Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/aZZ4r4p8x_OcmLhzM0ONhQ8I-wE.roa
File: aZZ4r4p8x_OcmLhzM0ONhQ8I-wE.roa (raw, json)
Hash identifier: HYcWwy3DMPoTonjAAG0b+oFwVYiIVmEnCw09MqhAdD0=
Subject key identifier: 69:96:78:AF:8A:7C:C7:F3:9C:98:B8:73:33:43:8D:85:0F:08:FB:01
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 026D9EE9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/aZZ4r4p8x_OcmLhzM0ONhQ8I-wE.roa
Signing time: Thu 17 Mar 2022 14:15:52 +0000
ROA not before: Thu 17 Mar 2022 14:15:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 62.72.176.0/20 maxlen: 24
176.57.48.0/24 maxlen: 24
176.57.48.0/20 maxlen: 24
176.57.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40738537 (0x26d9ee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 17 14:15:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=699678af8a7cc7f39c98b87333438d850f08fb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:40:eb:de:e1:70:ab:9e:c7:9c:06:40:c0:
37:70:13:93:c2:6a:c0:aa:80:9d:23:34:20:55:62:
89:f3:cd:db:9d:2a:18:30:eb:5b:86:9e:0b:d0:1a:
98:0f:cd:76:d6:e0:42:73:a5:64:6c:25:cc:96:4a:
16:de:0f:fc:93:5a:a5:3f:84:37:19:bd:aa:09:e4:
50:a5:87:57:c2:0a:ee:ab:aa:28:b7:f6:30:50:e3:
90:37:50:38:d5:d6:c2:df:4f:40:73:2b:5e:0f:0d:
6f:d9:95:44:8b:fe:d6:6e:9e:58:b2:4d:2d:f3:e0:
f2:86:55:b4:86:44:15:1d:1a:a6:23:23:ca:e9:f7:
e4:33:98:c0:12:47:a3:11:f8:dd:04:bc:15:4e:4d:
12:70:da:08:6e:f3:78:ab:ee:93:77:85:5e:ea:85:
4b:8d:1a:b7:8c:bc:d1:42:47:68:e8:0d:8b:a9:1b:
47:dc:8d:44:30:85:c0:1d:5b:da:6b:19:4b:94:27:
40:0c:64:68:02:9a:bc:24:26:84:80:77:ec:d2:62:
e0:52:43:08:d4:75:6a:90:fa:90:be:73:d7:4a:d2:
c1:e4:ee:dc:46:02:b5:91:67:b2:b0:86:3c:3d:22:
45:f6:76:e1:b7:3f:9b:db:63:24:80:f2:20:b5:06:
e1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:96:78:AF:8A:7C:C7:F3:9C:98:B8:73:33:43:8D:85:0F:08:FB:01
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/aZZ4r4p8x_OcmLhzM0ONhQ8I-wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/20
176.57.48.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:e1:fa:82:49:df:b4:10:95:35:0a:a7:ef:39:c5:32:94:e0:
9d:9c:10:9e:f6:c8:6b:56:60:00:4a:05:1e:0e:e8:8b:2e:1e:
3c:25:99:b3:39:dc:17:a1:4f:cd:bf:90:6a:9e:3d:38:bd:67:
01:5f:7a:fd:db:b0:13:04:a5:ce:0e:6e:67:cd:9a:a5:90:b6:
39:b1:fa:ce:70:dd:9f:5a:8d:47:f3:df:29:4c:11:4b:16:4c:
96:f9:ee:87:d7:5a:15:ad:e1:c4:db:4e:60:98:af:af:3b:67:
91:be:70:4f:e5:d8:21:bb:08:7c:e3:57:9b:15:84:74:c1:5f:
92:b9:86:9f:1d:41:a8:3e:00:52:7c:72:84:db:87:cc:08:bb:
7a:e7:31:e9:fd:f0:07:c4:f5:a0:9f:43:50:03:78:ed:06:45:
88:09:a3:8f:12:ea:64:4e:82:17:f0:43:16:89:d9:cb:4b:0c:
9a:ee:6c:d0:5f:86:ab:e5:88:9f:f2:52:62:8d:ff:db:e6:94:
ef:09:66:8a:aa:37:17:6e:11:d0:fa:42:29:d7:c7:00:fb:5e:
9b:0e:77:de:71:f8:a6:e4:af:aa:5a:e1:b7:1d:c1:66:c1:a4:
03:e1:0a:62:dd:6e:6e:7a:5a:3e:ac:2c:6c:dd:89:72:e4:d2:
cb:6d:4d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org