Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/wDWYNx4USdP9Us66JEdLpu8AAgM.roa
File: wDWYNx4USdP9Us66JEdLpu8AAgM.roa (raw, json)
Hash identifier: SGBSjoEVS1T2fnmZ/6NpM3vS7yKhP1hSnn0OUnqgAQU=
Subject key identifier: C0:35:98:37:1E:14:49:D3:FD:52:CE:BA:24:47:4B:A6:EF:00:02:03
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 0976A627
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/wDWYNx4USdP9Us66JEdLpu8AAgM.roa
Signing time: Wed 13 Apr 2022 12:03:18 +0000
ROA not before: Wed 13 Apr 2022 12:03:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 103.226.193.0/24 maxlen: 24
185.237.212.0/22 maxlen: 22
185.145.68.0/22 maxlen: 22
103.229.171.0/24 maxlen: 24
103.229.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158770727 (0x976a627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Apr 13 12:03:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c03598371e1449d3fd52ceba24474ba6ef000203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:53:a4:56:59:8f:15:a5:e7:ab:d5:ab:a3:
a3:99:c4:c5:72:5c:6e:44:1b:2a:1f:22:09:fd:b7:
67:92:b1:2e:54:59:10:30:f1:66:2e:33:31:b4:e3:
77:81:31:3f:0a:84:22:04:cb:38:5e:39:16:80:ea:
ee:82:15:df:5f:f3:69:2b:2a:7e:2d:08:8b:ca:a6:
03:ab:77:67:84:44:a1:21:5c:87:61:fe:db:86:e5:
b5:68:b0:ee:c6:92:37:9a:ad:f9:f3:9a:9e:13:a3:
fc:7b:ff:ad:25:60:c8:d5:0c:f0:0b:6c:ec:f7:f1:
e1:64:38:39:ad:9c:97:9e:84:99:b1:bb:ac:eb:14:
76:73:f5:46:da:b6:58:da:b6:31:1f:db:99:0d:ca:
36:61:9f:89:0e:6f:55:7d:b2:e2:1d:a9:23:be:33:
e2:09:fe:f8:aa:51:9a:41:c2:77:69:e2:41:fb:0a:
79:be:48:1d:7d:23:c8:4a:0f:ec:bf:0a:66:59:58:
b2:b0:b6:bc:47:9a:9c:5a:e2:48:f0:5b:34:4d:18:
f2:ca:89:63:9e:7c:b5:30:87:01:16:3e:28:be:98:
77:a3:1a:fc:bf:ae:f6:a1:86:5b:ee:6d:eb:c4:e4:
a0:68:78:75:26:a8:07:e3:19:8e:cd:df:61:ad:81:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:35:98:37:1E:14:49:D3:FD:52:CE:BA:24:47:4B:A6:EF:00:02:03
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/wDWYNx4USdP9Us66JEdLpu8AAgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.226.193.0/24
103.229.170.0/23
185.145.68.0/22
185.237.212.0/22
Signature Algorithm: sha256WithRSAEncryption
90:e1:89:59:f8:13:65:a6:2d:a2:5d:09:6c:c6:ce:40:d4:c9:
b7:69:68:9a:42:9c:53:1a:78:02:7e:c4:e1:8a:e9:fc:82:8f:
ff:71:36:cf:69:b6:a0:3d:82:14:e5:98:1e:88:00:7c:7f:20:
84:7c:08:a5:aa:32:11:e1:7f:a5:d5:eb:30:6c:38:e2:af:79:
3a:3f:d9:34:40:7a:0e:05:ba:e2:47:fe:f3:22:95:8a:84:fc:
c5:bd:fe:52:2a:6b:3f:78:50:d9:a4:b4:77:d5:3f:79:5d:10:
33:13:2a:56:fe:41:21:b6:bb:78:7d:93:14:a3:ce:21:4a:46:
6b:bb:7d:af:4b:90:6a:2a:a0:4e:2d:14:04:1c:2e:bc:59:d4:
f9:f1:a3:1d:59:9e:b3:53:ae:ec:a9:a4:de:98:b0:ad:1e:72:
05:d2:7d:93:92:44:2b:1a:4d:e9:23:da:5d:cd:8e:d5:6d:56:
f2:0c:41:14:3f:77:44:86:55:d9:0f:e1:98:34:dd:f7:64:42:
26:a9:19:32:f0:f5:b3:c0:44:78:4c:3f:03:ea:09:b2:63:af:
c8:68:7b:3a:a3:da:34:7a:77:a9:08:90:a6:bc:71:b3:38:ba:
9a:fe:a6:f7:6a:80:67:8f:f6:8f:00:89:f0:31:5a:ed:f9:84:
48:ff:6f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-ams.rpki-client.org