Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/zZ6YireCkH8aVaBGE8qN9TYXI6I.roa
File: zZ6YireCkH8aVaBGE8qN9TYXI6I.roa (raw, json)
Hash identifier: Yyr1YGVHqKE2qvmGt5gFuUI5i5sT9oEgJPI29UtXMIo=
Subject key identifier: CD:9E:98:8A:B7:82:90:7F:1A:55:A0:46:13:CA:8D:F5:36:17:23:A2
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018F533D4AE313984AA964384BB5B2038405
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/zZ6YireCkH8aVaBGE8qN9TYXI6I.roa
Signing time: Tue 07 May 2024 13:27:56 +0000
ROA not before: Tue 07 May 2024 13:27:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.189.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.8.0/24 maxlen: 24
81.21.9.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
81.21.11.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 12:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:3d:4a:e3:13:98:4a:a9:64:38:4b:b5:b2:03:84:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 7 13:27:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd9e988ab782907f1a55a04613ca8df5361723a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:fb:de:33:83:1d:34:6a:b3:66:27:41:1d:
ce:f3:1a:15:37:c8:04:2f:ee:fe:97:68:1f:e3:ed:
06:d5:1f:6f:38:60:80:30:a9:96:d0:9b:c6:6b:80:
1f:0b:35:06:29:d7:5a:70:4a:d6:ec:d1:b8:25:21:
94:10:65:c7:34:4c:b0:66:9a:93:cb:a5:70:a7:f7:
70:98:88:79:1b:62:85:68:ba:72:06:1c:82:33:a9:
86:a3:cc:bd:8d:90:eb:6a:ff:98:d9:ee:c2:12:cb:
98:a5:28:17:9d:6e:f2:30:85:29:d7:b4:2a:63:5e:
8c:10:e7:03:40:d8:a5:8e:b2:4d:e5:61:8d:c8:ec:
93:46:2d:5d:66:e5:6b:8b:3b:92:2b:80:25:8a:f6:
b1:7a:fd:04:d6:1d:ce:62:ea:fd:2c:22:e1:eb:4f:
09:a1:d1:75:19:6e:7d:87:42:bd:de:1e:ef:99:37:
78:57:ff:24:cd:ef:3a:46:13:c7:e9:b1:c8:35:1d:
7d:5b:cb:d9:61:b7:26:13:6b:43:7c:ad:f3:b0:3d:
06:59:79:0b:ad:40:2f:24:5c:6e:96:29:40:57:d7:
ff:d5:7b:80:5a:34:9a:c0:a2:bc:c3:5a:eb:e3:04:
97:03:9c:05:ff:b9:f3:21:83:fb:ce:dd:1d:17:b3:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9E:98:8A:B7:82:90:7F:1A:55:A0:46:13:CA:8D:F5:36:17:23:A2
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/zZ6YireCkH8aVaBGE8qN9TYXI6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.189.0/24
81.21.2.0-81.21.15.255
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f0:f3:d9:3d:39:8c:7c:14:98:9d:e1:55:71:66:9d:81:fe:
e8:78:8b:b5:5a:0e:a8:84:fe:9a:f4:2d:bd:6e:56:5b:3a:df:
69:75:c8:b7:b2:1a:f8:a4:29:a1:9c:97:c6:fe:70:49:e9:fc:
ec:31:e5:56:fa:77:ae:11:2f:ba:5d:de:81:a2:71:2a:32:f6:
91:e6:55:8b:78:42:80:6d:4a:53:19:6d:2f:4f:4e:b3:bd:3b:
e5:92:13:15:36:62:02:02:0b:b4:c0:d3:a4:71:44:c5:d1:96:
19:d0:96:38:ce:d2:e9:a8:d6:8a:0c:bd:74:b8:bc:7b:28:6e:
c4:d0:0a:eb:59:a2:99:eb:5c:77:14:5b:02:07:3c:2e:52:04:
0c:54:e2:15:31:15:77:b5:2e:f1:1d:cd:ed:30:42:5a:9a:e1:
94:db:76:11:28:59:93:9a:30:79:3f:63:de:0f:90:fa:d9:f2:
52:39:a6:bc:44:cb:9f:4d:8a:53:c9:5a:24:cf:60:68:53:58:
7d:82:90:4d:e7:95:7a:e7:9c:35:72:42:af:09:d5:fa:22:11:
b7:2d:11:97:6b:ed:dc:f0:eb:39:06:1a:c8:5d:0a:a1:f4:e3:
14:d2:88:4c:9d:e8:27:74:1b:f9:86:3e:14:36:50:07:67:82:
15:e3:a8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org