Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/mLeU4AOZ07o2Q--uiKAKBuTWdJs.roa
File: mLeU4AOZ07o2Q--uiKAKBuTWdJs.roa (raw, json)
Hash identifier: NibqSRimceYW0sU/A0cfWD8h6US/TDLpFBTGeQ9jH8k=
Subject key identifier: 98:B7:94:E0:03:99:D3:BA:36:43:EF:AE:88:A0:0A:06:E4:D6:74:9B
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 099EE9CF
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/mLeU4AOZ07o2Q--uiKAKBuTWdJs.roa
Signing time: Thu 28 Apr 2022 12:39:17 +0000
ROA not before: Thu 28 Apr 2022 12:39:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 103.226.193.0/24 maxlen: 24
185.237.212.0/22 maxlen: 24
185.237.215.0/24 maxlen: 24
185.145.68.0/22 maxlen: 22
103.229.171.0/24 maxlen: 24
103.229.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161409487 (0x99ee9cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Apr 28 12:39:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98b794e00399d3ba3643efae88a00a06e4d6749b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:3b:14:19:b4:13:bb:cb:85:5a:7d:12:b6:
54:ae:eb:f0:78:97:7b:b9:ee:e6:31:61:3d:bb:10:
5a:d4:55:63:42:0d:5c:44:aa:67:01:cc:12:25:1e:
f3:37:32:07:da:46:fa:b9:30:26:91:b2:fd:0f:3e:
a8:f6:b9:4e:f3:08:64:c7:ec:51:73:07:a2:f8:d4:
7a:94:af:c0:5d:17:4f:4c:21:7f:4b:4c:bc:a7:73:
5b:4f:37:b0:d8:a9:d7:6e:82:fd:80:65:2f:99:85:
a6:14:49:6b:fb:58:c0:8c:38:ef:c8:e2:b5:34:19:
3a:78:07:20:94:c0:ff:19:9f:6d:d3:39:08:f5:d7:
b7:eb:87:c9:b4:79:30:6d:1a:53:08:13:39:e1:7b:
a6:6c:6b:b1:a0:e9:70:ec:6d:32:08:08:92:28:79:
18:dc:dd:79:89:dc:11:2b:ce:9f:3a:5f:02:24:23:
e1:d2:f3:89:22:1d:22:0f:c5:58:fc:e7:a1:9e:d1:
68:b9:70:ae:a4:4f:06:e3:8b:46:16:7c:9e:44:25:
47:04:14:21:3c:41:8e:b0:e6:45:34:31:c0:92:7a:
8b:f5:ae:f2:2d:55:94:10:5a:e3:b0:2c:d6:12:68:
52:69:37:7e:3f:66:b4:5c:80:be:8c:28:bf:e0:85:
c7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B7:94:E0:03:99:D3:BA:36:43:EF:AE:88:A0:0A:06:E4:D6:74:9B
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/mLeU4AOZ07o2Q--uiKAKBuTWdJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.226.193.0/24
103.229.170.0/23
185.145.68.0/22
185.237.212.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:f7:94:be:6e:8e:01:8c:cb:ad:7c:6c:2b:9b:7e:a5:34:b4:
c0:dd:e6:89:66:68:1f:90:8e:99:f6:b1:59:ce:ab:b3:7c:93:
1e:f0:71:ec:a8:13:49:0d:6e:d0:23:a1:87:49:13:dc:e0:92:
b5:28:98:87:9e:aa:bf:b9:61:fe:e1:2d:0e:e1:1e:4b:dc:99:
28:cf:fc:c9:e9:b2:e9:dd:b9:7a:fa:f3:5e:88:ef:12:05:80:
25:04:03:9e:9f:49:32:fa:00:96:51:ff:ba:8b:46:2a:5e:c1:
04:98:0c:2d:4b:4d:2e:43:73:6c:66:b4:46:6d:19:4b:47:97:
c3:03:d2:04:18:54:9d:8e:ba:c3:fe:5e:4c:3e:8e:1d:02:d3:
f7:2e:48:19:1f:94:d0:79:8e:90:71:b4:af:cc:5b:6d:95:64:
5a:10:55:37:73:97:9a:54:40:67:71:94:14:93:ba:b0:85:c7:
08:7e:1d:ad:6b:19:86:dc:e2:f9:46:82:6c:67:58:26:cd:4e:
a6:f9:90:76:92:7e:40:0b:5e:55:1e:dc:c7:7e:f4:db:d6:7d:
03:ce:5f:11:af:fa:ee:62:67:9c:43:b4:8f:bd:8b:2a:62:72:
bb:89:dc:d2:e4:93:00:72:18:93:8a:81:b4:37:97:81:5d:17:
fc:9b:45:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-ams.rpki-client.org