Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/M5sREOTp_zX-rZwO1i_npe1_sLs.roa
File: M5sREOTp_zX-rZwO1i_npe1_sLs.roa (raw, json)
Hash identifier: W+z4EhqJiparpDLxTqk7JgudyiLKLHPF7U5U9TMaPY4=
Subject key identifier: 33:9B:11:10:E4:E9:FF:35:FE:AD:9C:0E:D6:2F:E7:A5:ED:7F:B0:BB
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01851A44C50F883F6CBC194DAD76602B17B5
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/M5sREOTp_zX-rZwO1i_npe1_sLs.roa
Signing time: Fri 16 Dec 2022 09:29:52 +0000
ROA not before: Fri 16 Dec 2022 09:29:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 103.76.131.0/24 maxlen: 24
45.151.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:44:c5:0f:88:3f:6c:bc:19:4d:ad:76:60:2b:17:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Dec 16 09:29:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=339b1110e4e9ff35fead9c0ed62fe7a5ed7fb0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7d:27:d7:3b:c8:64:2a:d8:a8:b2:a2:12:0a:
c0:83:a7:93:a0:c7:f1:15:2f:cd:40:58:3a:78:19:
01:67:05:fe:f4:b5:b5:3b:fa:ab:85:25:b0:94:0f:
be:33:b8:16:ae:a6:64:e2:9c:bd:7a:f2:85:c1:78:
91:02:a4:77:da:a1:60:4c:cc:d4:fb:0e:99:05:77:
cd:44:91:ff:54:b1:a5:cd:fc:75:3d:a6:5b:c0:85:
d2:1a:00:e3:21:46:49:cf:4b:1f:6a:9b:31:2e:f6:
ae:6c:ba:08:22:d9:85:68:72:27:1a:b2:c6:62:98:
56:77:a8:80:33:57:7a:9a:69:5b:e4:e7:37:aa:7a:
8f:4a:e1:f1:9a:12:f4:dc:8c:08:db:6a:ac:52:5d:
5b:9f:47:27:8c:9c:8e:dc:2f:3e:2a:1a:de:db:a3:
f0:a6:c2:b2:ad:b7:3d:c2:42:27:11:a3:11:ee:54:
64:90:d1:39:ee:0f:69:53:a4:f3:16:cf:0d:1c:6e:
0d:d7:22:12:90:10:93:6a:5e:d3:c4:49:28:ba:6e:
8a:66:b2:80:85:81:de:26:e1:e3:c0:26:65:3b:bf:
b5:20:be:69:e0:c5:16:f1:ff:b3:07:33:29:ed:1c:
13:f3:47:ec:a0:4e:fd:14:83:24:a9:62:31:8c:53:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9B:11:10:E4:E9:FF:35:FE:AD:9C:0E:D6:2F:E7:A5:ED:7F:B0:BB
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/M5sREOTp_zX-rZwO1i_npe1_sLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.69.0/24
103.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
76:1d:02:3f:5c:ff:62:ee:16:62:c6:d5:32:22:93:42:0d:e2:
9c:8c:31:11:ce:b4:2c:87:f2:ba:d5:7f:0d:32:b3:73:60:35:
62:f0:55:7b:6f:c5:96:4d:2a:d2:40:cd:ae:da:e3:cb:9f:91:
f2:33:c2:5a:52:5d:60:41:56:67:03:63:bb:4d:81:ed:18:ff:
ba:38:3f:a9:d8:25:ae:88:5f:80:ba:16:27:a4:f3:a1:ba:46:
b2:5a:9e:b6:02:96:38:3b:80:22:6a:df:a5:43:a1:79:31:39:
8c:fb:6a:a3:f8:ed:21:ef:95:13:31:6f:a9:aa:85:ce:2b:ec:
9f:c9:cd:f6:1a:56:1f:3f:1f:30:42:6b:3a:71:7a:c9:d3:a7:
63:b4:b3:9d:c8:90:b7:50:e6:7c:c6:22:c4:7d:49:c8:dd:fb:
6f:cf:01:f6:64:3d:78:44:64:e2:4b:cf:3d:97:d4:f4:bc:e0:
8e:0e:2a:2c:4c:bb:f5:bf:3e:cd:a4:3e:99:55:00:f6:67:76:
1a:88:53:69:46:7d:dd:85:76:3b:b5:dd:55:11:a0:0f:4d:46:
22:d1:8b:6b:e6:d0:2e:c1:9d:a7:a7:a7:71:d9:a8:28:59:7e:
81:c8:df:01:e4:7d:73:97:32:17:eb:37:d2:c7:ce:be:eb:04:
18:7c:d3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:37 2024 by rpki-client on console-ams.rpki-client.org