Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/8knQ9xUMXTlk2wuvTmNcJ_tVSKU.roa
File: 8knQ9xUMXTlk2wuvTmNcJ_tVSKU.roa (raw, json)
Hash identifier: lju7/2cPi6EIutRl0Pr1Y0XFcHyZ0E0jyn/arDfb2hQ=
Subject key identifier: F2:49:D0:F7:15:0C:5D:39:64:DB:0B:AF:4E:63:5C:27:FB:55:48:A5
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 087E8EE0
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/8knQ9xUMXTlk2wuvTmNcJ_tVSKU.roa
Signing time: Sat 01 Jan 2022 03:54:28 +0000
ROA not before: Sat 01 Jan 2022 03:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211261
IP address blocks: 103.226.194.0/23 maxlen: 23
185.145.71.0/24 maxlen: 24
185.223.176.0/22 maxlen: 22
103.229.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142511840 (0x87e8ee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Jan 1 03:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f249d0f7150c5d3964db0baf4e635c27fb5548a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:94:b7:de:22:3b:a3:6d:16:47:3a:51:28:dc:
48:25:66:3c:af:a4:ab:b5:81:4e:d2:79:09:fc:81:
66:1b:87:9f:2d:b7:21:25:ae:9d:80:02:36:4d:ff:
4e:cc:93:85:d7:7b:f7:20:cc:0e:95:9a:6f:12:5d:
5f:9d:0a:4c:ea:75:23:3c:14:49:db:3c:46:04:69:
35:11:71:2e:3d:82:5a:9f:d1:5e:4e:12:88:c9:f4:
79:b1:75:79:57:59:ac:54:d9:12:db:df:4d:d1:5f:
49:78:db:7b:39:5e:fb:68:a1:3d:23:ed:f5:c1:66:
70:b8:5a:f8:73:3e:aa:52:3d:3d:b2:34:7e:a2:9c:
59:8d:0a:88:20:92:b9:37:01:47:96:f0:ee:c2:05:
ac:e4:bb:e1:88:d9:5f:6c:6f:36:c4:19:ab:9a:ec:
0e:84:7b:0c:46:45:5f:81:bd:ab:1e:5f:4e:eb:8f:
7c:1e:9e:66:7a:15:72:5a:93:ac:04:cc:c5:9c:ec:
58:96:1d:da:a3:7a:84:d9:2f:39:f0:88:f5:57:ce:
36:6c:b9:c2:dd:ac:30:80:83:ff:2f:56:c8:0d:46:
c1:fb:46:d0:75:57:ef:9a:40:98:1a:16:c0:ab:43:
3d:5f:d8:60:f1:22:ca:df:57:4e:7d:38:ef:21:95:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:49:D0:F7:15:0C:5D:39:64:DB:0B:AF:4E:63:5C:27:FB:55:48:A5
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/8knQ9xUMXTlk2wuvTmNcJ_tVSKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.226.194.0/23
103.229.168.0/24
185.145.71.0/24
185.223.176.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:18:30:f4:28:9d:95:3b:10:b5:99:99:c8:01:f8:42:38:34:
eb:6b:c2:93:ad:ee:00:82:34:11:86:b0:81:d0:9c:bd:88:2f:
b5:bf:c1:d1:84:11:d9:bb:43:35:73:d7:3b:f3:25:b1:0e:13:
11:dc:8a:95:ef:f7:43:48:a9:bd:bb:71:9c:53:49:75:e8:56:
c7:02:35:17:11:5b:9a:d1:42:c4:49:81:f9:69:65:3a:c3:4e:
2a:bd:36:4d:45:25:25:7c:36:43:20:f3:2f:5e:04:58:7a:e8:
88:f9:97:e9:eb:70:29:df:6a:99:f7:29:48:77:6b:f6:02:60:
0a:8e:a6:84:e8:0d:26:3d:9a:c1:9b:61:7a:4a:21:68:95:96:
cd:72:c4:a7:e7:45:04:4d:04:a2:8f:96:18:1b:73:f5:2b:64:
a6:e9:d9:1d:06:13:3a:74:51:ef:fb:75:75:c8:3e:d2:7e:6f:
fe:81:45:23:b9:98:1c:bd:c0:e5:29:14:56:56:f0:c1:01:ef:
75:79:2a:e9:2f:7f:9c:37:f7:b3:32:75:a5:2c:de:f6:a8:b5:
49:63:8f:e9:7b:6e:a9:44:a5:22:cf:eb:a5:09:2a:66:37:c5:
b6:c5:12:03:03:98:4c:27:cd:bc:99:29:d2:93:14:e2:98:3f:
9c:2a:b6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-ams.rpki-client.org