Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-xqqpPQOF8azoXlI_A5n0nN9-g.roa
File: 1-xqqpPQOF8azoXlI_A5n0nN9-g.roa (raw, json)
Hash identifier: wZQA23pDrXfdPYpxDU86owMLZ4tkm5gGcJoftcKYK2g=
Subject key identifier: D7:EC:6A:AA:93:D0:38:5F:1A:CE:85:E5:23:F0:39:9F:49:CD:F7:E8
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01BB7C1C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-xqqpPQOF8azoXlI_A5n0nN9-g.roa
Signing time: Sat 01 Jan 2022 04:53:43 +0000
ROA not before: Sat 01 Jan 2022 04:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 62.72.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29064220 (0x1bb7c1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 04:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7ec6aaa93d0385f1ace85e523f0399f49cdf7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:75:fb:71:39:3e:be:78:f4:7b:3d:8b:d0:56:
10:29:7a:75:73:ce:54:9e:24:db:3c:4e:8e:b6:45:
aa:bc:0e:d1:cf:bd:a3:e6:aa:9e:4f:bd:d0:56:02:
a4:e8:0a:5f:7f:4b:64:5b:4b:32:cc:8e:6f:39:92:
5b:96:1f:ee:a5:de:b3:e9:c5:9c:54:7e:9a:ed:02:
5d:fb:5d:47:9d:88:2b:9b:e1:5d:02:14:49:77:e1:
57:5b:28:97:c5:b7:5f:e8:d9:38:cd:cd:60:b4:63:
30:cd:bf:9a:ab:2c:fa:01:49:eb:66:87:a5:bf:d4:
09:69:80:b6:da:b6:98:19:c6:32:b6:95:52:dc:ad:
b4:60:51:80:d6:ca:5b:23:2e:f2:5a:79:4f:47:de:
6c:20:b3:e8:ea:e0:5a:e8:ae:d5:94:37:36:17:b0:
58:99:85:ff:0f:07:c3:db:85:e9:95:45:7d:1f:e4:
6f:20:47:c5:3d:28:ec:b5:ad:a2:5c:f6:35:e9:84:
d2:08:c0:0f:88:cd:aa:46:1f:dd:18:18:d4:a1:d6:
7f:00:40:f1:f0:10:71:f3:89:ca:9b:fd:0c:71:df:
c8:75:1a:15:98:db:1e:0e:a4:2b:41:f3:9b:e2:3a:
3e:62:97:68:9a:78:60:31:de:f7:56:43:d1:9a:2e:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:6A:AA:93:D0:38:5F:1A:CE:85:E5:23:F0:39:9F:49:CD:F7:E8
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-xqqpPQOF8azoXlI_A5n0nN9-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:43:2d:b1:e0:eb:6c:10:5d:45:1e:82:de:13:12:49:2c:8f:
67:e9:a2:03:ad:8c:32:a9:3a:a4:4e:59:be:51:c7:d8:a0:3a:
5c:f5:d3:c4:ca:64:1e:37:2a:a2:33:43:0a:1b:3e:ba:62:33:
60:0e:3c:a8:61:aa:45:38:a8:22:96:e1:19:25:9d:da:ff:59:
e6:be:4f:0b:4e:ed:60:4c:68:8b:ef:b7:39:48:a5:b0:b6:1d:
2c:6c:0b:2e:03:fd:4d:16:fd:71:d0:bc:21:82:93:9d:11:fa:
03:81:fa:9d:5b:35:7b:19:bf:fc:64:e4:39:4d:a7:72:04:38:
7b:01:11:59:38:c7:fe:98:ae:2f:da:b9:e1:a6:8f:25:af:2a:
ff:c2:24:36:8a:11:31:da:74:1e:66:b1:64:aa:89:a5:78:a6:
78:9f:1a:a9:9b:d3:84:2e:30:29:a2:3c:d9:37:40:06:cf:6b:
b3:37:b8:f3:64:9b:ac:50:13:89:44:3d:e6:1e:56:37:9b:31:
a8:71:48:24:97:37:8d:35:c6:6f:36:49:a8:11:1f:9a:88:13:
6b:ad:11:42:1e:9c:59:7b:3c:af:06:28:ef:ae:32:ac:35:dc:
04:2e:a3:50:08:e4:a0:55:97:76:b4:a5:92:42:0c:e7:27:43:
31:ea:28:73
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAbt8HDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NWYxOTA3NDU0OGQyYTI5NGU0Mzg1ZDk1Y2Q2NzUyNDkwZWU0NmQ3MB4XDTIyMDEw
MTA0NTM0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDdlYzZhYWE5M2Qw
Mzg1ZjFhY2U4NWU1MjNmMDM5OWY0OWNkZjdlODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIR1+3E5Pr549Hs9i9BWECl6dXPOVJ4k2zxOjrZFqrwO0c+9
o+aqnk+90FYCpOgKX39LZFtLMsyObzmSW5Yf7qXes+nFnFR+mu0CXftdR52IK5vh
XQIUSXfhV1sol8W3X+jZOM3NYLRjMM2/mqss+gFJ62aHpb/UCWmAttq2mBnGMraV
UtyttGBRgNbKWyMu8lp5T0febCCz6OrgWuiu1ZQ3NhewWJmF/w8Hw9uF6ZVFfR/k
byBHxT0o7LWtolz2NemE0gjAD4jNqkYf3RgY1KHWfwBA8fAQcfOJypv9DHHfyHUa
FZjbHg6kK0Hzm+I6PmKXaJp4YDHe91ZD0ZouZxECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTX7Gqqk9A4XxrOheUj8DmfSc336DAfBgNVHSMEGDAWgBQV8ZB0VI0qKU5D
hdlc1nUkkO5G1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZmR1FkRlNOS2lsT1E0WFpYTloxSkpEdVJ0Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvMDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRjYy8x
LzEteHFxcFBRT0Y4YXpvWGxJX0E1bjBuTjktZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
MDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRjYy8xL0ZmR1FkRlNOS2ls
T1E0WFpYTloxSkpEdVJ0Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD5IoDANBgkqhkiG9w0BAQsFAAOC
AQEALUMtseDrbBBdRR6C3hMSSSyPZ+miA62MMqk6pE5ZvlHH2KA6XPXTxMpkHjcq
ojNDChs+umIzYA48qGGqRTioIpbhGSWd2v9Z5r5PC07tYExoi++3OUilsLYdLGwL
LgP9TRb9cdC8IYKTnRH6A4H6nVs1exm//GTkOU2ncgQ4ewERWTjH/piuL9q54aaP
Ja8q/8IkNooRMdp0HmaxZKqJpXimeJ8aqZvThC4wKaI82TdABs9rsze482SbrFAT
iUQ95h5WN5sxqHFIJJc3jTXGbzZJqBEfmogTa60RQh6cWXs8rwYo764yrDXcBC6j
UAjkoFWXdrSlkkIM5ydDMeoocw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org