Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/jfJfZ2BKXvWrKUNqOWs54w-XCK4.roa
File: jfJfZ2BKXvWrKUNqOWs54w-XCK4.roa (raw, json)
Hash identifier: S3L3iKWWiT/uTRAnRicm28Q71XVlOi55DeP4A3UEWEM=
Subject key identifier: 8D:F2:5F:67:60:4A:5E:F5:AB:29:43:6A:39:6B:39:E3:0F:97:08:AE
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 03269588
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/jfJfZ2BKXvWrKUNqOWs54w-XCK4.roa
Signing time: Wed 01 Jun 2022 06:05:16 +0000
ROA not before: Wed 01 Jun 2022 06:05:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 62.72.185.0/24 maxlen: 24
62.72.184.0/22 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
176.57.52.0/22 maxlen: 24
176.57.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52860296 (0x3269588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 1 06:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8df25f67604a5ef5ab29436a396b39e30f9708ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:74:59:41:7d:eb:3b:3a:a4:92:cc:42:91:
3c:92:db:40:70:5d:b5:ad:31:c8:9e:d5:30:c5:eb:
1d:ce:28:24:02:11:07:68:b2:39:76:02:8d:43:34:
3e:d7:d4:3a:73:76:b7:80:2b:45:d3:4d:11:c8:4d:
8f:3c:54:50:e2:7d:c3:ac:83:c4:7b:9c:8c:3c:74:
87:b5:71:bd:ea:6e:63:0e:97:4f:a0:30:fd:2e:37:
67:3b:7b:16:f6:ab:19:9c:45:80:de:6f:13:5e:14:
62:2b:25:0d:7e:a1:81:b0:73:a1:3f:23:37:a4:40:
f1:af:e9:c6:0c:87:05:8c:a3:ae:dd:3d:18:68:5d:
65:1d:30:3c:87:00:dc:75:c1:95:31:fb:97:cf:fa:
c1:f2:dd:f2:ab:bf:3f:5a:dc:9c:d5:28:30:e6:6a:
64:d6:e1:b6:c2:b0:a3:45:51:88:fe:f0:5c:cb:a0:
94:3c:51:a7:2b:c2:10:a2:69:be:ce:50:d6:53:b7:
b4:1d:3e:c2:5f:9d:71:58:86:e9:30:79:97:f5:6d:
65:ae:1d:11:56:36:2e:6c:d2:ac:68:1e:9a:79:dc:
74:9f:02:ca:93:00:ad:29:f1:59:b3:69:0f:df:f2:
94:47:4b:ed:2f:36:6f:43:f0:39:b8:c3:c6:60:b3:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F2:5F:67:60:4A:5E:F5:AB:29:43:6A:39:6B:39:E3:0F:97:08:AE
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/jfJfZ2BKXvWrKUNqOWs54w-XCK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.181.0/24
62.72.184.0-62.72.188.255
62.72.191.0/24
176.57.52.0/22
176.57.60.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:03:87:53:27:24:67:a7:2f:19:0d:40:0a:b2:94:9a:5f:fe:
77:81:80:35:2b:c7:15:00:9f:dc:af:3e:e1:23:44:c3:c3:1f:
91:3e:7d:8a:3e:92:c0:fc:20:fe:be:60:7a:1e:45:40:57:2c:
f0:f2:65:07:43:b8:5b:11:ea:89:77:07:32:5a:ff:a9:26:71:
6e:22:1f:d3:7f:6d:6c:a4:d3:04:14:bc:1d:25:c3:0a:ee:74:
47:97:bc:2c:29:49:e8:b7:6e:37:c0:dc:5c:72:0d:77:15:bd:
6c:89:86:3f:73:2d:df:61:6a:a1:18:42:6d:ab:88:4a:d0:ca:
51:53:f5:bd:19:d3:35:f3:bf:c3:d6:76:c1:da:79:3f:72:a8:
ff:5b:19:e6:86:e0:48:59:89:bb:70:bd:6d:4e:b2:56:a9:5c:
9a:e3:18:55:f0:b4:61:25:17:be:d6:b3:38:3c:54:2b:87:65:
6c:5b:a2:91:4a:5e:a9:d9:22:e7:91:de:0d:4f:16:69:2f:3b:
6f:ca:e4:90:3a:24:4a:a6:b9:b7:04:bb:92:95:36:73:1e:0e:
3b:17:ba:6b:d0:a5:00:94:7e:19:79:53:c6:da:0e:67:cb:4a:
91:89:8d:61:c2:48:7c:04:7c:ca:70:a3:59:e8:5a:51:35:47:
07:ca:3e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org