Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/ErXaTSJ9KFCrKW12AzCFQBUg56A.roa
File: ErXaTSJ9KFCrKW12AzCFQBUg56A.roa (raw, json)
Hash identifier: ppJjzJuRNjZJC9k7sKFPhorhbBa1FIX41uwqqlSIzaY=
Subject key identifier: 12:B5:DA:4D:22:7D:28:50:AB:29:6D:76:03:30:85:40:15:20:E7:A0
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 09752C4B
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/ErXaTSJ9KFCrKW12AzCFQBUg56A.roa
Signing time: Wed 13 Apr 2022 12:01:05 +0000
ROA not before: Wed 13 Apr 2022 12:01:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211261
IP address blocks: 103.226.194.0/23 maxlen: 23
185.237.212.0/24 maxlen: 24
185.145.71.0/24 maxlen: 24
185.145.70.0/24 maxlen: 24
185.223.176.0/22 maxlen: 22
103.229.168.0/24 maxlen: 24
103.229.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158673995 (0x9752c4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Apr 13 12:01:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12b5da4d227d2850ab296d76033085401520e7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:15:d1:e3:70:d4:a1:06:b3:de:aa:e7:51:
a0:b9:74:c5:ee:9e:0e:10:d1:3d:2d:bf:c8:be:b9:
3b:52:8d:e2:12:ed:23:31:40:4f:65:12:ad:dc:44:
23:f4:b0:df:60:75:8c:03:2d:9a:bd:3d:e9:12:73:
c9:f5:89:7b:20:5a:cc:63:f7:36:c2:93:53:ee:95:
eb:c3:09:7f:46:ed:08:90:45:0f:ae:53:37:17:00:
ca:5a:25:5b:52:1a:4f:c5:b7:bd:ad:94:5f:47:0a:
b5:35:ce:12:1b:d5:85:fb:e6:79:6f:a0:21:26:03:
b9:4e:d3:97:0c:5d:27:62:40:89:96:d3:76:c1:09:
64:47:2c:db:b1:4c:4f:b1:c5:6e:23:fa:3b:3b:66:
fa:25:94:36:2d:ea:30:f7:31:1c:c2:21:67:d3:60:
f5:41:1b:b4:82:87:25:2c:80:03:0e:99:ba:45:83:
d8:55:ed:8c:08:28:a8:30:b0:85:73:ba:3c:39:35:
94:5e:e1:fb:8a:bb:54:6c:be:be:a8:33:1b:a5:e2:
f4:04:8d:3a:9a:4a:65:48:e0:36:6e:33:de:87:1b:
07:34:07:73:f9:1e:bd:f6:9d:34:8e:3e:68:17:5b:
8c:eb:a8:ac:65:5b:53:34:05:86:25:f3:7c:05:e7:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B5:DA:4D:22:7D:28:50:AB:29:6D:76:03:30:85:40:15:20:E7:A0
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/ErXaTSJ9KFCrKW12AzCFQBUg56A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.226.194.0/23
103.229.168.0/23
185.145.70.0/23
185.223.176.0/22
185.237.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:84:eb:ec:75:a6:f8:e1:b0:93:c9:08:f9:0d:f0:3b:64:36:
57:a4:0e:76:33:6c:31:63:32:bc:45:37:52:23:08:9d:6a:c1:
a1:f4:d7:7e:3a:c2:fa:79:bb:23:5b:65:43:7e:77:4a:be:d5:
14:f8:30:47:b2:86:a9:41:30:6e:81:c8:cb:6b:fc:16:70:de:
26:73:ef:78:05:55:d3:a8:0b:e4:1c:ac:27:d2:9f:50:1b:65:
ed:58:24:b4:6f:32:25:7d:58:8f:4b:5a:68:1d:61:9e:f0:35:
a1:26:14:c6:ba:70:08:f8:ec:8c:c7:ba:d5:e5:4d:87:14:5c:
8d:ec:79:cf:ed:c5:e4:4a:d0:74:4b:ea:cb:17:2e:e3:04:35:
51:b9:96:58:15:4b:31:1d:d7:a7:e9:cd:8a:fd:ce:7d:27:22:
48:92:12:a7:a5:43:ed:6a:a5:c9:c7:e0:7d:97:11:ac:87:51:
7b:39:56:af:5b:69:a8:88:55:a3:c2:e0:4d:a6:35:c0:b2:ae:
ba:e8:e0:31:d0:4c:99:e2:a6:22:f5:b7:3a:5a:8d:2d:cd:df:
2d:ab:eb:a5:53:84:6c:a4:2d:af:9b:75:b3:7a:25:a6:f5:60:
ab:6d:06:56:fa:30:94:f5:6e:72:46:d5:b3:21:b3:bb:8b:3d:
cf:42:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-ams.rpki-client.org