Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JVJky6SI2hQLW71e8H1iImToTVY.roa
File: JVJky6SI2hQLW71e8H1iImToTVY.roa (raw, json)
Hash identifier: m/Z/O5ijHPA7s9gLJ6cDiQHi26QLxWG259eAYG2sn4k=
Subject key identifier: 25:52:64:CB:A4:88:DA:14:0B:5B:BD:5E:F0:7D:62:22:64:E8:4D:56
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01BC1F8B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JVJky6SI2hQLW71e8H1iImToTVY.roa
Signing time: Sat 01 Jan 2022 04:53:44 +0000
ROA not before: Sat 01 Jan 2022 04:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 62.72.176.0/22 maxlen: 24
62.72.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29106059 (0x1bc1f8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 04:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=255264cba488da140b5bbd5ef07d622264e84d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:a1:75:51:45:f4:d1:be:5d:19:02:1f:7f:
45:d9:09:50:93:37:ba:22:5a:a3:8e:3f:99:5c:a9:
4a:35:3a:85:91:fd:91:b5:60:f8:d7:72:00:cf:f5:
38:bb:94:e1:50:e2:3b:cf:a2:6b:1a:de:e3:21:ac:
6b:dc:f2:a0:96:e6:bf:61:4e:7d:e3:ed:65:ce:e7:
1a:b0:b1:bc:40:46:37:3e:f4:ef:60:09:a0:70:55:
0f:2c:1f:51:a7:34:9d:7a:36:8c:a4:9a:96:bb:e7:
c1:41:c0:6b:73:c9:55:26:94:4a:56:8c:7d:c8:c8:
9f:e4:81:ae:9e:f9:31:05:60:b5:b5:1c:42:12:1e:
8d:cb:e3:8b:90:9e:52:27:01:8d:5b:f2:6e:59:f1:
19:a7:ff:f2:38:bc:47:45:70:43:e7:b6:75:43:3e:
8e:bd:cb:91:dd:a2:95:cb:99:64:20:c5:6e:26:7b:
35:c1:79:1b:88:05:df:45:0f:84:09:d9:e9:8e:b2:
e9:29:b2:e4:fc:be:c7:2f:4e:f1:7d:26:3f:77:9c:
e9:d1:93:27:7e:09:97:1c:94:20:a8:21:59:20:b7:
2b:d8:a4:f8:f7:57:da:6e:39:1e:ce:05:83:a5:ca:
65:97:e0:d0:6c:43:4d:3f:5b:38:11:fb:4a:68:0b:
b5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:52:64:CB:A4:88:DA:14:0B:5B:BD:5E:F0:7D:62:22:64:E8:4D:56
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JVJky6SI2hQLW71e8H1iImToTVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/22
62.72.188.0/22
Signature Algorithm: sha256WithRSAEncryption
25:b3:14:3f:9d:72:6a:46:6e:58:cb:fd:e9:a6:5c:21:af:cb:
6b:b9:59:af:11:c6:a4:09:8e:3a:93:5c:6a:b3:06:c0:32:2c:
47:fe:97:39:49:7d:9b:dd:8a:59:75:e8:2c:a9:c3:09:a8:db:
13:6b:bb:db:35:8b:bc:d4:61:71:f0:f0:cb:44:fd:3f:b6:78:
3c:42:93:03:5f:e9:47:0f:55:cf:71:98:09:91:6d:81:fd:f7:
15:bd:f3:a3:3f:72:53:96:1c:5e:6f:76:a9:0c:16:2f:51:0b:
63:49:8b:95:ad:eb:1e:8c:2c:3c:65:a0:d3:4e:6f:e1:53:a2:
ac:3b:15:0e:71:fe:40:6d:f5:f9:8e:22:3d:af:8d:20:fc:90:
02:5b:8b:19:66:a6:eb:4f:d4:db:c1:cd:0a:ee:a7:14:5f:dc:
31:6c:e2:dc:d1:53:48:86:5f:7a:3a:8c:a8:70:7a:c5:d7:1a:
76:0f:73:64:f2:b5:b7:ca:a7:7b:f3:b3:06:a8:f5:7f:0e:b6:
f9:ef:2d:25:00:42:2f:66:cd:03:a2:8d:8e:d6:fc:f3:e0:72:
09:e6:d5:dc:c5:0e:06:42:ad:96:23:f0:eb:7b:f9:6c:5c:17:
a1:77:16:43:7a:4b:b2:3a:d6:ad:0a:de:29:0b:19:bb:15:82:
8f:02:c0:14
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAbwfizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NWYxOTA3NDU0OGQyYTI5NGU0Mzg1ZDk1Y2Q2NzUyNDkwZWU0NmQ3MB4XDTIyMDEw
MTA0NTM0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjU1MjY0Y2JhNDg4
ZGExNDBiNWJiZDVlZjA3ZDYyMjI2NGU4NGQ1NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvWoXVRRfTRvl0ZAh9/RdkJUJM3uiJao44/mVypSjU6hZH9
kbVg+NdyAM/1OLuU4VDiO8+iaxre4yGsa9zyoJbmv2FOfePtZc7nGrCxvEBGNz70
72AJoHBVDywfUac0nXo2jKSalrvnwUHAa3PJVSaUSlaMfcjIn+SBrp75MQVgtbUc
QhIejcvji5CeUicBjVvyblnxGaf/8ji8R0VwQ+e2dUM+jr3Lkd2ilcuZZCDFbiZ7
NcF5G4gF30UPhAnZ6Y6y6Smy5Py+xy9O8X0mP3ec6dGTJ34JlxyUIKghWSC3K9ik
+PdX2m45Hs4Fg6XKZZfg0GxDTT9bOBH7SmgLtcsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQlUmTLpIjaFAtbvV7wfWIiZOhNVjAfBgNVHSMEGDAWgBQV8ZB0VI0qKU5D
hdlc1nUkkO5G1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZmR1FkRlNOS2lsT1E0WFpYTloxSkpEdVJ0Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvMDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRjYy8x
L0pWSmt5NlNJMmhRTFc3MWU4SDFpSW1Ub1RWWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
MDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRjYy8xL0ZmR1FkRlNOS2ls
T1E0WFpYTloxSkpEdVJ0Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAj5IsAMEAj5IvDANBgkqhkiG9w0B
AQsFAAOCAQEAJbMUP51yakZuWMv96aZcIa/La7lZrxHGpAmOOpNcarMGwDIsR/6X
OUl9m92KWXXoLKnDCajbE2u72zWLvNRhcfDwy0T9P7Z4PEKTA1/pRw9Vz3GYCZFt
gf33Fb3zoz9yU5YcXm92qQwWL1ELY0mLla3rHowsPGWg005v4VOirDsVDnH+QG31
+Y4iPa+NIPyQAluLGWam60/U28HNCu6nFF/cMWzi3NFTSIZfejqMqHB6xdcadg9z
ZPK1t8qne/OzBqj1fw62+e8tJQBCL2bNA6KNjtb88+ByCebV3MUOBkKtliPw63v5
bFwXoXcWQ3pLsjrWrQreKQsZuxWCjwLAFA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org