Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/4OYUBrOP7iFSDQYxKoFI4_TbE74.roa
File: 4OYUBrOP7iFSDQYxKoFI4_TbE74.roa (raw, json)
Hash identifier: 68BkOZ9Rs3DB8STxVkleG5TXlML/Qh2FACmwkcDl8q4=
Subject key identifier: E0:E6:14:06:B3:8F:EE:21:52:0D:06:31:2A:81:48:E3:F4:DB:13:BE
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 09515FB9
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/4OYUBrOP7iFSDQYxKoFI4_TbE74.roa
Signing time: Wed 30 Mar 2022 07:29:51 +0000
ROA not before: Wed 30 Mar 2022 07:29:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211261
IP address blocks: 103.226.194.0/23 maxlen: 23
185.145.71.0/24 maxlen: 24
185.145.70.0/24 maxlen: 24
185.223.176.0/22 maxlen: 22
103.229.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156327865 (0x9515fb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Mar 30 07:29:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0e61406b38fee21520d06312a8148e3f4db13be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:a6:b3:06:69:4b:26:3d:a0:1e:83:8b:96:
25:92:d2:bf:61:57:dd:7d:72:d5:a6:03:ac:a4:48:
88:4e:0b:21:20:2f:62:53:93:37:5a:a1:b0:e6:8d:
b8:ab:cd:48:ac:dc:d1:c8:6d:f0:cc:87:83:96:e5:
c8:b4:36:0c:4d:aa:6f:10:5e:7c:91:27:cc:93:1d:
8b:3e:6a:6d:ed:0b:8a:8a:40:01:45:ee:c3:e3:d8:
bd:0c:08:78:95:b2:02:d6:1d:21:ec:0c:94:99:2d:
67:87:4f:37:47:8e:95:a8:fb:31:f6:02:d2:a4:f2:
c9:a7:66:b8:9b:5d:6f:00:9d:bc:89:32:dc:df:28:
c7:dc:2d:60:ea:65:44:e2:c2:e8:51:59:7b:59:03:
a4:ca:e5:31:fc:a7:10:16:00:ef:34:d6:b5:33:9e:
27:52:7b:b5:fc:53:7d:42:58:59:54:7c:33:70:b9:
c2:bd:29:c7:d9:1a:3c:0f:82:ea:7b:70:4a:45:d3:
81:56:30:2b:c3:84:8b:88:06:1e:f2:b1:4f:56:86:
bd:92:9d:a6:02:df:73:27:a4:e9:d1:73:b1:c7:20:
76:1e:44:df:59:55:ea:04:ca:05:f8:7c:5f:e4:a7:
31:28:c3:1b:8a:6d:14:47:90:b5:0f:68:9e:36:a6:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:14:06:B3:8F:EE:21:52:0D:06:31:2A:81:48:E3:F4:DB:13:BE
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/4OYUBrOP7iFSDQYxKoFI4_TbE74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.226.194.0/23
103.229.168.0/24
185.145.70.0/23
185.223.176.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:c7:dc:04:11:d0:a9:75:af:b3:d2:d9:2c:16:96:6b:af:41:
27:06:c7:23:86:ce:b2:de:b3:f7:17:ec:5e:fd:85:f2:a6:30:
7f:9c:99:d3:70:b4:9f:63:c5:c4:69:65:9d:a4:be:1e:20:52:
e0:77:d1:ba:1c:dc:65:c3:00:eb:09:60:20:8a:17:2f:c5:98:
13:48:f3:19:44:fe:5d:a8:57:21:21:d0:e0:73:99:3c:cf:53:
f9:43:ea:3b:ed:38:2c:77:69:bd:ec:40:26:91:8a:38:8a:0a:
25:d0:5f:db:cb:46:dd:eb:5f:fe:89:c0:12:5f:d0:9a:7f:46:
bf:3b:c4:f8:8e:8d:59:21:26:61:a5:b4:12:45:f0:d8:92:5c:
48:bd:41:da:c7:6b:e1:1d:a7:eb:6f:f7:36:1b:9e:d4:90:f6:
97:4b:74:c8:47:53:b7:0e:ab:58:ae:dc:ea:35:d5:5f:6b:e7:
d2:f9:04:ae:7b:47:a6:b7:66:e5:6f:6b:d3:a4:6a:c5:25:84:
40:e3:41:22:d0:85:a4:b6:ef:fa:0d:40:da:c6:af:cc:dc:6e:
32:fe:35:8a:70:02:0d:89:48:5c:43:a3:5c:aa:c3:79:4a:d7:
52:b7:92:ae:49:8f:14:fd:a3:87:63:f7:0a:75:9c:a2:94:6d:
b4:f2:7c:2f
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECVFfuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YjFlNzJmM2QwOTU3ZjVhNmUzYmQxYjg0NGExMmE2MTQ3NDQ5MDI3MB4XDTIyMDMz
MDA3Mjk1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTBlNjE0MDZiMzhm
ZWUyMTUyMGQwNjMxMmE4MTQ4ZTNmNGRiMTNiZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJxxprMGaUsmPaAeg4uWJZLSv2FX3X1y1aYDrKRIiE4LISAv
YlOTN1qhsOaNuKvNSKzc0cht8MyHg5blyLQ2DE2qbxBefJEnzJMdiz5qbe0LiopA
AUXuw+PYvQwIeJWyAtYdIewMlJktZ4dPN0eOlaj7MfYC0qTyyadmuJtdbwCdvIky
3N8ox9wtYOplROLC6FFZe1kDpMrlMfynEBYA7zTWtTOeJ1J7tfxTfUJYWVR8M3C5
wr0px9kaPA+C6ntwSkXTgVYwK8OEi4gGHvKxT1aGvZKdpgLfcyek6dFzsccgdh5E
31lV6gTKBfh8X+SnMSjDG4ptFEeQtQ9onjamv/8CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBTg5hQGs4/uIVINBjEqgUjj9NsTvjAfBgNVHSMEGDAWgBQLHnLz0JV/Wm47
0bhEoSphR0SQJzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0N4NXk4OUNWZjFwdU85RzRSS0VxWVVkRWtDYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWEvMWE1YTk2LWQzNmUtNGYzYS05YjM0LTA1NDhkMzg5NWE1NS8x
LzRPWVVCck9QN2lGU0RRWXhLb0ZJNF9UYkU3NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEv
MWE1YTk2LWQzNmUtNGYzYS05YjM0LTA1NDhkMzg5NWE1NS8xL0N4NXk4OUNWZjFw
dU85RzRSS0VxWVVkRWtDYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAWfiwgMEAGflqAMEAbmRRgMEArnf
sDANBgkqhkiG9w0BAQsFAAOCAQEAnMfcBBHQqXWvs9LZLBaWa69BJwbHI4bOst6z
9xfsXv2F8qYwf5yZ03C0n2PFxGllnaS+HiBS4HfRuhzcZcMA6wlgIIoXL8WYE0jz
GUT+XahXISHQ4HOZPM9T+UPqO+04LHdpvexAJpGKOIoKJdBf28tG3etf/onAEl/Q
mn9GvzvE+I6NWSEmYaW0EkXw2JJcSL1B2sdr4R2n62/3Nhue1JD2l0t0yEdTtw6r
WK7c6jXVX2vn0vkErntHprdm5W9r06RqxSWEQONBItCFpLbv+g1A2savzNxuMv41
inACDYlIXEOjXKrDeUrXUreSrkmPFP2jh2P3CnWcopRttPJ8Lw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:48 2023 by rpki-client on console-fra.rpki-client.org