Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1ppXXjvCA03Qoc5jwloV7KS0SlU.roa
File: 1ppXXjvCA03Qoc5jwloV7KS0SlU.roa (raw, json)
Hash identifier: MiEk96aV5R2TE/9KTO9Wgio4xqhNd2XBMzjyQYOixjE=
Subject key identifier: D6:9A:57:5E:3B:C2:03:4D:D0:A1:CE:63:C2:5A:15:EC:A4:B4:4A:55
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01853E3D7B1CCF8025169683F333AC7080AD
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1ppXXjvCA03Qoc5jwloV7KS0SlU.roa
Signing time: Fri 23 Dec 2022 09:08:14 +0000
ROA not before: Fri 23 Dec 2022 09:08:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 62.72.183.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.186.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
176.57.61.0/24 maxlen: 24
176.57.60.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:3d:7b:1c:cf:80:25:16:96:83:f3:33:ac:70:80:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 23 09:08:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d69a575e3bc2034dd0a1ce63c25a15eca4b44a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f7:f1:7f:16:14:a1:a1:2c:43:f2:e3:12:4d:
a2:68:38:89:80:a9:e9:c6:d8:44:0a:c1:f5:73:a7:
49:07:f9:d1:d2:f4:92:7c:fc:64:b7:a0:45:9d:99:
9c:ef:fb:d9:f5:7a:ad:62:f7:53:a1:b3:d1:c4:bf:
21:f5:86:b3:36:27:43:2c:a5:cc:96:da:9b:6e:47:
ae:f0:a8:a2:5a:cb:fa:29:c8:e4:44:12:d8:0a:c9:
05:c9:bd:1d:cc:27:1b:b0:e6:a6:1e:cd:60:c6:49:
51:d4:b4:89:ff:94:da:9e:70:20:09:00:09:a3:2e:
90:33:de:54:9b:ae:b9:b6:75:e0:99:39:c3:77:f6:
2d:d2:62:b1:96:e0:90:07:26:4a:05:d9:27:c8:be:
bb:37:ce:9e:c4:eb:cb:6a:d2:d9:17:84:7b:9d:68:
e9:98:5b:0d:c3:ad:85:74:18:e9:c7:b1:a3:52:58:
5d:e7:86:58:a1:a7:6f:62:31:2b:99:44:41:f5:bb:
3e:7f:aa:b5:1a:26:5b:e1:d7:a1:9f:84:3e:ca:2a:
f5:a5:15:0d:08:b5:8d:5f:4f:eb:71:25:44:53:0b:
ff:f4:4b:c2:39:e3:c4:6b:09:d3:57:37:5c:2f:c6:
d3:d9:f1:6b:e3:2b:d2:05:e7:98:1b:37:cd:3c:c4:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9A:57:5E:3B:C2:03:4D:D0:A1:CE:63:C2:5A:15:EC:A4:B4:4A:55
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1ppXXjvCA03Qoc5jwloV7KS0SlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.183.0-62.72.184.255
62.72.186.0/23
176.57.60.0-176.57.62.255
Signature Algorithm: sha256WithRSAEncryption
80:b4:7e:44:fb:c0:83:28:41:c3:ef:08:f2:93:47:38:04:ba:
68:5a:71:22:ce:3c:49:98:7e:e6:43:56:30:09:9e:7b:19:c6:
dd:2a:8c:ef:30:68:8b:f6:54:05:ac:2d:bf:73:e6:f7:14:bd:
b7:94:d2:71:96:f9:65:38:1b:55:07:32:51:31:b6:ae:96:cc:
60:c8:2c:82:ef:2c:0e:e3:64:07:cf:45:ee:42:b5:7c:cd:95:
99:3c:b3:82:13:82:a8:05:e8:b0:f9:7d:4c:36:7b:63:9a:ed:
2d:8d:95:fe:c9:f7:7d:f0:ab:b7:cd:94:95:2d:0c:67:7b:5a:
51:ce:86:85:e7:1b:44:b9:b0:86:82:96:e2:d6:57:c2:3a:63:
8c:bf:a4:5c:04:17:1f:69:44:0e:be:f1:f1:f4:fa:74:1f:e1:
26:34:7b:2c:c9:53:e9:fc:14:e4:4c:91:62:34:b6:f8:ba:8f:
cb:ec:53:b7:5c:6a:d3:28:09:1a:d2:a5:5e:79:7f:9d:54:2c:
72:10:63:55:8e:62:2a:05:e5:1b:05:31:4f:01:4c:1c:c3:95:
8a:3e:10:27:bb:9c:a3:0b:44:d0:d1:48:6c:03:2f:fb:8b:b0:
64:25:b4:45:cf:fb:54:e4:1f:af:95:3c:91:33:55:b5:eb:af:
0f:d4:c9:79
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYU+PXscz4AlFpaD8zOscICtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjIxMjIzMDkwODE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjlhNTc1ZTNiYzIwMzRkZDBhMWNlNjNjMjVhMTVlY2E0YjQ0YTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPfxfxYUoaEsQ/LjEk2iaDiJgKnp
xthECsH1c6dJB/nR0vSSfPxkt6BFnZmc7/vZ9XqtYvdTobPRxL8h9YazNidDLKXM
ltqbbkeu8KiiWsv6KcjkRBLYCskFyb0dzCcbsOamHs1gxklR1LSJ/5TannAgCQAJ
oy6QM95Um665tnXgmTnDd/Yt0mKxluCQByZKBdknyL67N86exOvLatLZF4R7nWjp
mFsNw62FdBjpx7GjUlhd54ZYoadvYjErmURB9bs+f6q1GiZb4dehn4Q+yir1pRUN
CLWNX0/rcSVEUwv/9EvCOePEawnTVzdcL8bT2fFr4yvSBeeYGzfNPMRLRwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNaaV147wgNN0KHOY8JaFeyktEpVMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvMXBwWFhqdkNBMDNRb2M1andsb1Y3S1MwU2xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAA+SLcD
BAA+SLgDBAE+SLowDAMEArA5PAMEALA5PjANBgkqhkiG9w0BAQsFAAOCAQEAgLR+
RPvAgyhBw+8I8pNHOAS6aFpxIs48SZh+5kNWMAmeexnG3SqM7zBoi/ZUBawtv3Pm
9xS9t5TScZb5ZTgbVQcyUTG2rpbMYMgsgu8sDuNkB89F7kK1fM2VmTyzghOCqAXo
sPl9TDZ7Y5rtLY2V/sn3ffCrt82UlS0MZ3taUc6GhecbRLmwhoKW4tZXwjpjjL+k
XAQXH2lEDr7x8fT6dB/hJjR7LMlT6fwU5EyRYjS2+LqPy+xTt1xq0ygJGtKlXnl/
nVQschBjVY5iKgXlGwUxTwFMHMOVij4QJ7ucowtE0NFIbAMv+4uwZCW0Rc/7VOQf
r5U8kTNVteuvD9TJeQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org