Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wRG9_oSWcklSNswwgEti0XoylAQ.roa
File: wRG9_oSWcklSNswwgEti0XoylAQ.roa (raw, json)
Hash identifier: bfpzX/VPN9fx/hvt95yoP1AD/SNAjgv8ObtbTNL4vaY=
Subject key identifier: C1:11:BD:FE:84:96:72:49:52:36:CC:30:80:4B:62:D1:7A:32:94:04
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019130F76309D73E4444FB17DAF73E065C0F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wRG9_oSWcklSNswwgEti0XoylAQ.roa
Signing time: Thu 08 Aug 2024 07:50:04 +0000
ROA not before: Thu 08 Aug 2024 07:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.6.0/24 maxlen: 24
81.21.7.0/24 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.14.0/23 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Aug 2024 12:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:30:f7:63:09:d7:3e:44:44:fb:17:da:f7:3e:06:5c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 8 07:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c111bdfe849672495236cc30804b62d17a329404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:ed:69:8d:f9:7c:ea:b0:a5:2b:4d:eb:00:
a9:67:62:c7:3c:dd:0f:34:f4:a5:23:91:fb:a3:41:
e3:a6:06:2c:26:53:30:55:37:ea:65:d2:91:10:c7:
2a:39:f8:aa:ad:24:b4:46:7c:aa:65:44:7f:4d:26:
5e:6f:c4:1f:85:ed:ac:66:02:b5:22:88:5c:15:af:
c7:b3:66:27:51:49:16:26:ae:fe:5d:03:f9:3d:bf:
d6:79:0e:a6:96:12:3f:72:30:b8:39:1b:28:d2:b2:
82:3c:4f:82:36:13:3a:4b:33:2a:d6:06:36:93:b1:
95:f4:44:3c:1f:6d:36:c7:93:9a:3c:5e:7e:39:35:
b6:a5:ec:76:b3:4c:a0:bb:3e:f2:52:50:77:fe:b2:
16:7e:d9:04:3a:75:fa:42:51:35:39:fc:d1:a8:ae:
01:45:bc:f6:4f:a0:b4:ae:02:9b:8b:83:37:53:d3:
83:e9:f4:72:65:9c:1b:a0:48:cb:ce:89:bc:0c:cd:
00:c2:5a:a9:00:81:ab:de:1d:d7:4a:26:a9:2b:9e:
37:4d:28:fc:2f:e2:15:90:19:c3:5c:41:0c:a7:00:
f9:ac:05:e5:ec:98:4e:64:1b:4d:7f:df:fa:55:53:
bf:69:3f:65:ec:28:62:54:e6:9b:f7:7e:0f:ea:e0:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:11:BD:FE:84:96:72:49:52:36:CC:30:80:4B:62:D1:7A:32:94:04
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wRG9_oSWcklSNswwgEti0XoylAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.188.0/23
81.21.2.0-81.21.15.255
176.57.57.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c2:0e:61:e9:93:cb:af:15:b8:bd:86:b0:b3:36:0e:13:9e:
cf:c4:77:77:87:d1:b1:59:63:30:b6:fc:c7:1e:2f:36:56:0f:
04:3b:99:9b:c6:15:dd:77:31:9b:d2:33:9f:d5:25:d5:4f:9b:
7e:dd:3a:36:e2:6f:ac:cf:5c:39:e9:bf:f3:ea:eb:0f:19:64:
9f:17:24:49:3a:78:3f:36:23:71:b9:8e:2f:09:30:7b:f9:ae:
12:6a:65:cb:95:f5:ec:c6:2d:5c:21:bd:be:b9:28:b8:b0:62:
83:b6:8e:9e:4a:89:8a:35:f6:31:02:25:b2:43:d4:7b:05:26:
9e:ea:c6:dd:8a:32:07:46:29:68:b1:37:01:3a:19:bf:12:c3:
d8:72:21:d6:54:92:f2:d3:c2:fb:99:17:e5:f4:c5:91:e1:a9:
8e:c1:68:9f:72:4f:9e:28:4c:e8:dc:bf:1e:9f:e2:ad:ae:43:
94:50:77:24:9b:a3:8e:7c:96:50:a3:aa:e4:21:9b:0f:88:a7:
c3:dd:8f:1e:f4:34:1c:16:fc:ea:0c:07:55:62:d3:33:da:ae:
be:2c:7e:02:a5:43:c6:bb:1d:56:dd:68:dd:49:c8:d2:96:2d:
f6:48:59:56:28:19:de:d0:4e:1a:4e:0c:9d:2f:2d:5b:95:31:
a2:9e:a1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 15:25:49 2024 by rpki-client on console-ams.rpki-client.org