Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/g1dG5CAWiacAHYsSFmI4uPEAopE.roa
File: g1dG5CAWiacAHYsSFmI4uPEAopE.roa (raw, json)
Hash identifier: rZIkb8Umdy6tvFPfiebb9OGjFGnVhYMtJNZLPVVn13o=
Subject key identifier: 83:57:46:E4:20:16:89:A7:00:1D:8B:12:16:62:38:B8:F1:00:A2:91
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0183E1E3F97C33AD98ECE70A6A301F172D7B
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/g1dG5CAWiacAHYsSFmI4uPEAopE.roa
Signing time: Sun 16 Oct 2022 17:42:37 +0000
ROA not before: Sun 16 Oct 2022 17:42:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 103.76.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e1:e3:f9:7c:33:ad:98:ec:e7:0a:6a:30:1f:17:2d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Oct 16 17:42:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=835746e4201689a7001d8b12166238b8f100a291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:66:aa:a9:53:4b:c7:b5:f0:32:5c:7a:e9:49:
bb:8b:52:d4:d5:98:73:db:00:62:4b:60:8f:1a:83:
63:ac:fc:13:70:50:f2:4e:01:71:34:7b:0d:24:0e:
f3:70:66:13:ac:21:6d:df:41:0f:09:bd:0d:76:a6:
4a:85:6a:a7:c7:24:6c:44:0c:ac:ef:ef:45:a0:9b:
4d:b2:7c:58:b4:06:ac:bb:96:e3:9b:2e:74:0b:19:
48:35:01:97:37:0b:7f:45:5e:98:4a:37:2b:ae:82:
f7:a2:fc:eb:3a:0d:b5:33:e0:c0:e6:dd:bb:a1:4a:
8d:0c:0e:af:e1:19:95:f5:41:69:c8:d0:c8:f2:fd:
92:cd:29:ff:4a:60:ce:08:86:c1:58:42:1f:4e:f1:
08:79:2e:85:ef:b3:26:6c:28:33:09:c9:3f:00:dc:
d0:45:80:0c:60:51:10:60:b5:73:9d:4c:0c:be:81:
d6:7f:16:24:18:80:47:86:30:98:a2:5a:ac:cc:38:
f0:31:82:e4:f7:34:14:37:9e:15:fa:f6:52:36:32:
fb:aa:e7:87:15:44:2e:15:07:fc:55:fd:35:20:c0:
e5:51:a7:38:a3:e0:2b:92:88:29:b7:a3:dd:80:5d:
ff:3d:ae:71:df:84:d7:12:a8:e9:b9:c6:82:6b:a3:
7b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:57:46:E4:20:16:89:A7:00:1D:8B:12:16:62:38:B8:F1:00:A2:91
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/g1dG5CAWiacAHYsSFmI4uPEAopE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.128.0/24
Signature Algorithm: sha256WithRSAEncryption
68:26:a6:8f:0e:0b:17:96:bc:4e:e0:2d:af:47:6e:ca:4a:96:
fe:18:da:cd:d1:d3:91:c5:62:fa:1d:5f:67:a7:63:d7:a7:b2:
9d:16:be:7d:70:c3:f6:b3:37:62:d1:c6:e8:8e:2d:67:a0:6b:
35:a0:32:c8:f8:87:05:21:c3:80:96:bf:fd:14:1c:1a:d8:4c:
76:1b:74:98:35:46:00:e7:26:c8:79:22:c3:f3:d0:e5:1b:0f:
f5:76:60:40:ef:83:d2:dd:37:02:09:e2:aa:dd:84:bd:d8:89:
ff:e3:8f:b2:f5:dd:e5:b6:6a:f0:4f:10:37:76:94:40:f3:6d:
a2:89:8d:09:a9:9c:11:d8:f8:d6:fe:ca:59:30:e1:86:0c:4e:
11:4e:a0:22:c2:e2:00:62:e2:d4:d6:83:1e:d0:b4:18:1c:c6:
d0:64:02:ad:86:32:38:6f:df:39:39:f9:80:c6:bd:08:37:0c:
b1:a1:d4:06:13:a2:54:dc:50:89:bf:ee:50:74:0c:64:ce:72:
f9:7c:7f:d5:d2:b0:64:9d:58:39:16:75:40:89:87:76:b2:10:
dc:13:97:2f:40:d2:17:e8:5d:0c:cb:03:ad:bb:47:01:10:bb:
b6:be:d2:05:fa:e8:9e:30:5a:83:62:9a:9d:b3:f7:c6:2b:bf:
26:df:53:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org