Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/_wWnuThNDulqKyu-GLAKNVBavlc.roa
File: _wWnuThNDulqKyu-GLAKNVBavlc.roa (raw, json)
Hash identifier: pH5TiI3yFWLCwWaJA0vh491XvbTaFcHUUEh0oY3cujA=
Subject key identifier: FF:05:A7:B9:38:4D:0E:E9:6A:2B:2B:BE:18:B0:0A:35:50:5A:BE:57
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01839D4416A6392F92EE517A2B39FC7A0F66
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/_wWnuThNDulqKyu-GLAKNVBavlc.roa
Signing time: Mon 03 Oct 2022 09:53:48 +0000
ROA not before: Mon 03 Oct 2022 09:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210633
IP address blocks: 103.75.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:44:16:a6:39:2f:92:ee:51:7a:2b:39:fc:7a:0f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Oct 3 09:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff05a7b9384d0ee96a2b2bbe18b00a35505abe57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:c3:bc:ac:5e:82:3a:05:cc:a7:56:20:2a:
82:51:41:cf:d2:92:3a:ce:e7:a7:3e:0d:b2:b6:8b:
7f:83:b3:5f:72:9a:f0:64:44:42:98:99:be:77:47:
ea:59:3c:5e:39:d7:f8:f7:ba:97:53:5e:f3:47:bb:
ce:70:95:32:06:1f:12:92:da:df:06:46:e7:67:b7:
cb:98:cc:20:b4:ae:2b:d4:16:68:dc:73:a9:c7:b9:
c0:bc:f5:e0:91:b4:9e:ad:43:b2:3c:0d:c5:7b:2d:
ee:07:a8:76:cf:ed:3b:59:53:9a:e7:fa:4c:8d:0d:
a2:a7:41:c4:41:3b:af:4f:85:ae:2c:7c:55:ed:02:
c9:e9:1e:52:56:f3:3e:97:9f:93:e6:1a:26:ae:b3:
4d:f4:df:c1:0b:d9:b5:86:2d:2f:b3:75:ea:e3:10:
d4:49:fa:63:e9:e0:06:b3:82:4e:3d:87:81:3b:0c:
46:49:fb:e9:a9:fc:92:6c:2e:52:58:cb:2f:3e:21:
f5:4c:8f:6f:6a:82:f6:af:29:db:c8:e2:33:71:16:
2e:9d:56:32:75:b9:53:a7:34:00:d4:5e:34:f0:10:
6e:58:41:93:84:4e:8b:63:fa:16:a8:f3:82:3e:14:
2c:9f:c3:b3:b2:3f:61:cd:4e:e4:d3:c3:f0:3b:8c:
7e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:05:A7:B9:38:4D:0E:E9:6A:2B:2B:BE:18:B0:0A:35:50:5A:BE:57
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/_wWnuThNDulqKyu-GLAKNVBavlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.70.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a1:32:28:9b:80:c2:85:81:e2:4a:33:a3:f5:28:ec:5a:c4:
26:da:da:50:04:b9:27:92:47:52:46:ef:b0:da:0f:8d:e9:d9:
f8:0f:fd:95:45:81:67:06:e6:ec:a8:ca:1f:6b:3a:c9:38:c5:
51:11:83:f6:a7:6a:b4:97:0d:98:34:87:ca:50:42:a9:d3:51:
41:db:9b:88:62:90:fa:bc:87:f3:f3:48:a4:dd:30:ef:d4:e8:
16:4a:84:37:fc:e9:f1:29:46:36:6d:70:57:a3:d8:3c:f0:57:
2e:33:5f:36:9a:73:b0:15:69:2f:49:07:1c:b8:cc:5b:c3:e3:
dd:35:82:b3:a7:07:ce:8d:6a:58:71:54:62:34:32:81:aa:ee:
e6:b2:53:59:73:6d:db:ac:dc:0d:12:d0:f3:12:6b:98:7d:aa:
29:c4:f6:9d:7f:ab:40:5d:60:15:1e:44:cd:b2:ad:f4:27:59:
3c:e3:62:2f:f7:a3:24:86:fc:39:8d:ae:a1:94:05:10:43:bd:
c6:e6:7c:8b:26:d9:92:12:1a:5c:c0:db:8c:68:4a:eb:54:93:
54:07:00:01:1d:b2:b4:e1:5e:cc:d1:35:b9:21:f2:a7:6d:ad:
33:fb:73:10:c0:9d:cb:c4:47:29:e7:1c:7f:85:19:2d:c3:06:
22:fd:6f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org