Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-B-OGY8LUhIBPxO_fLOLmtHLp-o.roa
File: 1-B-OGY8LUhIBPxO_fLOLmtHLp-o.roa (raw, json)
Hash identifier: T4cg9fdgFPh7PFXAV0mQ9ZZB7mfovdkce1zAyJ9V8ps=
Subject key identifier: F8:1F:8E:19:8F:0B:52:12:01:3F:13:BF:7C:B3:8B:9A:D1:CB:A7:EA
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0182A62147F7D6C4E41054B053D84793996D
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-B-OGY8LUhIBPxO_fLOLmtHLp-o.roa
Signing time: Tue 16 Aug 2022 10:09:35 +0000
ROA not before: Tue 16 Aug 2022 10:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 62.72.185.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
176.57.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:21:47:f7:d6:c4:e4:10:54:b0:53:d8:47:93:99:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 16 10:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f81f8e198f0b5212013f13bf7cb38b9ad1cba7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:6e:5e:ee:75:fc:74:52:21:ae:7a:d1:6e:
ce:7b:b8:23:83:94:87:d6:ce:2d:4f:e3:59:bf:7d:
f1:71:b7:9f:9c:02:25:53:b6:5a:3b:9b:06:18:a7:
6e:6c:e1:ae:92:84:14:dc:84:b8:1d:41:a5:83:16:
41:a9:95:f9:05:d0:0a:05:3d:fc:11:a8:5e:31:d7:
c1:7b:06:48:b6:a5:7f:a0:bf:4f:43:e3:f8:7c:b0:
03:6a:3c:0d:4f:ce:c5:b7:59:37:1d:61:34:9a:68:
cb:0f:b0:7b:66:c8:35:03:ad:8a:b5:07:90:19:93:
61:69:c4:d0:42:89:ec:df:25:09:2e:8b:f5:c5:f5:
bf:09:62:06:15:71:d7:af:e6:f8:4f:ab:22:cc:a9:
8c:12:aa:c9:8b:53:33:bb:c1:de:42:01:26:7c:f9:
9f:e8:4b:4c:76:3d:91:dc:92:f7:5c:13:e8:e3:76:
b8:29:be:32:06:b9:79:d8:2f:f3:b2:ba:23:57:f3:
8f:70:e8:2a:4a:67:df:23:b4:e6:1d:05:26:d3:fb:
75:31:85:39:99:58:6d:1e:bb:29:70:dc:70:79:14:
c0:4c:a8:ad:ef:bf:71:68:8a:6f:ec:7a:e3:e1:67:
17:69:ea:a2:fb:3f:06:3a:e2:75:d0:f8:5b:87:d2:
b2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1F:8E:19:8F:0B:52:12:01:3F:13:BF:7C:B3:8B:9A:D1:CB:A7:EA
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-B-OGY8LUhIBPxO_fLOLmtHLp-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.181.0/24
62.72.185.0/24
62.72.188.0/24
62.72.191.0/24
176.57.60.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:3a:1b:cb:b6:e0:c2:a4:67:ca:d3:df:82:66:ed:53:7a:16:
9d:e9:79:8b:5f:c2:68:54:6a:ad:ad:a1:6d:85:7d:30:65:b4:
14:8a:37:71:19:b1:21:6f:50:30:26:51:ae:74:a0:c1:3c:b5:
07:e2:85:eb:a2:e9:58:9a:6f:ff:74:02:5c:18:08:78:3f:e2:
d6:17:3c:ac:0a:40:ab:ff:16:c0:c5:6d:24:44:d5:60:6c:2b:
27:19:2b:99:6e:98:d0:5a:6d:4b:c9:22:d5:6f:bb:e9:e2:17:
f4:70:6a:4c:62:b2:be:40:12:8d:7b:e2:c8:ea:70:07:88:6e:
9d:00:28:c9:3b:4e:27:56:3d:8d:43:88:83:96:20:29:69:9d:
b4:1f:38:8b:60:51:61:5d:f0:54:bf:7d:e3:42:9b:a3:b9:7f:
f2:df:12:0d:31:9d:d5:d8:86:97:3d:a1:fb:48:14:37:04:3d:
59:ff:de:da:72:bc:3f:65:d9:0a:d1:c4:35:63:b7:ea:95:f6:
68:20:72:f0:81:a3:47:ca:b4:70:bc:ae:6a:5b:88:11:c4:85:
3b:44:d3:42:9c:64:bb:19:7f:d7:f7:53:66:cd:83:e3:dc:4e:
c6:77:95:fa:de:68:1d:93:bd:24:90:e0:f0:0f:aa:d3:41:30:
83:f0:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org