Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/k-3_JS-Pp1or1bzBV-2vOikl3Z4.roa
File: k-3_JS-Pp1or1bzBV-2vOikl3Z4.roa (raw, json)
Hash identifier: IzKgaa5ZQkRuEvinsCy+T45BH/yrK1/BhaCf8IPFuRQ=
Subject key identifier: 93:ED:FF:25:2F:8F:A7:5A:2B:D5:BC:C1:57:ED:AF:3A:29:25:DD:9E
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 02A56FE7
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/k-3_JS-Pp1or1bzBV-2vOikl3Z4.roa
Signing time: Mon 06 Jun 2022 09:45:20 +0000
ROA not before: Mon 06 Jun 2022 09:45:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60505
IP address blocks: 103.55.100.0/22 maxlen: 22
103.57.40.0/22 maxlen: 22
45.115.108.0/22 maxlen: 22
195.72.124.0/22 maxlen: 22
45.149.52.0/24 maxlen: 24
2a11:a500::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44396519 (0x2a56fe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Jun 6 09:45:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93edff252f8fa75a2bd5bcc157edaf3a2925dd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:a6:4e:5e:48:be:73:69:9a:f2:98:2a:1f:
28:ef:ea:be:df:7f:84:2a:d6:77:c5:52:b0:b4:04:
ec:7b:d0:84:07:20:6b:29:e7:82:89:7d:c8:6a:bf:
8c:44:7a:64:83:18:59:ec:db:00:6f:1c:ec:13:72:
cf:f1:f4:36:2a:c5:08:a7:21:16:2b:ac:66:0e:1f:
b7:d4:ae:cf:08:cf:fd:a8:5b:8f:89:1a:20:11:45:
fb:93:8e:cb:0c:3e:00:97:4d:04:5a:3e:ee:1c:2b:
63:06:c5:bd:37:f0:db:95:8b:11:32:b3:0b:e0:4f:
43:c2:ef:90:39:92:7f:c3:7a:1b:f9:c3:96:5b:aa:
9d:d8:33:5a:da:ed:c1:10:2a:89:71:7c:27:60:b6:
c1:be:5c:4e:af:22:07:84:a5:1f:b3:8f:1c:d9:b2:
cf:68:5d:5b:28:16:c1:29:eb:03:e8:f2:3b:b7:58:
a1:8b:8a:49:00:e0:26:97:05:88:96:f9:c6:68:fe:
f7:b5:fb:ed:bf:5f:05:dd:b0:44:0a:22:55:64:64:
21:e5:08:11:d8:93:84:c4:4b:a4:c6:04:e3:84:37:
f2:7d:87:30:2b:4b:95:81:0f:fa:c2:5f:7f:fa:26:
0e:bc:8d:61:ca:7a:7d:ee:93:21:90:47:fd:50:13:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:ED:FF:25:2F:8F:A7:5A:2B:D5:BC:C1:57:ED:AF:3A:29:25:DD:9E
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/k-3_JS-Pp1or1bzBV-2vOikl3Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.108.0/22
45.149.52.0/24
103.55.100.0/22
103.57.40.0/22
195.72.124.0/22
IPv6:
2a11:a500::/32
Signature Algorithm: sha256WithRSAEncryption
0e:bf:18:fd:93:8d:92:93:4f:75:85:2d:25:ea:ac:d4:9f:5d:
21:bb:f0:3c:76:76:63:6d:f3:5c:0d:40:af:c9:4f:ea:40:e2:
35:62:c5:76:8c:30:91:d8:06:2d:14:ee:e7:fe:8c:62:36:86:
f3:99:c5:1c:91:7a:32:1b:c7:e9:37:f7:bd:ca:ec:43:4a:e7:
c7:1e:1d:04:e0:05:5f:84:d6:8e:78:12:f5:b4:1c:ae:ce:7e:
ab:cf:b9:5b:67:11:ab:de:04:66:2e:3d:41:1b:ba:ac:0e:b9:
05:1c:20:8e:83:81:32:34:aa:5e:e6:20:b3:a9:ef:0c:76:2f:
1a:06:54:88:9c:1f:1b:0a:90:51:8b:2c:21:ea:0e:bf:64:a2:
44:58:07:55:76:37:97:85:10:a0:a9:e8:6c:b5:a5:6a:18:02:
b0:5d:6a:db:b9:e1:8a:70:9a:38:43:6e:8c:30:d6:d4:95:bf:
05:37:cd:6c:ae:8a:90:71:2f:21:0f:5b:d6:ea:77:79:b1:7d:
9e:cc:a1:f1:8e:59:3a:7a:05:c3:8a:2d:7e:a3:4b:94:3b:80:
ef:93:15:6d:ab:a7:51:6f:72:da:0b:a2:a7:ec:65:c4:4e:90:
1f:46:94:a2:75:6c:ef:03:f8:6f:0c:85:e4:fd:f6:f9:cc:09:
1b:b0:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:20 2024 by rpki-client on console-fra.rpki-client.org