Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/id4QWcP4RO-aysCnM7VGbWdzr6I.roa
File: id4QWcP4RO-aysCnM7VGbWdzr6I.roa (raw, json)
Hash identifier: sPrgGGJXe7XhyjKqA3FnS7XHM8BjwJbHbDHXYlTywRA=
Subject key identifier: 89:DE:10:59:C3:F8:44:EF:9A:CA:C0:A7:33:B5:46:6D:67:73:AF:A2
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 03021A34
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/id4QWcP4RO-aysCnM7VGbWdzr6I.roa
Signing time: Wed 18 May 2022 10:56:49 +0000
ROA not before: Wed 18 May 2022 10:56:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 62.72.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50469428 (0x3021a34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 18 10:56:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89de1059c3f844ef9acac0a733b5466d6773afa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:89:ab:d8:25:b0:69:50:d0:95:64:07:f3:
64:7a:e7:34:7e:38:7d:c2:89:3a:5e:75:52:84:90:
37:d7:49:de:06:d0:b8:a5:18:cf:fc:60:96:1f:e0:
94:af:97:78:a1:c2:66:98:ea:2e:b2:1f:55:d0:f2:
3a:75:0f:f3:b7:0d:1e:a0:52:2a:9e:b2:2f:90:c8:
79:3c:3a:15:9b:1d:37:34:bb:c5:d1:6f:69:92:cf:
88:96:f1:92:93:74:59:2f:d2:1d:ee:aa:b5:35:8d:
ee:b2:86:26:1f:55:64:aa:3c:64:c9:3e:d3:3a:e0:
38:81:d9:3e:9e:91:e3:e1:86:a3:77:c0:d0:66:67:
09:77:55:b6:20:d5:2a:77:76:4b:27:fd:a7:e3:88:
15:3a:a2:86:79:2a:01:f0:82:d9:46:ab:b9:75:2e:
21:ad:81:3e:4f:c2:e7:a8:ae:ce:bb:83:8d:31:8c:
ce:82:dd:ad:28:fd:6c:5c:90:49:32:98:37:3e:03:
1b:af:d3:a8:4e:8a:aa:fc:4c:65:af:ce:66:38:12:
15:d2:22:80:32:ad:dc:2a:a5:b8:ae:6a:f9:43:c2:
a2:e7:bd:55:f8:73:88:bb:8c:b3:1c:52:3d:c2:c4:
0a:1d:1e:70:8e:99:9e:c7:f2:62:80:9b:98:70:52:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DE:10:59:C3:F8:44:EF:9A:CA:C0:A7:33:B5:46:6D:67:73:AF:A2
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/id4QWcP4RO-aysCnM7VGbWdzr6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:54:9e:a9:eb:45:7c:3f:ed:b0:2c:b5:e3:e0:e3:cd:74:21:
1c:7e:97:d0:9d:ba:af:d1:7b:57:07:43:7b:f0:8f:3f:62:9e:
34:fd:e6:8f:32:99:48:36:fb:e4:0e:79:5d:bd:99:5e:fc:44:
92:dc:58:5d:71:c0:1c:7c:1f:c6:cf:ad:cf:a7:32:71:60:08:
ff:f8:a0:1d:96:15:c9:67:15:fa:55:c1:40:27:6a:88:59:15:
b1:29:da:7a:45:35:78:4f:4b:ac:27:be:de:ae:63:0c:1f:6e:
02:30:ce:7a:cf:0e:0c:68:ad:ea:2d:3d:e5:29:6e:24:20:15:
c2:96:71:d3:c7:16:53:fe:15:ee:39:d4:19:4e:69:ba:28:11:
17:cb:9a:f8:16:49:c5:3a:da:8d:69:a8:76:b1:58:49:f2:6e:
e4:6d:42:9f:b1:01:b9:4e:08:6e:57:3b:94:ff:d0:3b:c6:55:
e2:e0:87:9e:86:a9:75:fc:bc:92:63:74:0c:1f:15:8a:ec:54:
31:49:8a:b7:0a:5b:69:87:4f:ee:25:c8:7d:93:5f:d4:a4:61:
d4:f0:ef:d4:12:29:ad:da:e6:44:a9:88:7d:fe:68:d4:53:1d:
5d:01:46:6b:eb:d5:d5:b6:fb:50:b5:e0:77:d8:2a:43:97:a4:
e4:73:06:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org