Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1LsCw_ALRZWhfAgM7YENfmX3QMY.roa
File: 1LsCw_ALRZWhfAgM7YENfmX3QMY.roa (raw, json)
Hash identifier: 7Y7C2k08BisBgfegy8KjcoP3apQXnmF+kKs0QG3SXHw=
Subject key identifier: D4:BB:02:C3:F0:0B:45:95:A1:7C:08:0C:ED:81:0D:7E:65:F7:40:C6
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01846771D0C8A637C028597B9731AF6D4E0B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1LsCw_ALRZWhfAgM7YENfmX3QMY.roa
Signing time: Fri 11 Nov 2022 16:07:03 +0000
ROA not before: Fri 11 Nov 2022 16:07:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 62.72.181.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
176.57.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:67:71:d0:c8:a6:37:c0:28:59:7b:97:31:af:6d:4e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 11 16:07:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4bb02c3f00b4595a17c080ced810d7e65f740c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ae:d5:ed:10:8f:4b:0e:f1:93:95:97:44:e9:
06:17:e4:d9:54:2c:4b:ee:41:c3:03:05:7c:39:87:
36:c9:48:38:9b:20:10:3c:b3:1f:92:f9:88:15:1b:
9f:91:d7:9e:c8:25:c9:21:c0:e6:33:ac:88:c7:53:
5b:14:4b:94:ac:c7:b9:97:5f:93:f1:fc:1e:47:d5:
9e:d9:b8:a8:ee:6e:c5:40:cf:da:2e:04:93:80:68:
87:38:1b:d8:b8:07:43:54:f4:f6:d6:67:3c:80:27:
8b:ee:0f:00:ea:d5:43:d3:fa:ad:47:eb:3f:3a:77:
ea:f7:49:a5:5d:9d:2c:ea:8a:3f:b5:6c:32:e5:5d:
f1:b7:6c:9c:e7:fe:b2:8a:8e:0c:1a:3c:2b:56:ac:
12:7e:15:30:91:57:0c:2a:9a:31:da:c6:35:64:2e:
0e:b9:6d:c9:4a:6e:38:84:d5:78:8b:b5:53:5f:7c:
45:0e:4d:7d:6b:f8:c2:db:1a:a7:db:3f:29:34:dc:
3b:57:dc:d8:8c:7d:56:1b:8f:f7:27:39:fb:7c:5f:
f7:ee:bd:c3:b0:16:04:9a:7f:b3:09:d5:a1:d7:69:
42:c2:61:c9:18:c0:2f:07:8c:a6:55:27:57:12:3e:
ee:a2:b2:e8:fd:bb:44:51:8e:1a:e6:9b:69:a4:79:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BB:02:C3:F0:0B:45:95:A1:7C:08:0C:ED:81:0D:7E:65:F7:40:C6
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1LsCw_ALRZWhfAgM7YENfmX3QMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.181.0/24
62.72.188.0/24
62.72.191.0/24
176.57.60.0/22
Signature Algorithm: sha256WithRSAEncryption
77:5c:1b:eb:63:ac:d5:53:df:b2:23:32:ac:10:7c:9b:99:63:
fe:ca:db:c1:d8:bb:8d:c5:1f:51:c1:51:b8:a3:f9:09:3e:d1:
a1:fe:9c:ac:20:a1:22:76:53:fc:c9:04:a6:74:c8:74:9b:ca:
1f:94:af:a7:3b:55:c3:71:6a:b0:58:f6:ad:2d:fd:51:72:42:
7d:d9:09:62:55:77:2a:f4:78:f7:c0:3f:b7:af:76:54:db:56:
0e:78:5a:79:af:58:77:9f:18:d3:54:b6:6f:3e:3c:86:3e:1c:
0e:aa:bb:f2:fe:cd:9b:f7:9c:68:80:6e:9a:8f:9b:f9:f0:b9:
a1:fe:90:b0:3d:72:20:08:ba:2f:52:7e:98:b8:2a:4d:04:80:
06:0d:a1:2d:d0:65:d4:92:b4:21:33:74:76:5b:ed:6e:e9:82:
2e:97:cf:83:e2:bc:01:54:7d:cd:3c:57:81:19:40:1a:00:12:
6e:a0:c8:10:01:38:42:32:2b:0b:a7:3d:f3:52:00:f1:08:cf:
38:6f:f0:fd:fd:6a:8e:7a:75:d8:4d:fb:35:4f:6e:62:7d:89:
1f:9f:bb:91:11:80:42:b0:62:98:40:7c:97:42:99:69:c3:3d:
32:54:72:73:2b:2a:ec:ff:86:77:b9:c3:74:83:2b:26:1e:d2:
e3:05:3e:36
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYRncdDIpjfAKFl7lzGvbU4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjIxMTExMTYwNzAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGJiMDJjM2YwMGI0NTk1YTE3YzA4MGNlZDgxMGQ3ZTY1Zjc0MGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8K7V7RCPSw7xk5WXROkGF+TZVCxL
7kHDAwV8OYc2yUg4myAQPLMfkvmIFRufkdeeyCXJIcDmM6yIx1NbFEuUrMe5l1+T
8fweR9We2bio7m7FQM/aLgSTgGiHOBvYuAdDVPT21mc8gCeL7g8A6tVD0/qtR+s/
Onfq90mlXZ0s6oo/tWwy5V3xt2yc5/6yio4MGjwrVqwSfhUwkVcMKpox2sY1ZC4O
uW3JSm44hNV4i7VTX3xFDk19a/jC2xqn2z8pNNw7V9zYjH1WG4/3Jzn7fF/37r3D
sBYEmn+zCdWh12lCwmHJGMAvB4ymVSdXEj7uorLo/btEUY4a5ptppHmB9QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNS7AsPwC0WVoXwIDO2BDX5l90DGMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvMUxzQ3dfQUxSWldoZkFnTTdZRU5mbVgzUU1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPki1AwQA
Pki8AwQAPki/AwQCsDk8MA0GCSqGSIb3DQEBCwUAA4IBAQB3XBvrY6zVU9+yIzKs
EHybmWP+ytvB2LuNxR9RwVG4o/kJPtGh/pysIKEidlP8yQSmdMh0m8oflK+nO1XD
cWqwWPatLf1RckJ92QliVXcq9Hj3wD+3r3ZU21YOeFp5r1h3nxjTVLZvPjyGPhwO
qrvy/s2b95xogG6aj5v58Lmh/pCwPXIgCLovUn6YuCpNBIAGDaEt0GXUkrQhM3R2
W+1u6YIul8+D4rwBVH3NPFeBGUAaABJuoMgQAThCMisLpz3zUgDxCM84b/D9/WqO
enXYTfs1T25ifYkfn7uREYBCsGKYQHyXQplpwz0yVHJzKyrs/4Z3ucN0gysmHtLj
BT42
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org