Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8xqyTuDK7M74NiB0Q27FLzqd91s.roa
File: 8xqyTuDK7M74NiB0Q27FLzqd91s.roa (raw, json)
Hash identifier: noYCKrLZFAo0j1WviAdpU/iSH9WEo60P7c3nyyqQB7w=
Subject key identifier: F3:1A:B2:4E:E0:CA:EC:CE:F8:36:20:74:43:6E:C5:2F:3A:9D:F7:5B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0356EA9A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8xqyTuDK7M74NiB0Q27FLzqd91s.roa
Signing time: Mon 20 Jun 2022 06:21:44 +0000
ROA not before: Mon 20 Jun 2022 06:21:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 62.72.185.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
176.57.52.0/22 maxlen: 24
176.57.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56027802 (0x356ea9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 20 06:21:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f31ab24ee0caeccef8362074436ec52f3a9df75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:46:66:2d:59:ef:7e:92:69:a9:0e:b3:45:
41:2c:98:23:c6:bf:6c:ad:9b:aa:af:23:3a:b9:c7:
a9:66:f9:98:71:e7:53:0e:20:c7:c7:5c:81:50:c0:
a4:cc:c3:d4:63:97:76:6c:d9:b7:eb:d4:41:bc:00:
b0:a7:d3:11:d0:6f:f7:91:a4:44:0b:3d:50:5e:fb:
c5:b6:6d:6d:36:7d:ab:75:26:ec:19:cb:ae:17:7a:
a8:5c:49:59:ab:6d:9d:49:09:d9:e3:15:b4:84:6c:
8c:b2:0a:c7:bb:69:a7:4c:4f:cb:c5:5a:df:df:b4:
f2:43:ca:eb:02:f4:ea:38:d3:70:fd:2f:12:04:9a:
b3:2f:45:cf:d7:e0:f7:bb:fc:f8:cd:d3:bc:99:5c:
ee:e3:63:95:dc:63:be:3e:96:ba:fe:7a:40:34:ae:
e3:67:5d:9b:e0:4a:4a:f3:40:ae:bb:3e:b2:9d:65:
57:dd:ef:2a:6e:0b:e5:cf:56:bb:2e:52:25:3b:8d:
25:c1:38:ac:e8:d8:9d:38:15:f1:0c:0a:c6:00:09:
e7:25:4a:8b:92:3f:a1:44:46:b0:fc:6b:3b:89:b1:
c2:96:55:62:17:35:96:3f:f2:83:59:b7:ba:7b:46:
30:da:1b:26:c4:dd:4c:ae:c8:cf:72:8d:38:e1:d4:
24:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1A:B2:4E:E0:CA:EC:CE:F8:36:20:74:43:6E:C5:2F:3A:9D:F7:5B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/8xqyTuDK7M74NiB0Q27FLzqd91s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.181.0/24
62.72.185.0/24
62.72.188.0/24
62.72.191.0/24
176.57.52.0/22
176.57.60.0/22
Signature Algorithm: sha256WithRSAEncryption
61:1b:29:be:04:71:e8:08:2e:3a:aa:8c:24:62:00:09:39:bc:
2a:48:48:07:41:6f:02:d7:e1:f7:87:8b:ad:af:b1:43:08:d8:
da:ec:6a:ab:1d:14:01:83:f9:f5:94:5c:8e:4e:ce:ae:45:33:
8d:cf:de:41:c9:94:c7:b0:15:e3:95:18:cc:66:c6:e2:ac:49:
6b:9d:2e:a9:e6:06:cf:6c:f5:7d:71:ae:61:84:da:ea:aa:35:
a5:8e:0a:40:43:0a:52:44:4e:f5:87:3f:53:34:3d:be:d9:ff:
a4:ea:f7:09:06:38:6d:45:57:ae:ea:eb:0e:6e:76:1a:78:4d:
7f:72:ce:ef:95:83:5e:e0:c4:0a:db:cc:0c:3a:93:4f:59:29:
b6:83:be:4e:41:1b:2b:57:b2:9d:9c:0c:66:39:0d:27:b2:f2:
b1:3b:98:47:2b:0f:67:51:6b:27:e2:2b:aa:c8:b7:53:c4:73:
57:0a:f6:f9:68:e7:7a:9f:ef:37:ed:03:82:e0:6a:1a:3a:7c:
ce:4c:95:2a:64:92:1d:62:ce:71:6f:f3:5a:d6:7f:fd:15:d4:
26:f5:1c:88:a8:8c:5c:06:80:8b:14:d0:1f:12:4e:fe:c2:bd:
81:82:3e:bb:19:9a:85:f4:d8:61:1a:56:b0:91:03:48:0c:96:
9d:06:b3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org