Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/8yqtidCNJ8p7VmtLQi6Q_kp3b4M.roa
File: 8yqtidCNJ8p7VmtLQi6Q_kp3b4M.roa (raw, json)
Hash identifier: reJt2w8M1CdSbiZV0LW51KyTxbP2x+fbgM2bYBbPP94=
Subject key identifier: F3:2A:AD:89:D0:8D:27:CA:7B:56:6B:4B:42:2E:90:FE:4A:77:6F:83
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01845CF9C6E44882758DDE9166097DD891D5
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/8yqtidCNJ8p7VmtLQi6Q_kp3b4M.roa
Signing time: Wed 09 Nov 2022 15:19:43 +0000
ROA not before: Wed 09 Nov 2022 15:19:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 103.76.130.0/24 maxlen: 24
185.173.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:f9:c6:e4:48:82:75:8d:de:91:66:09:7d:d8:91:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Nov 9 15:19:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f32aad89d08d27ca7b566b4b422e90fe4a776f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:c7:ac:e1:40:bc:b1:11:7f:c2:2f:81:af:
64:a9:cd:03:3e:85:98:b6:86:47:47:2d:1a:fb:da:
46:4d:ed:4f:a4:19:4d:66:e7:89:4b:c8:b5:ec:4f:
01:4d:f8:0f:f7:86:4e:87:11:40:c0:fa:b7:61:c0:
27:87:ad:b4:10:be:ef:57:a5:8e:a5:43:1f:cc:e5:
46:c6:f3:c4:cd:56:d0:9b:79:10:56:34:6f:c8:2d:
c0:25:f7:be:52:65:86:73:a1:e1:b8:92:6a:c3:9d:
f2:77:76:b0:6f:d8:58:d6:8e:a7:66:4e:de:52:df:
b8:87:2f:36:b9:34:71:82:87:5f:11:56:c6:e8:51:
82:94:7e:e6:bc:3d:0f:b3:dc:e0:33:9a:ae:bf:d5:
f4:f3:3a:12:7c:25:97:7f:6a:56:23:e6:34:a5:6f:
bf:45:f7:47:98:65:aa:ec:31:95:72:6e:c7:1d:c2:
3e:3b:6f:39:d9:26:99:2e:84:dc:11:6c:d3:72:23:
d9:f1:11:5d:4e:ac:ba:10:89:76:3a:1e:df:53:ae:
17:f1:7c:5b:10:ef:98:28:93:8f:94:a3:cb:3a:ad:
29:0d:65:b7:86:d9:fb:5e:9a:78:4b:8f:06:89:d0:
be:c9:92:fe:e3:22:51:55:f3:a0:88:35:10:34:0b:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2A:AD:89:D0:8D:27:CA:7B:56:6B:4B:42:2E:90:FE:4A:77:6F:83
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/8yqtidCNJ8p7VmtLQi6Q_kp3b4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.130.0/24
185.173.146.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d8:11:43:62:10:ce:cd:09:0a:45:ff:5b:76:0d:10:85:b6:
89:88:6e:69:5c:42:3f:5b:cf:79:03:8e:fb:89:b7:c1:0d:a9:
cd:e9:12:ab:44:e9:0e:2b:86:f4:c7:80:45:68:58:11:87:21:
6f:be:a8:41:50:65:c9:5a:b8:4a:2c:e6:7a:1d:9e:20:1d:27:
ba:3e:d2:38:8b:6c:91:ce:3d:39:1e:e9:2e:8c:ad:07:14:09:
45:e5:21:ff:7b:fd:7c:7c:75:3b:12:33:e2:cc:f8:8f:a9:96:
2e:7d:9d:f4:33:82:11:de:44:b7:5f:30:06:79:2b:be:27:ef:
ba:9a:ae:bf:38:9b:f5:e9:17:99:6a:be:6d:08:7d:b9:81:a6:
e5:04:01:d5:2a:4e:fd:08:0c:07:08:3d:32:6a:30:d3:d8:e6:
82:08:bd:81:d2:f7:23:8e:a9:9f:4c:9d:50:aa:11:30:77:38:
6b:03:d0:5d:b4:b4:4f:ae:28:f1:d2:27:8d:c1:d5:c7:b7:c3:
62:78:97:28:d7:c8:dd:c7:11:73:67:dc:92:ba:28:b9:dd:f9:
41:77:98:11:d6:f8:8c:fc:34:ec:e1:c2:d3:a4:47:32:c4:1b:
06:78:dd:70:b4:31:49:d8:35:e6:e3:b1:1f:b8:87:2f:42:09:
58:12:70:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:37 2024 by rpki-client on console-ams.rpki-client.org