Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wSSq-PzqbGR8poO77-mKKkBN_PE.roa
File: wSSq-PzqbGR8poO77-mKKkBN_PE.roa (raw, json)
Hash identifier: bMTmugLyd/sNXVuRF4mZUu31qoo5xD+47dFcWV6HK+I=
Subject key identifier: C1:24:AA:F8:FC:EA:6C:64:7C:A6:83:BB:EF:E9:8A:2A:40:4D:FC:F1
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C8BCDA0B16F95F862780B45E6456CB410
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wSSq-PzqbGR8poO77-mKKkBN_PE.roa
Signing time: Thu 21 Dec 2023 09:55:58 +0000
ROA not before: Thu 21 Dec 2023 09:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.59.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
176.57.63.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Dec 2023 15:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:cd:a0:b1:6f:95:f8:62:78:0b:45:e6:45:6c:b4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 21 09:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c124aaf8fcea6c647ca683bbefe98a2a404dfcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:b6:80:f8:a2:9d:30:1e:63:8e:01:13:7d:
57:8d:da:72:37:1a:4d:d8:d1:cc:6f:b1:b7:32:fa:
e1:ae:0a:32:96:42:38:49:02:d7:5e:f1:ab:0a:38:
15:ff:df:00:09:15:c7:36:6b:6d:30:4c:b4:6d:94:
f2:41:d5:da:c5:2f:07:ff:62:cf:c1:7f:45:ec:0f:
59:6a:62:60:bf:8c:01:17:3c:ff:51:a2:65:17:c4:
36:23:41:dc:2f:d3:03:18:f3:2c:2e:02:7e:56:fc:
e7:43:d8:cc:6a:11:ad:f0:d6:9e:53:47:9d:77:73:
5c:8f:82:f9:77:a2:3c:87:74:ae:4e:41:dc:2e:7c:
22:fb:b0:8b:54:af:d3:f7:e2:46:1c:2e:8f:35:98:
39:05:7f:b4:eb:a9:28:bb:f8:c5:c1:9e:05:79:8c:
4d:f4:a6:f5:0b:67:f4:06:1c:50:70:07:69:62:43:
09:ac:b9:fd:83:a4:ba:3b:da:33:b8:b7:5e:ac:ed:
9d:df:f1:9e:d9:9b:81:ef:75:71:24:88:e8:98:69:
45:2d:68:b2:59:59:c5:95:88:60:b9:f6:c0:85:d7:
ed:90:67:75:4a:a3:42:21:60:63:69:11:53:c5:af:
4d:bf:6d:df:ed:fa:ec:f8:2b:8e:12:ac:49:f7:8d:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:24:AA:F8:FC:EA:6C:64:7C:A6:83:BB:EF:E9:8A:2A:40:4D:FC:F1
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wSSq-PzqbGR8poO77-mKKkBN_PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.53.0/24
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:cd:74:ab:f7:10:c5:01:5e:85:c2:e4:aa:d3:9d:e7:6e:c6:
21:62:84:f9:fc:ea:d8:92:87:48:31:75:4d:57:af:53:f9:22:
fb:f1:46:c9:8d:34:19:4f:d1:89:cb:6d:aa:cb:47:eb:24:93:
f2:cf:3b:52:bb:c2:48:70:1c:a9:b1:70:7b:e1:39:f1:96:be:
c7:7f:0a:7a:10:2b:03:4f:14:92:42:71:ae:1c:5e:fd:b8:fe:
8d:f3:cd:04:55:f0:1b:13:c0:fd:d3:af:04:08:a8:fd:9c:fd:
6f:e5:9e:1b:a2:78:c9:13:de:93:e0:d9:0d:6b:ec:3f:63:27:
49:3b:fa:e0:f4:9e:2e:f7:2d:31:20:2b:fe:d1:90:58:96:5c:
b8:fd:84:5a:83:5e:f9:2c:c3:3c:d0:44:d6:eb:6f:3a:ff:67:
35:82:3a:1f:43:fd:f6:ad:ba:c3:d5:a6:ed:fb:c0:27:79:b9:
16:c6:6c:e1:13:28:bb:fa:88:ee:69:d7:9b:af:c2:ab:6a:1b:
33:8c:42:40:40:3b:9a:e0:ab:f1:55:05:ff:61:b4:89:9f:c5:
d3:af:12:e9:0f:56:1e:2e:de:b5:3b:02:48:99:cd:9f:9b:0f:
10:60:d1:5a:f4:d2:1b:41:f4:6e:dd:74:6a:fc:df:a0:5d:f1:
b1:74:79:1f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYyLzaCxb5X4YngLReZFbLQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMxMjIxMDk1NTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTI0YWFmOGZjZWE2YzY0N2NhNjgzYmJlZmU5OGEyYTQwNGRmY2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX62gPiinTAeY44BE31XjdpyNxpN
2NHMb7G3MvrhrgoylkI4SQLXXvGrCjgV/98ACRXHNmttMEy0bZTyQdXaxS8H/2LP
wX9F7A9ZamJgv4wBFzz/UaJlF8Q2I0HcL9MDGPMsLgJ+VvznQ9jMahGt8NaeU0ed
d3Ncj4L5d6I8h3SuTkHcLnwi+7CLVK/T9+JGHC6PNZg5BX+066kou/jFwZ4FeYxN
9Kb1C2f0BhxQcAdpYkMJrLn9g6S6O9ozuLderO2d3/Ge2ZuB73VxJIjomGlFLWiy
WVnFlYhgufbAhdftkGd1SqNCIWBjaRFTxa9Nv23f7frs+CuOEqxJ9429RwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFMEkqvj86mxkfKaDu+/piipATfzxMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvd1NTcS1QenFiR1I4cG9PNzctbUtLa0JOX1BFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8MAwDBAE+SKID
BAM+SKAwDAMEAVEVAgMEA1EVADAMAwQBURUKAwQEURUAAwQAsDk1AwQBsDk6AwQA
sDk/MA0GCSqGSIb3DQEBCwUAA4IBAQChzXSr9xDFAV6FwuSq053nbsYhYoT5/OrY
kodIMXVNV69T+SL78UbJjTQZT9GJy22qy0frJJPyzztSu8JIcBypsXB74Tnxlr7H
fwp6ECsDTxSSQnGuHF79uP6N880EVfAbE8D9068ECKj9nP1v5Z4bonjJE96T4NkN
a+w/YydJO/rg9J4u9y0xICv+0ZBYlly4/YRag175LMM80ETW6286/2c1gjofQ/32
rbrD1abt+8AnebkWxmzhEyi7+ojuadebr8KrahszjEJAQDua4KvxVQX/YbSJn8XT
rxLpD1YeLt61OwJImc2fmw8QYNFa9NIbQfRu3XRq/N+gXfGxdHkf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org