Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/mWxJMgb8Gv5XaU_w6G5x4bPWJKc.roa
File: mWxJMgb8Gv5XaU_w6G5x4bPWJKc.roa (raw, json)
Hash identifier: x4sQ8BwrQ4BlnYjQS/N8nSNjR0uADM8aNvL62K8K/Yc=
Subject key identifier: 99:6C:49:32:06:FC:1A:FE:57:69:4F:F0:E8:6E:71:E1:B3:D6:24:A7
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 020EB304
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/mWxJMgb8Gv5XaU_w6G5x4bPWJKc.roa
Signing time: Sat 05 Feb 2022 13:32:59 +0000
ROA not before: Sat 05 Feb 2022 13:32:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 62.72.176.0/20 maxlen: 24
176.57.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34517764 (0x20eb304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 5 13:32:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=996c493206fc1afe57694ff0e86e71e1b3d624a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:13:e0:f9:b1:a6:11:3a:c0:31:19:3d:cb:
7e:74:62:d5:98:fb:99:51:4a:50:2d:f1:73:cb:4d:
c5:4c:52:84:1e:4d:b3:c3:31:33:e7:4e:16:84:0a:
a3:cb:19:8d:09:26:c3:cd:62:bf:76:b7:ca:12:20:
03:b0:34:b1:13:f6:9a:5e:5b:c8:47:e7:3b:3d:9a:
78:27:50:96:1c:49:2c:be:ac:d5:90:b4:40:ea:78:
98:25:63:13:0a:bf:10:23:01:11:c9:ba:5a:e2:b0:
43:0f:fc:21:bb:ed:f8:5b:5a:3e:af:7d:93:3d:6e:
7f:bd:e8:5c:d6:48:98:d3:a8:67:30:99:5e:d4:01:
ff:61:b8:e5:cb:64:35:73:b3:e0:16:eb:bd:d7:c8:
90:8e:ff:b0:23:c1:62:79:01:77:17:12:db:7d:2d:
b5:90:2f:1e:d4:9f:89:d4:ce:af:35:20:9b:93:68:
e6:9b:27:11:af:5e:46:d1:b6:9a:9e:3a:2b:33:a7:
f3:de:ae:de:24:5f:da:63:02:48:12:c4:a2:09:db:
09:17:c2:c5:de:2f:74:9d:a9:f7:99:ad:c3:ad:b6:
c3:b0:c5:2d:68:b6:15:4b:60:da:cf:6c:06:c5:3a:
46:76:8a:01:fb:10:6e:42:42:e7:06:97:2c:98:e0:
19:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6C:49:32:06:FC:1A:FE:57:69:4F:F0:E8:6E:71:E1:B3:D6:24:A7
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/mWxJMgb8Gv5XaU_w6G5x4bPWJKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/20
176.57.52.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:79:c0:f1:36:c0:63:b5:40:64:ab:a6:46:40:fc:98:11:9f:
cf:a5:4c:a8:50:3d:31:25:c4:50:4d:2d:3d:24:8d:d4:ad:66:
9b:9c:89:99:65:91:fc:e2:b7:5b:00:1e:64:b8:a6:e0:87:00:
0e:4b:9e:13:f5:8e:46:61:0f:5b:31:35:87:62:05:b5:35:23:
86:52:73:d8:13:8f:3a:81:db:97:ce:6f:73:6f:c9:6c:85:82:
1d:67:cc:84:1d:a1:b8:1a:1b:66:d5:b2:57:16:f4:9d:89:db:
c9:f0:56:28:52:74:83:11:c8:93:af:b3:40:2b:75:44:1d:25:
eb:3e:94:41:4b:36:64:30:87:1b:16:c0:32:83:f3:7c:c7:2c:
a8:ab:4b:b5:b7:5c:bc:3b:b6:84:8c:32:32:dd:c0:5f:17:02:
eb:7e:65:a4:2e:4b:14:89:28:2e:c6:42:12:61:de:f4:c8:15:
c3:5c:bc:ec:aa:0a:29:69:0c:09:b3:30:36:cb:df:9d:d5:05:
3a:68:d7:70:69:24:7e:75:2a:1d:32:f6:6b:9a:f8:28:ce:fe:
d7:7b:de:a5:c0:e9:bc:dd:7e:7d:7d:5b:65:56:c2:78:39:35:
48:fa:ce:06:c1:a6:73:f9:50:83:4f:f7:5c:f5:3e:fa:20:b7:
7c:19:a8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org