Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/lUEm9_HDZCH6xN1ybjQfi5WPNTQ.roa
File: lUEm9_HDZCH6xN1ybjQfi5WPNTQ.roa (raw, json)
Hash identifier: Lc9VbD9OUcIQuy6GmxNfrxhazs4KGIdMzvT4t66uO7U=
Subject key identifier: 95:41:26:F7:F1:C3:64:21:FA:C4:DD:72:6E:34:1F:8B:95:8F:35:34
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 0184B8EF243854E4E42E54AC457670E3C20F
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/lUEm9_HDZCH6xN1ybjQfi5WPNTQ.roa
Signing time: Sun 27 Nov 2022 11:53:10 +0000
ROA not before: Sun 27 Nov 2022 11:53:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 147001
IP address blocks: 103.76.85.0/24 maxlen: 24
103.76.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b8:ef:24:38:54:e4:e4:2e:54:ac:45:76:70:e3:c2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Nov 27 11:53:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=954126f7f1c36421fac4dd726e341f8b958f3534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:35:9a:50:98:8b:1c:b6:3c:c6:79:45:18:
53:ff:ff:97:a1:ac:2b:01:fd:e1:a9:50:2f:6e:af:
a5:05:db:f0:b6:d9:fc:9b:a7:a6:52:22:85:96:6a:
27:82:70:d6:30:bf:3d:58:2f:d8:04:f8:8f:33:b8:
f1:56:bc:13:83:5d:27:38:9e:5c:95:61:e8:c8:d4:
05:53:c7:46:63:71:ec:07:1e:6d:db:34:d5:0c:21:
24:79:b5:97:07:cd:5e:38:e1:94:45:32:51:f2:0c:
7c:de:10:d6:9b:b4:51:75:a4:d1:e7:ba:56:5a:68:
a5:85:bc:3a:4e:df:1d:f0:cd:f5:ef:94:75:af:26:
c8:90:9f:96:47:c4:d5:2b:9c:ce:d4:d9:96:c1:6d:
98:74:e6:6d:11:42:05:68:0d:f1:d8:4f:1e:7c:3b:
f2:c9:c8:0d:29:25:79:dd:9d:69:84:d1:74:b1:e6:
cb:d6:78:c1:f5:29:4b:c8:df:80:2e:f9:70:59:0e:
bd:fd:bf:5a:7c:3d:d6:3a:a3:af:59:84:13:27:d3:
1d:9e:09:dc:1e:96:41:37:e5:37:bd:ee:dd:f6:eb:
d0:b8:62:15:44:f5:1b:63:82:1d:ca:ab:e2:e3:b6:
7a:72:b2:61:c1:08:d7:3a:31:de:4c:00:71:f2:cb:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:41:26:F7:F1:C3:64:21:FA:C4:DD:72:6E:34:1F:8B:95:8F:35:34
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/lUEm9_HDZCH6xN1ybjQfi5WPNTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.85.0/24
103.76.87.0/24
Signature Algorithm: sha256WithRSAEncryption
38:61:36:7f:f0:6d:7e:0e:6a:68:ab:66:0c:e5:99:f8:69:f7:
81:c8:05:f6:51:00:26:5e:df:25:20:d3:8f:1b:d6:77:ef:98:
1c:05:d8:05:0e:82:98:5d:6d:4d:aa:ed:6f:51:d8:1c:27:11:
79:b3:75:76:32:9a:f9:c2:fb:2b:95:dd:ba:77:ec:0c:61:9c:
f1:b2:ce:96:5f:2f:9f:65:2b:10:82:e8:83:da:26:0b:57:40:
f2:81:e1:ad:cc:f0:8e:94:c7:b9:0e:6c:e3:0a:61:79:1b:45:
aa:c5:1d:61:83:3b:9f:a7:d5:b3:5c:74:b5:c0:c2:e4:94:bd:
f8:58:67:87:6e:47:aa:30:75:88:95:7b:38:d3:0a:82:ed:69:
24:11:b1:d8:3c:c8:af:41:70:e7:a8:8b:92:8e:d4:c1:eb:01:
f5:ef:8f:c0:fc:d5:3f:17:4a:ae:dd:7f:6e:bd:bd:38:f9:3f:
9a:a9:cb:ad:2d:b9:e1:d7:e4:72:b9:9c:9c:07:de:7f:0b:a0:
52:c9:81:90:86:5e:a3:be:0c:b5:d5:a5:f8:2f:21:f5:23:e7:
c3:e2:f5:5f:5e:66:fa:7f:6c:cd:ab:d1:99:dc:15:11:01:9e:
4c:bb:a5:e1:f2:a3:ff:c4:3d:47:3d:4f:6a:0b:fb:6c:fe:9e:
9f:55:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:33 2024 by rpki-client on console-fra.rpki-client.org