Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ut_zr3hwzzTnN_zEtA6RWlgxS4Y.roa
File: ut_zr3hwzzTnN_zEtA6RWlgxS4Y.roa (raw, json)
Hash identifier: qvZzBl/u3Mj99rhupRB0lEtRFkTcIcc71w1+JS3gZyc=
Subject key identifier: BA:DF:F3:AF:78:70:CF:34:E7:37:FC:C4:B4:0E:91:5A:58:31:4B:86
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018521C5489C3977480FC4EC3103591E3ECF
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ut_zr3hwzzTnN_zEtA6RWlgxS4Y.roa
Signing time: Sat 17 Dec 2022 20:27:35 +0000
ROA not before: Sat 17 Dec 2022 20:27:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 62.72.176.0/24 maxlen: 24
62.72.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:21:c5:48:9c:39:77:48:0f:c4:ec:31:03:59:1e:3e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 17 20:27:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=badff3af7870cf34e737fcc4b40e915a58314b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:26:f0:63:99:cd:79:0f:09:45:79:99:5e:eb:
e8:5c:c3:13:43:ba:fa:68:c7:af:62:e1:fa:92:a2:
45:58:07:16:60:fc:33:46:29:7f:c6:fc:4b:19:db:
94:82:1c:09:56:c3:10:f8:2b:da:ed:99:5d:81:b9:
b8:48:09:63:db:33:a2:d9:99:97:42:de:f5:c7:ba:
25:bc:15:07:84:48:97:6f:84:e8:2f:0d:13:d0:85:
9f:33:cf:f0:a0:51:c5:cf:1c:a5:2f:74:47:82:0a:
ed:ba:60:5e:bb:19:95:52:93:17:aa:0a:2d:05:4c:
56:85:ef:c6:23:af:9b:9d:39:f7:0d:2b:ca:1d:cc:
0b:ad:c2:d7:9f:7e:ce:87:af:43:7e:92:ec:2d:ff:
33:82:8f:e4:ea:95:43:ad:ab:3d:42:4d:36:a0:db:
60:c4:5e:5c:3d:be:4d:7c:25:71:7d:0e:a5:86:48:
14:f0:ad:4b:13:d8:cb:44:e6:c8:e6:c6:d5:27:b9:
0b:93:78:c1:a1:8d:da:5f:00:a0:57:59:7c:62:72:
0f:32:8d:92:8f:82:be:4c:ef:c1:7a:9b:a3:54:0c:
30:24:d4:60:1f:71:15:12:3c:94:58:d8:3f:d3:07:
63:d9:ee:6d:a1:87:a9:68:03:79:b3:f2:64:01:63:
2e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DF:F3:AF:78:70:CF:34:E7:37:FC:C4:B4:0E:91:5A:58:31:4B:86
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ut_zr3hwzzTnN_zEtA6RWlgxS4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.176.0/24
62.72.183.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:4e:af:5d:9d:b5:4b:a1:66:53:d5:c0:fb:3b:81:78:96:1f:
2b:b9:13:ef:fc:1a:99:23:7c:41:78:c7:66:a4:3c:7a:02:a2:
e8:08:74:91:f6:61:45:75:29:c6:00:63:1d:17:26:29:ce:ae:
5a:2b:52:ee:de:19:59:0e:c7:07:f6:f6:96:62:66:ff:2e:35:
5a:eb:fe:ce:28:a9:2e:1d:9c:2f:48:56:5e:59:bd:0e:c2:40:
95:e9:ea:08:4e:da:e4:eb:15:e5:ee:ee:bc:d2:73:f7:d4:3a:
4d:95:e5:a2:d3:d9:95:4b:bf:ac:d1:0b:80:be:bc:b3:d9:db:
0d:29:37:d1:6b:1f:6c:30:a4:4a:f1:5a:23:e2:8f:2d:43:5b:
22:82:bb:94:be:7c:26:70:13:77:7d:cc:38:26:31:2e:74:b6:
ae:98:25:55:34:a0:ff:a4:22:a6:b0:63:de:cf:85:52:72:55:
76:2f:11:67:b1:74:11:c3:39:8c:b9:32:35:c6:5f:98:5c:5b:
a6:d3:c3:e3:be:84:59:2d:a5:f9:24:01:e5:28:a4:4d:c5:fe:
c1:da:ff:aa:fa:7c:fb:16:2a:20:59:c4:58:41:d3:37:5d:aa:
a3:3a:d5:97:35:79:63:82:f6:aa:6b:38:64:45:97:9e:9f:1a:
6d:4f:c0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org