:7c:35:83:84:7d:38:9e:8e:b0:6b:36:af:85:30:40:0a:
ea:ea:9f:bc:7f:a0:dc:15:57:5b:b7:89:39:64:19:b5:c1:37:
40:87:91:d2:31:e1:42:44:0a:77:84:c2:93:c3:9d:0b:6e:1a:
ce:fd:42:86:5e:d8:85:35:c1:92:97:6c:cb:ac:05:83:c9:f9:
27:d5:e9:63:47:f8:ea:8d:a6:fc:c9:27:f4:ac:ab:b0:d3:25:
e4:ab:19:38:0f:69:90:88:bc:3d:a7:d5:95:6a:4a:ba:51:58:
30:b7:00:6d:fb:99:75:a6:05:b7:38:64:6c:3c:96:85:35:d1:
80:30:58:03:ac:94:e9:68:5f:55:64:2d:a5:94:cd:7e:35:6e:
65:2d:d0:6a:fc:a6:f2:06:63:50:f5:21:d6:6a:d2:de:67:af:
4d:72:f8:fe:d2:f4:72:8b:9c:bc:d8:c4:41:4e:6e:d3:e1:8d:
30:16:74:b7:7b:19:be:6b:56:79:07:a1:01:96:20:db:f9:23:
3d:fa:5d:98:95:49:60:ed:3a:b5:d3:95:8e:c8:3d:76:a2:07:
53:db:13:7e:0c:c7:22:ed:bb:9d:45:23:f6:92:04:da:a6:18:
e4:ea:3b:a4:24:bb:65:5d:32:00:32:4b:90:ea:66:6a:83:d3:
3a:b4:b3:f5
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAY81AWv9PMCq3lPHDWsXDZJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwNTAxMTYzMzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjliN2I0YTY5ZDcyODU5MmJjMGZjYWE5YjNmNWM3ZGFkMzc4MWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26HlPgE2fSnJaTLGRC6attDPAK11
UI0IUIS9P1iPqGYQ8CM5+feI4T+KY9yZLNtW+vugifqB6tfFuD4hT/4f0MUm+dZG
1Im7XEn22KoZjwDebVhQVxh4oOkyC7xe6pV3akTDkanyUXRvaDVpg7OiWY1rco6E
+3OhuCOj0lj9K/22jFohmmqSCufYqEhDXLpPEVjVqYYiPzEO2yjuHyHBuyFlTnT6
NBSus29mCzoqa8nflqnoIWkHgIXfPdJ6hww7I152RsHs2wPaEjEygV9QAf7mk2BF
aNBo57tEfsPaE0bMLjlY5dUj1mRePXKPxoTSgqfs/TfHSzcuNdL68DwSiQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFL+be0pp1yhZK8D8qps/XH2tN4GpMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvdjV0N1NtblhLRmtyd1B5cW16OWNmYTAzZ2FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAE+SKID
BAM+SKADBAA+SL0wDAMEAVEVAgMEBFEVAAMEALA5OwMEALA5PzANBgkqhkiG9w0B
AQsFAAOCAQEAA5B8NYOEfTiejrBrNq+FMEAK6uqfvH+g3BVXW7eJOWQZtcE3QIeR
0jHhQkQKd4TCk8OdC24azv1Chl7YhTXBkpdsy6wFg8n5J9XpY0f46o2m/Mkn9Kyr
sNMl5KsZOA9pkIi8PafVlWpKulFYMLcAbfuZdaYFtzhkbDyWhTXRgDBYA6yU6Whf
VWQtpZTNfjVuZS3Qavym8gZjUPUh1mrS3mevTXL4/tL0coucvNjEQU5u0+GNMBZ0
t3sZvmtWeQehAZYg2/kjPfpdmJVJYO06tdOVjsg9dqIHU9sTfgzHIu27nUUj9pIE
2qYY5Oo7pCS7ZV0yADJLkOpmaoPTOrSz9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org