Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/FEQJJaKeqCuVh0-_Pp77XAa1ytA.roa
File: FEQJJaKeqCuVh0-_Pp77XAa1ytA.roa (raw, json)
Hash identifier: iZG5apnnU1kyN6Lm2AxRWZNX/k33aHArrdfZx83s+J0=
Subject key identifier: 14:44:09:25:A2:9E:A8:2B:95:87:4F:BF:3E:9E:FB:5C:06:B5:CA:D0
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 087E26F7
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/FEQJJaKeqCuVh0-_Pp77XAa1ytA.roa
Signing time: Sat 01 Jan 2022 03:54:28 +0000
ROA not before: Sat 01 Jan 2022 03:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 103.226.193.0/24 maxlen: 24
185.237.212.0/22 maxlen: 22
185.145.68.0/22 maxlen: 22
103.229.171.0/24 maxlen: 24
103.229.170.0/24 maxlen: 24
103.229.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142485239 (0x87e26f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Jan 1 03:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14440925a29ea82b95874fbf3e9efb5c06b5cad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:cb:16:18:a1:8e:bf:8e:87:e0:74:32:72:
04:f5:ea:9d:a5:b4:2a:74:08:42:bf:cc:e3:fc:d2:
c5:91:e2:f9:4d:d7:fc:72:80:c9:c3:64:4e:77:b2:
0b:c2:cb:57:db:28:6d:37:6f:be:8c:77:6a:94:9f:
cf:a9:6b:de:b2:fa:34:d3:a6:60:3c:c9:e7:5f:0b:
f1:2a:54:7d:77:3c:7e:09:23:28:d8:f9:d2:59:81:
7f:42:4f:ba:73:2a:6e:8e:c8:36:40:ce:6b:bd:ee:
ab:b3:36:dd:a1:05:3d:5e:af:e2:7f:a5:4b:52:b6:
60:93:e5:21:27:55:fc:b2:c5:f4:4b:65:66:a7:46:
5f:80:c0:da:80:ed:cd:3a:de:bb:d4:2e:23:ad:c0:
40:52:69:64:95:02:0e:d5:2b:24:f0:d4:df:07:c6:
89:8c:17:54:b0:b1:3d:8e:49:57:70:f6:71:39:38:
16:c0:f3:38:d4:a4:82:2c:57:31:2c:9b:8e:4e:24:
0c:a5:6a:56:26:6b:84:8a:4b:e9:4e:56:1b:6d:91:
6a:3c:b9:29:c8:d5:bf:da:4f:fa:95:c9:04:39:8d:
72:06:88:bd:cd:a0:53:91:59:95:1e:22:40:dd:fd:
87:0a:66:a1:f4:62:59:c6:e5:c6:ef:eb:c3:5c:90:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:44:09:25:A2:9E:A8:2B:95:87:4F:BF:3E:9E:FB:5C:06:B5:CA:D0
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/FEQJJaKeqCuVh0-_Pp77XAa1ytA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.226.193.0/24
103.229.169.0-103.229.171.255
185.145.68.0/22
185.237.212.0/22
Signature Algorithm: sha256WithRSAEncryption
34:75:4d:ce:d4:cf:fe:7a:8d:a0:59:3b:0a:a5:45:32:5d:c4:
e1:c2:06:22:81:81:2f:7f:9d:a2:49:42:31:58:9d:81:7e:9c:
74:cc:d2:fa:41:77:ba:4f:e9:89:2b:9a:36:99:9b:52:a2:b0:
5e:98:7d:66:53:bb:21:f3:24:f6:7f:9e:8e:80:da:d0:0e:9a:
f6:04:29:6e:34:65:d3:d7:9d:f3:4e:93:12:75:3d:69:58:f3:
c0:74:6e:3d:51:d0:f2:e0:85:07:ae:88:b4:01:34:96:26:03:
ed:9a:11:7d:43:13:bc:da:a5:e8:e5:0e:a5:8b:6b:21:be:9e:
6e:14:a4:cb:61:05:25:52:23:62:b1:b8:85:39:05:31:7c:ee:
b7:a1:72:5c:4c:34:ff:23:ae:f4:46:56:27:e2:de:1b:5f:ef:
7e:a2:03:75:8b:7b:72:79:44:2e:b2:fd:24:13:89:2d:1f:d1:
75:b7:0b:b3:ff:f9:f9:1c:d2:2a:fa:3e:fa:ab:ff:33:4d:83:
c6:a6:93:be:6b:5f:e6:59:31:92:69:c8:4f:af:03:2f:9f:ca:
80:5b:24:d2:b5:b7:0b:03:ed:fb:eb:c1:e2:25:45:5b:8d:ed:
7e:e1:f1:4c:d5:7c:8a:ae:3f:a8:f4:ed:57:ce:8c:54:41:13:
93:2d:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-ams.rpki-client.org