Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hTKKDaMBoSRs8Zji_yDxMfrdWj0.roa
File: hTKKDaMBoSRs8Zji_yDxMfrdWj0.roa (raw, json)
Hash identifier: U9VVhiCJn8Pim45xI3tpIRLSxRBFTbhPYrgN/zaYbcw=
Subject key identifier: 85:32:8A:0D:A3:01:A1:24:6C:F1:98:E2:FF:20:F1:31:FA:DD:5A:3D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0184677006B40E8B74553F54C71F1B32E46A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hTKKDaMBoSRs8Zji_yDxMfrdWj0.roa
Signing time: Fri 11 Nov 2022 16:05:05 +0000
ROA not before: Fri 11 Nov 2022 16:05:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136923
IP address blocks: 62.72.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:67:70:06:b4:0e:8b:74:55:3f:54:c7:1f:1b:32:e4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Nov 11 16:05:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85328a0da301a1246cf198e2ff20f131fadd5a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:1d:54:c9:82:bd:70:16:d1:5f:38:5e:27:
c0:32:73:71:42:e3:74:4e:e1:bc:f2:78:39:e3:1f:
6e:f3:16:55:b1:41:32:a6:82:76:a8:c0:db:be:1b:
7c:15:6f:13:b6:12:33:a8:db:0e:9f:a9:87:dd:0b:
34:e4:e0:f7:22:7b:39:1f:fe:78:7b:6b:75:54:96:
11:41:bb:3a:9e:f5:9c:6f:b0:b9:8d:13:7a:f1:5c:
7e:6b:82:c7:e9:31:6d:32:05:07:76:a6:9f:de:7a:
7e:b2:c9:61:15:67:d5:2c:cb:45:23:6b:d6:0d:ed:
c0:8f:89:2c:e2:0f:97:69:ef:02:91:32:0b:8b:2c:
88:8c:40:f8:34:b1:da:67:69:4a:7f:7f:3d:85:ec:
54:ce:41:d5:8d:bf:92:d7:e2:ca:d5:4e:10:63:89:
be:30:3d:42:75:5c:9d:d5:2b:b6:bc:53:60:ee:ac:
2c:c4:e0:be:1f:30:62:a5:80:2e:2f:d5:6c:f4:b0:
bf:4b:87:73:ad:c1:88:6e:c5:bf:90:58:80:91:a9:
c4:0b:b0:6b:f9:2d:75:53:f3:06:06:6f:54:47:cf:
a1:61:13:05:e8:de:03:71:3f:e3:32:1f:02:98:49:
f1:2a:f3:c5:e3:35:d2:78:ee:fa:15:55:0c:c5:bb:
77:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:32:8A:0D:A3:01:A1:24:6C:F1:98:E2:FF:20:F1:31:FA:DD:5A:3D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hTKKDaMBoSRs8Zji_yDxMfrdWj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.185.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4c:ed:38:e3:07:ef:5a:ec:b1:db:5a:90:aa:f9:8f:93:8e:
f2:4a:34:63:bd:c6:b6:19:1d:32:5e:0e:de:63:d2:cc:b4:f6:
67:ea:e5:75:26:87:70:3c:ad:25:53:c5:2b:50:89:e2:f2:af:
d5:08:32:73:1b:a1:3c:eb:d1:c5:4c:f4:84:d8:ac:4d:ea:1f:
63:54:10:ce:3f:2b:a2:81:05:70:83:48:8a:c4:36:16:4e:be:
dd:c2:b7:f1:5b:bb:fa:5e:66:a4:d7:f6:1b:84:a8:93:02:7e:
aa:ee:01:e0:72:67:59:d2:a4:1b:2c:13:08:21:f6:49:e0:6b:
c7:d7:2b:83:7f:01:4f:ef:93:e9:4e:1c:63:34:fe:a1:b6:d6:
e5:cc:41:a2:a0:e6:8f:37:05:5b:92:a1:10:89:fd:56:8e:00:
b0:b7:58:0e:5d:21:20:02:ad:cf:ed:63:e3:7b:4d:d6:01:69:
41:c3:35:a4:04:0e:b9:da:9f:8a:fa:e7:74:09:22:d5:45:e6:
ea:33:46:89:8a:30:e1:2f:8d:b0:8d:b2:84:5e:77:81:b6:a6:
41:20:e4:3f:24:b8:78:5b:f1:43:67:ab:ba:1e:30:39:8c:da:
8f:ec:3d:12:25:63:e4:3a:66:46:13:77:ef:ef:be:9c:62:d9:
69:a3:22:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRncAa0Dot0VT9Uxx8bMuRqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjIxMTExMTYwNTA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTMyOGEwZGEzMDFhMTI0NmNmMTk4ZTJmZjIwZjEzMWZhZGQ1YTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBkdVMmCvXAW0V84XifAMnNxQuN0
TuG88ng54x9u8xZVsUEypoJ2qMDbvht8FW8TthIzqNsOn6mH3Qs05OD3Ins5H/54
e2t1VJYRQbs6nvWcb7C5jRN68Vx+a4LH6TFtMgUHdqaf3np+sslhFWfVLMtFI2vW
De3Aj4ks4g+Xae8CkTILiyyIjED4NLHaZ2lKf389hexUzkHVjb+S1+LK1U4QY4m+
MD1CdVyd1Su2vFNg7qwsxOC+HzBipYAuL9Vs9LC/S4dzrcGIbsW/kFiAkanEC7Br
+S11U/MGBm9UR8+hYRMF6N4DcT/jMh8CmEnxKvPF4zXSeO76FVUMxbt3jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIUyig2jAaEkbPGY4v8g8TH63Vo9MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvaFRLS0RhTUJvU1JzOFpqaV95RHhNZnJkV2owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPki5MA0G
CSqGSIb3DQEBCwUAA4IBAQA+TO044wfvWuyx21qQqvmPk47ySjRjvca2GR0yXg7e
Y9LMtPZn6uV1JodwPK0lU8UrUIni8q/VCDJzG6E869HFTPSE2KxN6h9jVBDOPyui
gQVwg0iKxDYWTr7dwrfxW7v6Xmak1/YbhKiTAn6q7gHgcmdZ0qQbLBMIIfZJ4GvH
1yuDfwFP75PpThxjNP6httblzEGioOaPNwVbkqEQif1WjgCwt1gOXSEgAq3P7WPj
e03WAWlBwzWkBA652p+K+ud0CSLVRebqM0aJijDhL42wjbKEXneBtqZBIOQ/JLh4
W/FDZ6u6HjA5jNqP7D0SJWPkOmZGE3fv776cYtlpoyLk
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org