Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/4USutU6gt39pYKbY89Df7UAtTw8.roa
File: 4USutU6gt39pYKbY89Df7UAtTw8.roa (raw, json)
Hash identifier: kdUsE7KVh5gk5jxzzjzx4ynT+4QEnCcppQ6bKiAYApE=
Subject key identifier: E1:44:AE:B5:4E:A0:B7:7F:69:60:A6:D8:F3:D0:DF:ED:40:2D:4F:0F
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 013FE262
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/4USutU6gt39pYKbY89Df7UAtTw8.roa
Signing time: Sat 01 Jan 2022 08:02:24 +0000
ROA not before: Sat 01 Jan 2022 08:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60505
IP address blocks: 103.55.100.0/22 maxlen: 22
45.115.108.0/22 maxlen: 22
195.72.124.0/22 maxlen: 22
45.149.52.0/24 maxlen: 24
2a11:a500::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20963938 (0x13fe262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Jan 1 08:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e144aeb54ea0b77f6960a6d8f3d0dfed402d4f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:7e:7a:8a:58:09:71:57:41:94:b5:a0:f4:
45:c9:8e:a0:15:05:1d:ce:6e:5d:be:2f:d8:5d:c7:
05:99:b9:d2:10:24:10:99:3b:a1:a6:2b:e8:dd:5c:
10:d6:1a:ff:b7:ed:36:77:74:81:3d:07:0d:63:51:
5c:e8:68:fc:64:a2:ea:52:0b:41:0e:e0:7b:ea:d8:
4c:a0:90:c7:56:87:d2:61:9f:73:4d:8b:b9:89:47:
58:46:4e:cf:27:0e:80:0c:a9:93:fc:f7:cf:8e:13:
c9:b9:1d:a6:85:1a:a7:87:e4:92:fc:42:7d:04:0b:
3f:a5:19:f1:79:35:75:9f:5b:a7:45:90:61:91:27:
43:8e:b7:f9:62:84:51:e3:84:39:e9:bd:5c:90:9d:
c8:bb:8b:93:51:d4:35:59:e6:2f:c7:5f:19:61:d6:
85:f8:37:93:1e:ca:2e:6a:05:8f:78:b5:2f:e2:7c:
54:08:f1:63:ce:58:ae:ea:9f:96:c4:8a:34:a0:d6:
36:c5:83:67:6a:d6:51:dd:f3:76:2f:52:7b:8e:4d:
61:86:8b:7e:98:4b:e9:0c:eb:93:9f:f1:51:c6:bd:
10:95:e7:65:30:6a:77:f7:87:f8:98:2e:ce:5e:ce:
98:d9:64:c4:d4:69:69:1b:5c:8e:4c:18:f1:3a:cd:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:44:AE:B5:4E:A0:B7:7F:69:60:A6:D8:F3:D0:DF:ED:40:2D:4F:0F
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/4USutU6gt39pYKbY89Df7UAtTw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.108.0/22
45.149.52.0/24
103.55.100.0/22
195.72.124.0/22
IPv6:
2a11:a500::/32
Signature Algorithm: sha256WithRSAEncryption
7e:67:86:b3:88:8c:08:12:eb:93:39:76:cc:af:2a:4c:5c:21:
87:79:89:55:47:96:37:0a:c0:40:82:8a:67:f0:13:a7:16:43:
aa:3a:3c:49:04:96:85:c8:ce:c6:68:75:6e:08:0b:b8:77:d7:
33:ff:94:e3:ed:d7:49:fa:ca:3d:f9:98:15:a0:16:4d:03:35:
e0:bc:8e:36:9b:d5:7b:46:63:b0:1f:35:33:ea:72:ad:fa:0d:
fb:4b:0f:3a:b4:16:86:54:9d:10:de:d5:5c:65:d3:0c:c3:76:
9f:51:c1:c9:14:a3:3f:47:9e:df:cb:9d:73:89:3b:d4:04:75:
87:b9:7e:86:cc:3f:fa:56:d0:5c:7f:ef:94:15:f9:38:a9:05:
73:b2:23:c7:03:99:b6:2f:4c:77:83:92:01:10:97:50:07:aa:
db:9a:0d:ec:05:9b:ca:62:60:67:db:6e:f8:c8:03:ae:87:19:
88:c2:c1:ca:34:74:dc:3e:16:97:06:c3:63:62:25:7c:16:d2:
07:7a:d5:5c:ae:9f:ce:b6:cf:78:c4:2a:23:64:28:03:7d:fe:
fd:e3:06:95:c1:16:b7:67:65:51:69:48:ab:f9:98:db:7b:5d:
aa:7c:85:37:13:9b:95:a4:13:d5:f1:6a:e3:34:5d:57:97:95:
41:80:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:20 2024 by rpki-client on console-fra.rpki-client.org