Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/vGCV_KtVHcS_xBDLbySQW3n6Wo4.roa
File: vGCV_KtVHcS_xBDLbySQW3n6Wo4.roa (raw, json)
Hash identifier: x0Lx7z3jcRHRy/LigPbkzq6ixpXiIpUJlzL0JTH4Dfw=
Subject key identifier: BC:60:95:FC:AB:55:1D:C4:BF:C4:10:CB:6F:24:90:5B:79:FA:5A:8E
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 018252CD4F602910ED1B19285A75F820BC1A
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/vGCV_KtVHcS_xBDLbySQW3n6Wo4.roa
Signing time: Sun 31 Jul 2022 05:49:23 +0000
ROA not before: Sun 31 Jul 2022 05:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12975
IP address blocks: 103.215.4.0/22 maxlen: 22
103.196.120.0/22 maxlen: 22
103.206.108.0/22 maxlen: 22
45.127.179.0/24 maxlen: 24
45.127.178.0/24 maxlen: 24
45.127.177.0/24 maxlen: 24
45.127.176.0/22 maxlen: 22
45.127.176.0/24 maxlen: 24
213.244.121.0/24 maxlen: 24
139.190.176.0/20 maxlen: 20
213.244.71.0/24 maxlen: 24
213.244.70.0/23 maxlen: 24
213.244.70.0/24 maxlen: 24
83.244.78.0/24 maxlen: 24
213.244.76.0/24 maxlen: 24
83.244.75.0/24 maxlen: 24
83.244.74.0/24 maxlen: 24
83.244.73.0/24 maxlen: 24
213.244.73.0/24 maxlen: 24
213.244.72.0/21 maxlen: 24
213.244.72.0/24 maxlen: 24
83.244.79.0/24 maxlen: 24
24.42.64.0/18 maxlen: 18
103.53.4.0/22 maxlen: 24
103.53.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:52:cd:4f:60:29:10:ed:1b:19:28:5a:75:f8:20:bc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Jul 31 05:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc6095fcab551dc4bfc410cb6f24905b79fa5a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6f:46:88:8f:06:52:f2:2e:0c:a4:e1:ba:ca:
52:54:61:12:af:3b:ba:0c:ba:3f:fa:70:af:77:71:
75:e3:95:10:36:22:75:a6:eb:23:c9:e8:f6:02:12:
c5:43:3e:2b:c8:6a:91:b0:e2:33:15:ca:15:80:4f:
59:ce:5f:92:8b:88:9b:0e:43:23:00:25:25:0c:c1:
2c:78:c5:d9:63:cb:24:5b:2b:3d:0a:bf:fd:d1:f4:
2e:a3:5a:bc:c3:a1:ed:cd:00:5e:71:1e:af:7f:a7:
e2:36:da:18:7f:77:9e:c8:7e:19:c1:fd:b1:32:0b:
65:b5:e3:f2:df:33:6b:87:1c:67:3f:eb:9d:d2:0e:
fc:05:79:8f:1f:3e:c8:f0:02:75:24:0f:05:4f:3e:
98:2a:78:76:6c:7c:8c:72:09:f0:4d:c2:0d:50:2a:
74:08:02:86:0e:9f:0b:ea:b6:f4:7d:f4:56:52:7c:
39:52:62:7f:8f:ba:ca:c2:10:39:32:a2:3b:99:b5:
05:63:44:47:ae:71:1f:30:29:04:0d:92:d5:0c:9c:
26:2b:91:ae:92:68:f5:2b:17:0e:14:4f:0a:10:0b:
f1:5f:4e:8c:05:7c:f3:96:eb:e5:9a:c2:cd:c9:54:
c0:3d:8d:88:24:f9:5d:46:71:b3:e6:af:7f:c2:70:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:60:95:FC:AB:55:1D:C4:BF:C4:10:CB:6F:24:90:5B:79:FA:5A:8E
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/vGCV_KtVHcS_xBDLbySQW3n6Wo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.42.64.0/18
45.127.176.0/22
83.244.73.0-83.244.75.255
83.244.78.0/23
103.53.4.0/22
103.196.120.0/22
103.206.108.0/22
103.215.4.0/22
139.190.176.0/20
213.244.70.0-213.244.79.255
213.244.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:16:66:dd:76:4a:86:61:2f:99:35:b0:2a:58:cb:80:c5:c0:
d2:ce:6e:b1:09:46:60:d0:d6:c3:8f:41:a6:3a:92:1b:11:68:
08:7c:50:bc:a2:f3:f4:6c:ba:2b:ab:c0:97:2b:a5:3b:a6:43:
81:e6:14:e5:1c:95:44:14:d6:47:ed:5f:90:a1:cf:e3:25:18:
e8:7a:a2:17:1e:69:af:12:98:f9:96:54:25:45:81:26:d9:db:
8a:fd:78:cd:bc:01:25:91:64:79:3d:01:23:90:d5:0e:cb:e9:
d4:e5:17:92:95:13:4f:4a:c9:af:2f:90:c4:f8:9a:c1:e0:66:
3d:d4:a7:ad:45:bf:e9:8b:8e:d8:3c:7e:8c:1e:38:f5:3a:39:
52:6d:8e:e4:63:ae:e9:c3:37:28:ad:12:3a:71:4c:46:33:80:
ab:b0:04:c5:a6:73:cf:b1:cd:d4:54:0e:f4:7c:93:1e:de:5c:
e6:66:b6:f8:f9:4a:ee:73:e7:24:86:0d:b1:af:e2:77:dc:60:
17:fd:94:d5:3c:a2:4f:05:99:44:80:c3:f1:22:c9:06:c5:6b:
e4:e8:d7:dc:ca:a1:73:a7:31:0f:15:dd:66:6b:fe:93:17:57:
a3:ec:ed:7c:aa:d4:03:56:6a:37:02:91:c5:54:c2:19:1f:a9:
af:58:ef:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:10 2024 by rpki-client on console-ams.rpki-client.org