Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/D7sLP9oJw0MaBOyeWz2IsxPbLh4.roa
File: D7sLP9oJw0MaBOyeWz2IsxPbLh4.roa (raw, json)
Hash identifier: 7QOJAAihtPrGiqBplxL/SRScdl7+nvNqXjKZZwxD6F0=
Subject key identifier: 0F:BB:0B:3F:DA:09:C3:43:1A:04:EC:9E:5B:3D:88:B3:13:DB:2E:1E
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0194742BAB5FF84F19E678C2C8D6753CA36F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/D7sLP9oJw0MaBOyeWz2IsxPbLh4.roa
Signing time: Fri 17 Jan 2025 12:10:06 +0000
ROA not before: Fri 17 Jan 2025 12:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.168.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.5.0/24 maxlen: 24
81.21.6.0/24 maxlen: 24
81.21.7.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 12:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:74:2b:ab:5f:f8:4f:19:e6:78:c2:c8:d6:75:3c:a3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 17 12:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fbb0b3fda09c3431a04ec9e5b3d88b313db2e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:27:90:37:ba:fb:7d:17:09:53:c9:f7:e7:
c9:57:c5:2d:05:75:fa:f8:e7:d6:f3:cf:3b:b6:84:
48:86:59:43:81:91:88:e0:8e:f1:26:a7:ad:dc:7f:
63:fb:4f:c2:af:13:16:3f:b5:da:0d:02:40:a5:aa:
62:af:08:87:bf:d7:46:1f:ac:50:2d:6e:4d:4f:a6:
81:b3:50:c0:86:6b:14:f0:0e:58:3d:9b:c5:d9:da:
28:99:f7:4b:db:61:8e:dd:12:62:94:c4:ce:eb:c0:
e6:b9:11:13:70:7a:5f:b7:55:cc:1d:4a:8c:52:eb:
c8:89:34:e6:18:cf:71:71:b3:4d:b7:23:2a:b2:82:
00:f0:cd:c1:74:b2:4a:0d:69:ae:1d:70:18:a0:3a:
94:7e:e7:65:b7:7d:44:c9:86:3f:9a:31:9e:9b:15:
80:d9:3c:ca:e7:dc:f8:18:c4:48:cd:43:5a:f1:33:
2e:8e:e5:39:4d:1d:98:7f:77:40:d5:02:1c:b1:a7:
8d:d8:ae:81:6b:ba:91:df:2b:a8:d1:2b:37:19:7e:
b0:92:dd:ed:22:cc:0a:8f:d7:cb:8b:1b:58:cf:d9:
2c:9b:91:e7:91:3c:9d:60:a4:1e:98:4a:a1:ab:fd:
2c:d0:ea:c0:71:b4:25:39:30:eb:92:db:65:f5:2d:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BB:0B:3F:DA:09:C3:43:1A:04:EC:9E:5B:3D:88:B3:13:DB:2E:1E
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/D7sLP9oJw0MaBOyeWz2IsxPbLh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.168.255
62.72.185.0/24
62.72.191.0/24
81.21.2.0-81.21.7.255
176.57.51.0/24
176.57.56.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
16:54:4a:54:fc:91:81:16:d5:57:82:c2:e9:de:72:88:e2:5c:
3c:94:3d:06:27:5e:ba:54:1d:61:e1:de:96:9d:ac:5e:28:92:
19:cc:42:1e:2f:9a:32:11:0e:1a:a7:67:bc:5d:5e:80:87:05:
75:cd:e5:89:87:93:64:cc:f6:0b:a3:f0:eb:f6:d9:fc:db:30:
43:21:7a:01:e4:13:92:52:31:af:87:cd:c2:68:06:84:c5:7b:
5e:cb:7b:f5:a7:cc:31:92:d8:22:b3:2a:ba:70:34:d6:23:49:
ac:ba:c8:fb:85:a0:e2:61:be:23:a9:fe:f4:f4:70:5c:cc:22:
4b:c4:0d:4f:a0:27:2e:0f:8d:d6:0f:3d:0b:58:fd:ac:ce:c3:
89:af:73:cd:cd:f7:14:bb:f6:18:49:c5:f5:ac:0c:32:67:f6:
e2:a2:89:7f:32:6b:f0:58:78:1f:12:50:8c:68:88:86:c4:93:
34:0c:4e:23:8f:3f:1e:24:4b:7e:8e:b0:9c:3b:7c:a2:c6:cc:
ae:56:e8:e8:6c:8c:a4:69:1c:1e:c4:37:d5:1a:65:7b:a1:09:
89:84:01:fb:77:f5:bb:1f:72:a2:e3:fd:d3:3a:61:f1:e5:4a:
88:4c:17:85:f6:99:a8:0e:f3:6b:91:02:4b:eb:b2:b7:b1:10:
86:c4:72:54
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAZR0K6tf+E8Z5njCyNZ1PKNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjUwMTE3MTIxMDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmJiMGIzZmRhMDljMzQzMWEwNGVjOWU1YjNkODhiMzEzZGIyZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi4nkDe6+30XCVPJ9+fJV8UtBXX6
+OfW8887toRIhllDgZGI4I7xJqet3H9j+0/CrxMWP7XaDQJApapirwiHv9dGH6xQ
LW5NT6aBs1DAhmsU8A5YPZvF2doomfdL22GO3RJilMTO68DmuRETcHpft1XMHUqM
UuvIiTTmGM9xcbNNtyMqsoIA8M3BdLJKDWmuHXAYoDqUfudlt31EyYY/mjGemxWA
2TzK59z4GMRIzUNa8TMujuU5TR2Yf3dA1QIcsaeN2K6Ba7qR3yuo0Ss3GX6wkt3t
IswKj9fLixtYz9ksm5HnkTydYKQemEqhq/0s0OrAcbQlOTDrkttl9S3D0QIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFA+7Cz/aCcNDGgTsnls9iLMT2y4eMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvRDdzTFA5b0p3ME1hQk95ZVd6MklzeFBiTGg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBAE+SKID
BAA+SKgDBAA+SLkDBAA+SL8wDAMEAVEVAgMEA1EVAAMEALA5MwMEALA5OAMEALA5
PzANBgkqhkiG9w0BAQsFAAOCAQEAFlRKVPyRgRbVV4LC6d5yiOJcPJQ9BideulQd
YeHelp2sXiiSGcxCHi+aMhEOGqdnvF1egIcFdc3liYeTZMz2C6Pw6/bZ/NswQyF6
AeQTklIxr4fNwmgGhMV7Xst79afMMZLYIrMqunA01iNJrLrI+4Wg4mG+I6n+9PRw
XMwiS8QNT6AnLg+N1g89C1j9rM7Dia9zzc33FLv2GEnF9awMMmf24qKJfzJr8Fh4
HxJQjGiIhsSTNAxOI48/HiRLfo6wnDt8osbMrlbo6GyMpGkcHsQ31Rple6EJiYQB
+3f1ux9youP90zph8eVKiEwXhfaZqA7za5ECS+uyt7EQhsRyVA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:56:34 2025 by rpki-client