Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/F4dT52OdjOGpQZokEhidFPjPVao.roa
File: F4dT52OdjOGpQZokEhidFPjPVao.roa (raw, json)
Hash identifier: pHyGMRWKtoLjBD4aXxkXrY4yYWQFD/Q7bwyw7vkfQ8Y=
Subject key identifier: 17:87:53:E7:63:9D:8C:E1:A9:41:9A:24:12:18:9D:14:F8:CF:55:AA
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 02AAC926
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/F4dT52OdjOGpQZokEhidFPjPVao.roa
Signing time: Wed 08 Jun 2022 13:11:02 +0000
ROA not before: Wed 08 Jun 2022 13:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59521
IP address blocks: 103.55.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44747046 (0x2aac926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Jun 8 13:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=178753e7639d8ce1a9419a2412189d14f8cf55aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:c5:cf:fb:f9:fd:df:50:cd:a0:8d:a7:1d:
ef:95:77:a1:1e:23:09:2d:00:cc:ea:c3:ae:06:58:
08:b9:b7:f2:ac:33:78:cc:ba:12:b9:55:4b:6d:b6:
f0:f5:99:f1:7d:03:58:7b:55:f0:9f:92:22:6a:7e:
11:9c:94:26:ea:44:94:c3:60:19:87:40:7f:c7:0e:
64:18:68:60:66:ac:f7:db:8b:a6:15:84:37:3c:d6:
66:40:f1:53:72:7a:31:da:1e:32:84:4a:00:c5:f7:
c2:4e:9c:ed:62:52:73:5e:d6:9a:5b:7e:35:e8:34:
82:ae:2e:09:7a:97:35:c5:fb:1f:85:50:b3:91:19:
c0:59:e9:06:a9:a9:7e:70:a6:b9:e1:e7:40:b6:13:
05:16:20:c8:49:da:fa:1a:07:57:59:55:dc:82:e7:
3e:63:cc:3f:d6:62:7c:f2:f5:84:f5:e6:9b:e6:85:
fe:cb:4c:3b:e4:76:83:49:4d:a0:4b:64:b6:94:ab:
dd:17:1c:67:c9:d3:49:3c:61:f2:77:6d:4d:de:88:
23:03:3d:d3:21:db:a6:4c:3c:5e:cf:1c:8e:a5:ca:
a8:94:97:ef:0b:3a:a5:c6:69:27:7b:a4:0c:6e:57:
11:77:41:0d:6e:5b:14:38:4d:a6:6c:08:51:c2:c5:
1f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:87:53:E7:63:9D:8C:E1:A9:41:9A:24:12:18:9D:14:F8:CF:55:AA
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/F4dT52OdjOGpQZokEhidFPjPVao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.100.0/22
Signature Algorithm: sha256WithRSAEncryption
79:9e:a2:11:3a:ab:5b:08:51:1f:0a:9c:45:cc:8b:85:99:7f:
9d:67:45:17:4b:3c:a9:ca:f5:dd:4e:bf:26:e9:39:95:76:d1:
4f:6b:62:e2:e4:eb:b8:6b:ed:3f:33:a3:9e:1b:22:6a:a7:10:
a7:d9:e8:94:f8:82:78:8d:7d:34:b4:55:48:57:85:3b:4b:50:
79:1f:47:50:41:38:47:a4:32:6b:21:5c:03:4e:d9:c3:81:53:
99:e5:c9:6c:ce:58:2a:b1:58:b6:1d:6a:b6:5b:10:18:d5:5f:
4c:37:01:b7:f6:60:8c:6c:dc:de:ac:1f:91:19:a0:06:57:e5:
1f:66:1f:15:c2:56:4b:fb:4d:29:72:76:f3:5d:98:03:18:21:
2c:36:a3:ef:6f:4d:38:6b:84:5d:0f:82:70:20:ee:11:7f:4f:
78:e0:cc:0d:2a:7a:ed:2c:92:8a:1d:06:10:e1:f0:bd:96:09:
6c:d2:80:3a:ff:8c:f7:16:46:d2:8b:78:3b:57:ad:94:06:9e:
93:05:70:0b:be:8c:ef:d2:3d:5f:89:4d:7b:1a:e0:05:fc:0c:
09:fe:6d:b0:cb:97:25:7f:0c:2e:4a:cd:0a:fd:3b:68:aa:12:
3f:4c:4a:a7:cb:4c:00:2f:d3:4b:b2:b2:e8:f5:14:5a:70:60:
35:dd:18:6c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAqrJJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Yzc2NzA2OThjZmFlZjI2NDdmYmM5YTA2ZjczODA4NTZlMmIzMDI3MB4XDTIyMDYw
ODEzMTEwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTc4NzUzZTc2Mzlk
OGNlMWE5NDE5YTI0MTIxODlkMTRmOGNmNTVhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMVjxc/7+f3fUM2gjacd75V3oR4jCS0AzOrDrgZYCLm38qwz
eMy6ErlVS2228PWZ8X0DWHtV8J+SImp+EZyUJupElMNgGYdAf8cOZBhoYGas99uL
phWENzzWZkDxU3J6MdoeMoRKAMX3wk6c7WJSc17Wmlt+Neg0gq4uCXqXNcX7H4VQ
s5EZwFnpBqmpfnCmueHnQLYTBRYgyEna+hoHV1lV3ILnPmPMP9ZifPL1hPXmm+aF
/stMO+R2g0lNoEtktpSr3RccZ8nTSTxh8ndtTd6IIwM90yHbpkw8Xs8cjqXKqJSX
7ws6pcZpJ3ukDG5XEXdBDW5bFDhNpmwIUcLFH4sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQXh1PnY52M4alBmiQSGJ0U+M9VqjAfBgNVHSMEGDAWgBSsdnBpjPrvJkf7
yaBvc4CFbiswJzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JIWndhWXo2N3laSC04bWdiM09BaFc0ck1DYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDQvNjhmNjUxLWYzYTYtNDI1Mi05ZmFmLTllMDQ0MDkyYjgyNi8x
L0Y0ZFQ1Mk9kak9HcFFab2tFaGlkRlBqUFZhby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQv
NjhmNjUxLWYzYTYtNDI1Mi05ZmFmLTllMDQ0MDkyYjgyNi8xL3JIWndhWXo2N3la
SC04bWdiM09BaFc0ck1DYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmc3ZDANBgkqhkiG9w0BAQsFAAOC
AQEAeZ6iETqrWwhRHwqcRcyLhZl/nWdFF0s8qcr13U6/Juk5lXbRT2ti4uTruGvt
PzOjnhsiaqcQp9nolPiCeI19NLRVSFeFO0tQeR9HUEE4R6QyayFcA07Zw4FTmeXJ
bM5YKrFYth1qtlsQGNVfTDcBt/ZgjGzc3qwfkRmgBlflH2YfFcJWS/tNKXJ2812Y
AxghLDaj729NOGuEXQ+CcCDuEX9PeODMDSp67SySih0GEOHwvZYJbNKAOv+M9xZG
0ot4O1etlAaekwVwC76M79I9X4lNexrgBfwMCf5tsMuXJX8MLkrNCv07aKoSP0xK
p8tMAC/TS7Ky6PUUWnBgNd0YbA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:17 2025 by rpki-client