Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xSUzSqPbYPwCC9vext5JszkzWwg.roa
File: xSUzSqPbYPwCC9vext5JszkzWwg.roa (raw, json)
Hash identifier: blobOtQTCuVD9QvSg0ovlLL4Suvbb53MlTiYRJbYxBU=
Subject key identifier: C5:25:33:4A:A3:DB:60:FC:02:0B:DB:DE:C6:DE:49:B3:39:33:5B:08
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019156C0C5FCAE2FDBE1F18D0123735DC235
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xSUzSqPbYPwCC9vext5JszkzWwg.roa
Signing time: Thu 15 Aug 2024 15:55:59 +0000
ROA not before: Thu 15 Aug 2024 15:55:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.164.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.12.0/24 maxlen: 24
81.21.14.0/23 maxlen: 24
81.21.14.0/24 maxlen: 24
81.21.15.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 11:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:c0:c5:fc:ae:2f:db:e1:f1:8d:01:23:73:5d:c2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 15 15:55:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c525334aa3db60fc020bdbdec6de49b339335b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:63:64:8e:df:d9:2b:f7:66:0b:52:21:75:
6b:b1:aa:ca:e0:46:b2:15:b8:33:13:cf:e1:5f:d4:
53:c0:2e:02:a9:35:6b:54:86:d2:b9:93:16:77:da:
53:65:fd:c0:76:75:c3:a0:32:6a:69:6a:ad:3a:3f:
87:85:4d:fb:a7:6e:23:89:10:df:ba:42:2a:5b:7e:
5d:36:3b:09:0b:5d:3a:d5:f4:a1:0b:19:6d:52:d2:
73:9d:84:09:78:c9:26:b7:c4:b9:01:0c:36:22:e0:
89:d5:54:63:7d:dc:7d:8e:8f:ef:29:ed:e7:40:21:
6c:10:b7:81:af:42:1b:29:30:8b:f9:95:05:23:35:
d4:9d:3e:4a:46:50:5a:ed:ab:53:81:d3:04:d4:3a:
10:eb:c2:fc:b7:95:40:be:6f:26:80:be:98:48:63:
72:55:d9:6d:79:0b:4c:a6:6b:aa:a7:b0:52:a1:eb:
31:05:3d:7e:34:12:4f:9f:6a:0b:e1:c9:b2:95:8a:
dc:70:45:61:bd:b3:e7:5c:2a:8a:fc:f0:d2:dc:fd:
8f:03:76:34:93:00:64:3f:6c:9d:04:cf:46:eb:e4:
49:2e:1f:0a:1a:87:06:54:03:15:b1:1a:12:a5:ab:
83:01:40:21:de:0e:3f:78:d0:f3:a3:c4:61:47:0d:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:25:33:4A:A3:DB:60:FC:02:0B:DB:DE:C6:DE:49:B3:39:33:5B:08
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xSUzSqPbYPwCC9vext5JszkzWwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.185.0/24
62.72.188.0/23
81.21.2.0-81.21.15.255
176.57.57.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
77:fb:e8:c5:78:47:98:1d:08:8a:7d:46:87:4b:b5:bd:15:7b:
ad:14:7b:a9:c9:44:07:32:69:04:97:7e:b5:20:22:d8:bd:ba:
81:0b:74:6c:3f:af:1b:9d:5c:29:fb:52:40:9b:f6:bf:fc:03:
87:60:1e:9d:6b:4d:b4:21:7e:22:b8:61:0a:ef:e0:3d:59:67:
f2:ee:57:a7:71:39:ad:f7:3e:07:a9:13:26:b3:cd:6e:04:45:
1d:60:f5:12:f5:88:3c:d2:f5:15:77:80:fa:65:25:19:38:03:
f4:a1:a8:08:cc:76:c6:81:d9:41:c5:2c:57:d0:4b:68:7f:56:
90:fb:1b:b5:80:da:79:ea:6a:79:89:98:ce:cc:d2:cc:57:46:
14:8d:4b:1f:58:85:f8:2e:83:d7:60:34:17:e2:a5:0a:57:6d:
cb:8c:7e:5a:4b:db:57:8c:bb:1a:b4:dc:b2:55:c9:10:4b:09:
79:83:e4:a8:a3:ad:75:a7:76:f0:54:cd:b6:35:4f:e4:c8:31:
75:bd:5c:b2:de:a1:9f:4c:4c:a8:62:62:9d:07:af:57:be:90:
44:42:9c:d5:33:ed:5a:b0:d7:79:5b:38:cd:28:c0:6b:c7:f7:
d4:af:11:80:99:ab:24:40:e1:f3:3e:ae:41:6e:67:05:0e:40:
76:d9:23:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 15:18:28 2024 by rpki-client on console-fra.rpki-client.org