Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i6AP27-3Rbe-JHgbeilvhhpWoAc.roa
File: i6AP27-3Rbe-JHgbeilvhhpWoAc.roa (raw, json)
Hash identifier: HCpHgYJZCY98RQ+6baOvUsZ5ZWbP+9g0eUyfWAtGSXk=
Subject key identifier: 8B:A0:0F:DB:BF:B7:45:B7:BE:24:78:1B:7A:29:6F:86:1A:56:A0:07
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0184CC9F935A1D5B50FA54B0D277FA426043
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i6AP27-3Rbe-JHgbeilvhhpWoAc.roa
Signing time: Thu 01 Dec 2022 07:38:40 +0000
ROA not before: Thu 01 Dec 2022 07:38:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 62.72.183.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
176.57.61.0/24 maxlen: 24
176.57.60.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cc:9f:93:5a:1d:5b:50:fa:54:b0:d2:77:fa:42:60:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 1 07:38:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ba00fdbbfb745b7be24781b7a296f861a56a007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:16:85:fd:7b:fc:d0:7d:50:7f:81:b1:06:
34:e9:f2:22:41:9e:45:2e:dc:0c:b1:03:77:4a:57:
66:1b:bf:ba:23:9c:1c:4d:2b:9f:df:58:c5:19:c9:
28:84:19:b3:d3:a2:fe:7a:c0:ba:49:e0:a6:0a:b6:
22:83:a3:78:b0:fd:0f:55:b1:12:85:3d:4d:e6:b3:
c2:07:f0:21:9f:ce:6f:f0:dd:6f:e7:0a:ad:ef:04:
4e:3a:cb:8d:d0:19:c7:09:71:92:44:78:06:7e:0c:
bd:8b:d6:dd:16:e7:f3:6c:61:e2:1d:15:f9:42:45:
51:62:e4:85:ed:d6:8d:e8:b9:6f:30:75:29:f3:a5:
21:39:2f:d4:5c:b1:c2:e5:b2:a9:50:73:71:22:92:
a2:5c:ef:fb:cb:b6:4a:29:91:4e:fb:1e:77:db:5c:
d5:ea:33:a7:42:e4:f5:75:ff:be:78:eb:c5:84:3c:
e1:0e:5b:ac:35:ae:a7:0d:b4:e6:32:bf:49:db:2f:
50:11:f3:27:4c:c8:ba:3a:b1:06:4a:c3:c9:c9:26:
30:d9:89:ac:78:9e:c5:fe:3d:81:02:f4:4d:c2:a5:
44:94:cc:3f:1c:1c:2e:4c:4c:ec:7a:28:4f:29:6b:
58:af:c4:f6:4a:b9:1b:c7:60:76:ad:83:47:db:6f:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A0:0F:DB:BF:B7:45:B7:BE:24:78:1B:7A:29:6F:86:1A:56:A0:07
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i6AP27-3Rbe-JHgbeilvhhpWoAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.183.0-62.72.184.255
176.57.60.0-176.57.62.255
Signature Algorithm: sha256WithRSAEncryption
0a:07:27:b4:63:d8:18:a2:76:2a:ce:f1:be:a1:7e:63:f4:11:
69:e7:5d:d1:b7:17:fd:ba:bb:aa:e4:6c:bc:ed:eb:f6:42:c8:
fb:fa:fd:95:73:fe:d1:81:a7:a6:64:67:59:ad:0f:97:69:7f:
b3:b2:4a:4e:9e:32:84:93:6f:62:d5:d2:9f:aa:92:e6:8e:f9:
e2:62:a4:85:5b:ba:53:c2:ea:b2:60:fc:22:f1:61:7b:9e:78:
ee:e0:81:e6:ff:11:4f:2e:ad:5e:bf:8a:c6:68:ee:75:1e:fb:
19:cf:52:a8:13:09:85:f7:85:ff:9b:e8:c9:83:f0:41:e9:ee:
ed:ec:6c:07:cb:a0:5a:fd:be:40:4d:0b:84:8e:4c:d6:4d:df:
a9:c1:96:7a:56:74:c9:8e:70:c6:30:b6:34:6e:7d:a3:09:53:
d0:4e:65:45:04:e6:50:03:ef:9e:37:71:11:c5:e0:e4:6c:44:
46:05:2d:1d:8f:45:7e:ea:98:1c:a6:db:74:3f:11:08:ca:a2:
ad:06:67:a7:9b:db:f4:55:ee:5d:31:08:2c:9b:1c:6d:14:4f:
65:59:f4:9d:ab:a3:33:d1:1e:1c:b1:82:fc:6f:1c:9c:d7:18:
73:2b:05:d0:f7:fa:a8:31:9e:6d:e1:bc:b6:cc:9b:90:ff:ec:
30:ed:91:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org