Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/LLuf4rBPZP2IPuCReUwjL9BZ3ww.roa
File: LLuf4rBPZP2IPuCReUwjL9BZ3ww.roa (raw, json)
Hash identifier: 5/KSwaeDc3YOlWh2aOHOxaoAZRk7KVyE/4CdKRGNrMc=
Subject key identifier: 2C:BB:9F:E2:B0:4F:64:FD:88:3E:E0:91:79:4C:23:2F:D0:59:DF:0C
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0184EB48B0FF73572433DF2446C4779BD8B7
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/LLuf4rBPZP2IPuCReUwjL9BZ3ww.roa
Signing time: Wed 07 Dec 2022 06:32:00 +0000
ROA not before: Wed 07 Dec 2022 06:32:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 62.72.189.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:48:b0:ff:73:57:24:33:df:24:46:c4:77:9b:d8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 7 06:32:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cbb9fe2b04f64fd883ee091794c232fd059df0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:85:73:6e:d3:77:e6:4b:04:1e:7d:3f:ae:c6:
40:43:56:c4:4b:11:e4:01:24:02:a5:21:69:dc:2b:
98:7f:a8:d8:d0:92:d9:c9:92:8e:3f:3f:04:a5:75:
6a:1a:88:7a:80:3f:75:0b:8c:04:ec:c0:13:68:73:
e2:34:16:6c:e9:44:c7:ce:b8:03:9a:a0:46:62:6f:
a5:30:60:fe:12:f8:a2:77:a1:7a:f8:7c:c8:22:59:
34:e2:c6:48:47:d4:f2:43:3f:fd:7c:55:e6:f8:59:
85:eb:28:2b:97:82:70:c0:57:1d:be:de:ee:18:6f:
df:ba:8a:7b:a7:9e:af:f3:de:2c:54:86:9f:ff:45:
d1:62:97:71:03:2f:9c:dc:d1:e6:00:b1:6a:3e:99:
99:74:fd:50:99:04:81:37:1b:4b:b6:4b:a8:e0:ce:
5d:2f:61:dc:57:d5:87:d8:65:4b:62:d5:ba:2e:c4:
07:10:73:ba:28:26:7b:32:54:ce:eb:a8:d9:4d:15:
a9:51:0e:c1:3f:2e:a6:c0:1a:ee:79:6b:12:21:59:
3a:79:92:87:b4:98:c2:a2:c4:0f:b0:d4:6e:72:4a:
0b:8f:c4:5b:08:a2:99:5d:d3:53:2f:e2:b6:7c:dd:
11:bb:2f:a6:9f:83:d5:47:1b:c0:84:ba:2e:3c:00:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BB:9F:E2:B0:4F:64:FD:88:3E:E0:91:79:4C:23:2F:D0:59:DF:0C
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/LLuf4rBPZP2IPuCReUwjL9BZ3ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.189.0/24
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
44:57:8c:12:32:bf:4c:12:f7:5a:3a:fd:52:43:5c:cd:3e:69:
8c:9c:0d:71:39:18:70:f5:14:fe:1d:d4:ab:2c:24:5c:3e:16:
13:3c:29:9a:69:e0:66:13:ff:40:46:39:5c:84:a2:e2:d0:3a:
0c:be:50:de:31:4a:c7:b7:13:0a:26:a3:90:29:c3:04:25:b5:
70:3d:34:3c:a6:f2:dc:fd:06:0b:b4:e0:40:30:30:6e:6a:9d:
aa:df:86:4b:3f:c7:bd:3e:54:60:da:e6:53:97:01:47:cf:eb:
9c:a6:b8:81:ae:75:d4:02:02:82:b0:04:77:fd:da:23:a2:38:
fa:51:a6:6f:67:35:f2:ee:4c:2a:99:16:d1:28:f5:74:5b:13:
e1:e3:52:2b:4b:1a:b8:97:dd:73:0c:51:60:aa:9f:34:87:20:
d2:2a:a8:47:e5:2e:e4:60:6b:b8:32:46:55:67:f2:63:5b:f4:
2e:f2:d5:3d:56:3b:ec:37:83:04:84:e5:34:5d:87:c3:69:64:
6c:a0:0e:22:a9:71:54:ee:47:df:4e:f1:b8:20:eb:79:a0:1e:
94:34:91:9f:7f:55:62:7d:7d:1b:2e:04:7c:e3:c0:54:4a:4d:
9e:cd:97:c0:76:02:3a:51:9b:12:85:82:62:8b:a7:f3:f9:f0:
31:79:b3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org