Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/RCummXHpBaVF-LfdTIkRwKi5WVM.roa
File: RCummXHpBaVF-LfdTIkRwKi5WVM.roa (raw, json)
Hash identifier: irdpgXnvyKo1Eey5lObF2gubFiFAz/Fu51m2s3td+Y8=
Subject key identifier: 44:2B:A6:99:71:E9:05:A5:45:F8:B7:DD:4C:89:11:C0:A8:B9:59:53
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0185391450D25DB143CDDC300573DC295B17
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/RCummXHpBaVF-LfdTIkRwKi5WVM.roa
Signing time: Thu 22 Dec 2022 09:05:10 +0000
ROA not before: Thu 22 Dec 2022 09:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 103.75.68.0/24 maxlen: 24
103.75.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:14:50:d2:5d:b1:43:cd:dc:30:05:73:dc:29:5b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Dec 22 09:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=442ba69971e905a545f8b7dd4c8911c0a8b95953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:f8:c0:fe:c3:02:ae:8f:85:eb:37:64:85:
3a:a6:3f:04:8f:28:8e:1e:61:c3:49:38:8e:73:e1:
2f:58:5d:5d:3e:3d:29:50:64:78:c5:87:2f:d0:1b:
b7:cd:c1:dc:60:1b:5d:1b:95:83:ee:f2:2e:f8:60:
98:6f:67:61:58:c1:8f:ec:50:13:bc:77:c5:4b:2c:
be:4f:82:09:d8:3e:b2:71:32:59:27:51:f3:49:20:
83:fd:91:d1:eb:44:b2:5c:0d:06:38:db:00:df:3a:
aa:0a:a2:a4:4a:cd:fc:59:28:54:c8:ea:68:92:11:
16:1f:44:24:c5:1b:e5:86:e1:2f:97:bc:71:96:87:
b7:a0:36:4b:90:1f:d9:59:5c:f5:72:cd:d6:f8:65:
71:9a:ab:de:26:72:70:47:67:c2:e7:58:2d:f0:51:
40:15:fe:e4:01:69:20:45:97:56:95:64:38:fa:10:
20:d1:8c:39:17:36:79:3c:a2:31:46:9e:03:ca:11:
5a:ee:e4:f9:cd:f8:1d:f8:00:ba:7b:19:00:f1:96:
66:cc:c0:c0:38:fc:7c:f1:b5:25:ed:da:4b:3f:0a:
30:b6:65:64:ea:d7:ed:00:ed:e2:6c:f5:40:99:98:
81:bf:26:20:d0:07:0b:c8:ba:0c:a6:be:5b:f3:00:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2B:A6:99:71:E9:05:A5:45:F8:B7:DD:4C:89:11:C0:A8:B9:59:53
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/RCummXHpBaVF-LfdTIkRwKi5WVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.68.0/24
103.75.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a5:08:4d:db:e8:50:62:82:ca:95:08:0c:ed:39:80:93:46:
73:a3:83:a4:50:da:e2:0a:5d:89:c1:7a:37:05:13:df:da:df:
0f:31:1e:46:1d:a2:e5:65:65:8c:ab:6b:e5:01:65:01:fa:e3:
79:16:40:8f:67:19:58:b6:1a:e9:4c:83:92:be:0c:ba:a5:8d:
0d:1b:e1:45:9a:c2:cf:52:09:fe:c2:81:5e:88:52:09:f6:7f:
71:5a:20:fd:ca:92:21:d8:42:b2:b7:17:d1:a9:e5:cd:09:40:
1d:17:49:ba:2c:8d:2c:c2:8e:b1:ee:5e:eb:d6:6f:ce:87:86:
e6:ec:4e:c2:c1:b1:43:89:2d:aa:81:05:cc:3c:a2:56:81:c0:
08:b7:ed:fc:64:a2:7b:70:4b:86:a8:12:ac:fc:f0:9a:e3:bf:
76:bb:b9:18:5f:dc:1c:7f:ab:d0:96:44:a7:56:55:18:fa:aa:
08:c5:f4:8d:b4:1e:18:fd:be:e9:63:0c:be:78:63:f9:b9:f0:
d2:54:92:94:17:fd:2d:cb:a6:9c:8e:ca:6d:24:51:9f:2e:38:
04:7c:41:bf:42:7f:33:c3:de:b6:0d:00:b0:79:13:2f:a1:f5:
4a:d2:f9:e1:71:1c:4e:5c:c4:26:d5:ca:e8:81:4d:d4:d7:e3:
3d:f5:cd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org