Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/455t4gF2MVLcX2YSizobarv1wZo.roa
File: 455t4gF2MVLcX2YSizobarv1wZo.roa (raw, json)
Hash identifier: saR2TtSybnSGcuJVe8+xdtDarNy0CugQQvKZWuHXd/Y=
Subject key identifier: E3:9E:6D:E2:01:76:31:52:DC:5F:66:12:8B:3A:1B:6A:BB:F5:C1:9A
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 1AE3B8C6
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/455t4gF2MVLcX2YSizobarv1wZo.roa
Signing time: Sat 01 Jan 2022 07:54:27 +0000
ROA not before: Sat 01 Jan 2022 07:54:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43852
IP address blocks: 62.215.221.0/24 maxlen: 24
185.95.6.0/24 maxlen: 24
62.215.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451131590 (0x1ae3b8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jan 1 07:54:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e39e6de201763152dc5f66128b3a1b6abbf5c19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:56:40:14:f6:7f:45:4e:1b:43:50:6f:18:
4e:25:4b:bc:76:30:0a:28:6a:ed:c1:f1:89:11:23:
85:85:41:b9:05:67:2b:75:20:4c:fc:a2:6c:dc:75:
8d:f7:12:f3:4c:dd:1c:c7:c2:47:8a:c3:2b:b7:0a:
0b:47:0f:98:f6:8d:28:16:72:a3:78:52:56:4c:3f:
6a:5e:09:b7:6a:ef:e2:c3:6f:fa:28:eb:73:d1:bf:
3c:cb:9a:3f:f6:38:f6:82:b0:ae:c7:4e:76:09:e1:
04:d5:c1:87:ad:bc:09:35:71:03:e4:74:63:be:f2:
39:0e:fa:19:70:19:fd:e5:b9:88:24:66:1c:ca:56:
74:f5:02:9e:b7:15:a6:b0:d1:b5:1b:76:e1:ee:ea:
aa:ff:be:1e:3d:b8:df:16:ed:85:08:63:c3:b7:67:
91:62:0c:e2:a6:06:ac:4e:3f:67:d8:11:1a:99:d2:
be:47:5f:eb:a0:ec:2d:23:4c:fa:f9:18:53:d7:f8:
ff:dd:f6:61:25:55:9f:8f:9e:60:6e:17:0e:d9:f0:
75:19:a9:24:52:a2:a1:f1:20:31:dc:c9:e3:f5:57:
1d:53:81:45:b0:3a:d4:77:c5:ba:f7:5f:1b:f2:49:
10:1c:a6:a1:24:cf:87:8f:d5:90:15:6e:98:c7:bf:
eb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9E:6D:E2:01:76:31:52:DC:5F:66:12:8B:3A:1B:6A:BB:F5:C1:9A
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/455t4gF2MVLcX2YSizobarv1wZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.215.174.0/24
62.215.221.0/24
185.95.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9d:9b:38:bd:aa:14:4e:72:45:4b:a9:f5:d5:04:c7:df:7c:
09:c5:3c:47:e9:de:19:21:c3:5d:15:fd:e6:c8:62:14:90:28:
75:82:0c:b5:05:e3:4f:f4:2b:3d:4f:f6:67:41:cb:d1:7a:b4:
af:b3:62:c5:2c:46:90:d1:69:48:2e:bb:ab:c3:d3:ac:9f:de:
55:1b:3b:8e:7f:33:b4:4b:69:e5:d0:a6:17:78:35:f3:e9:54:
3f:7b:58:b5:61:0f:d4:b4:8e:ff:79:ff:24:82:52:e1:16:f4:
50:51:3b:aa:51:1b:8c:f0:29:09:5e:fc:23:03:05:7f:ab:15:
5d:ab:4c:41:f3:e6:63:95:1d:c2:03:55:0a:f0:32:c2:64:90:
a0:92:95:03:a4:c2:5c:5a:f7:8a:33:e0:f7:c4:73:b1:dc:16:
61:ba:d9:75:ab:5b:f1:f7:78:1a:4c:e9:26:db:cb:42:e0:6a:
c2:af:fa:ec:28:27:41:31:c1:d7:c1:69:50:fa:3c:d6:b1:b4:
f1:6f:25:38:62:0e:01:b8:9d:50:19:a8:68:d8:d0:87:c8:b5:
f9:48:2b:df:0e:33:60:4f:ed:7e:04:6e:a8:fe:37:c0:c0:a9:
1a:50:5e:fd:f2:a6:61:42:c8:a4:10:39:c2:22:91:7b:1b:d5:
58:51:51:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:46 2023 by rpki-client on console-fra.rpki-client.org