Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/XJ9Tr9rcokDVRD6fxaEOpM4SzJc.roa
File: XJ9Tr9rcokDVRD6fxaEOpM4SzJc.roa (raw, json)
Hash identifier: +1hQZI8/J+Up9Iuly8GKCm2m2AJbJEUbmtUmtvWdA1A=
Subject key identifier: 5C:9F:53:AF:DA:DC:A2:40:D5:44:3E:9F:C5:A1:0E:A4:CE:12:CC:97
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 0185718C2D2272712246A31863C15A5BC9A2
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/XJ9Tr9rcokDVRD6fxaEOpM4SzJc.roa
Signing time: Mon 02 Jan 2023 08:14:49 +0000
ROA not before: Mon 02 Jan 2023 08:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59521
IP address blocks: 103.55.100.0/22 maxlen: 22
103.57.40.0/22 maxlen: 22
195.72.124.0/22 maxlen: 22
45.115.108.0/22 maxlen: 22
45.149.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:2d:22:72:71:22:46:a3:18:63:c1:5a:5b:c9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Jan 2 08:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c9f53afdadca240d5443e9fc5a10ea4ce12cc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:c5:8a:bf:05:79:c9:b1:66:fb:4f:cb:a2:
c5:c9:46:f2:89:b8:1a:91:f7:9b:f0:05:68:37:68:
68:19:cc:c1:61:80:c6:ea:bb:f6:fc:78:2e:96:80:
f0:18:ce:d0:de:f8:1e:e7:37:98:10:28:e9:44:6f:
14:f3:7f:33:28:65:29:dc:7a:ca:46:8c:93:1a:39:
37:65:55:6b:e0:0f:be:6b:e0:83:bf:2f:93:4c:4b:
f3:09:22:b2:07:62:e9:98:64:e2:de:a5:e4:c9:41:
fc:bf:02:66:e2:bc:64:93:70:60:c8:b8:eb:ef:d3:
03:1a:8e:93:39:f2:7d:7e:ad:28:8c:3a:11:42:33:
32:88:2b:91:3e:44:e1:3b:9a:77:8e:70:e1:4d:9b:
7c:b8:fa:c0:ba:41:53:cd:94:c1:f0:55:3e:87:a7:
47:ce:91:83:44:08:86:3d:35:1d:d6:dc:41:f2:9b:
36:d8:9e:e6:6b:1f:8c:9e:a2:cb:16:19:3d:fd:c3:
99:33:1e:28:32:0f:66:6f:18:2a:d7:c5:0d:c6:83:
ab:54:0c:4a:45:d2:90:18:a4:09:fc:36:6a:3c:4c:
b7:dd:aa:ce:b3:c3:58:0f:6e:85:71:ed:04:19:09:
f1:a0:91:c2:90:c4:81:e3:a3:27:6a:8e:dc:26:9f:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9F:53:AF:DA:DC:A2:40:D5:44:3E:9F:C5:A1:0E:A4:CE:12:CC:97
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/XJ9Tr9rcokDVRD6fxaEOpM4SzJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.108.0/22
45.149.52.0/24
103.55.100.0/22
103.57.40.0/22
195.72.124.0/22
Signature Algorithm: sha256WithRSAEncryption
31:0b:31:ba:26:2b:e5:f2:77:98:87:9e:1b:c2:b0:e2:a9:8b:
2f:76:dc:de:3b:a8:79:d3:33:83:84:1d:08:94:6f:3a:e9:89:
be:a1:81:1c:c4:8f:46:4c:57:4d:aa:99:84:8d:d1:66:2d:10:
77:af:ee:6a:c9:22:de:a4:e6:51:19:32:27:40:e7:37:0c:9c:
f9:f5:33:ed:b0:dd:99:70:df:3d:da:a4:8b:a6:a8:f0:2b:d3:
b1:75:54:35:8a:dc:a9:8b:43:de:9e:10:0b:2f:46:61:ec:54:
9d:22:c2:e4:b6:c7:fb:1f:96:64:64:59:41:16:aa:1f:3f:d9:
57:1f:4c:f0:af:14:c0:4c:33:f9:20:05:16:21:8e:c4:9a:fd:
a3:71:91:d8:44:ee:1e:63:f7:e0:83:e1:30:6d:2d:cc:b1:0d:
8f:e5:3f:81:d6:bb:8e:2e:fe:32:0c:26:10:cf:f3:4d:fb:2a:
14:97:6b:bf:91:ac:b8:6d:57:44:ef:18:e9:f4:30:74:c7:e8:
b8:84:5c:cf:86:68:6c:29:3b:ef:a5:75:63:ee:c2:cf:3e:2f:
a7:02:07:2d:8c:39:b2:3a:7a:93:0b:e6:c2:9b:fe:1c:8d:c3:
54:b3:8f:8a:07:72:52:12:17:0b:66:91:b3:eb:ed:68:14:fd:
2f:a9:12:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:00 2025 by rpki-client