Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/g8GLam1SG6xhBhtyCcmlXVPkZAo.roa
File: g8GLam1SG6xhBhtyCcmlXVPkZAo.roa (raw, json)
Hash identifier: b9Xxttxd3saCbsYzzvIKmu5y4iytdq/u+FmKtQI/QLo=
Subject key identifier: 83:C1:8B:6A:6D:52:1B:AC:61:06:1B:72:09:C9:A5:5D:53:E4:64:0A
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018290DAE981A071751FBA66F1F8FF9891DB
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/g8GLam1SG6xhBhtyCcmlXVPkZAo.roa
Signing time: Fri 12 Aug 2022 07:00:41 +0000
ROA not before: Fri 12 Aug 2022 07:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 103.76.130.0/24 maxlen: 24
103.76.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:90:da:e9:81:a0:71:75:1f:ba:66:f1:f8:ff:98:91:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Aug 12 07:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83c18b6a6d521bac61061b7209c9a55d53e4640a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:44:c4:6a:d1:52:9f:fb:91:40:5e:d9:b1:
65:71:d8:a6:bc:92:bc:39:5b:b1:17:db:78:49:32:
66:d8:e7:6c:48:86:19:59:00:5b:8a:0d:29:b0:e1:
29:8a:10:42:46:82:ee:0f:33:c1:56:c0:fc:ca:81:
92:a8:ca:9e:33:42:81:53:20:38:b3:65:b5:c4:e1:
09:c9:1c:ce:a9:e2:6e:97:53:1f:bc:20:7d:71:8e:
2e:cf:93:84:68:4a:4c:35:8d:6e:fe:12:e4:6e:11:
18:c5:ab:30:a5:15:15:3c:79:55:d0:7c:1a:29:09:
42:6b:d2:a0:4f:03:ab:3e:bd:91:e2:49:a5:72:f1:
89:a7:3e:c4:fa:7e:b0:15:cf:8c:19:ef:c8:8c:7f:
e3:0c:bd:32:79:df:b5:24:c1:43:05:60:17:4d:ba:
fc:d4:ab:24:dc:63:2c:43:dd:08:2a:9a:ce:34:67:
39:c9:32:00:82:94:db:42:60:b7:f3:d0:ed:f5:a9:
33:9b:c6:88:e5:a4:c7:4a:3c:1d:69:d3:94:af:5f:
32:23:60:96:67:e8:5e:19:a5:81:48:7b:e2:de:a1:
30:25:da:6a:fa:f5:b5:59:8a:59:59:1c:1f:b3:53:
95:44:ab:38:e9:c6:8a:77:fc:3a:3c:28:6f:31:98:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C1:8B:6A:6D:52:1B:AC:61:06:1B:72:09:C9:A5:5D:53:E4:64:0A
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/g8GLam1SG6xhBhtyCcmlXVPkZAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.129.0-103.76.130.255
Signature Algorithm: sha256WithRSAEncryption
43:ea:e6:ec:38:2c:2a:d7:12:a9:19:90:bd:75:52:ac:0b:7e:
19:a1:5e:f9:f7:d8:76:9b:8a:4f:5b:fb:79:34:ef:ba:b4:84:
67:7a:be:ac:1e:71:26:6e:b2:b7:f8:82:4f:99:1e:86:66:3a:
9b:de:58:5e:1c:12:9e:2d:f4:c6:63:4d:11:04:ed:76:d0:07:
71:cf:56:be:17:06:4c:ea:83:db:2e:35:f9:4a:e2:f4:bb:a2:
b0:e3:4f:15:24:97:c3:0f:8b:c7:f3:23:91:77:5c:4a:0a:6c:
15:a5:56:ba:2c:0a:e9:61:dc:1d:e6:80:05:3d:33:bf:1f:27:
c7:78:2d:7d:60:07:cf:77:ba:2f:80:ff:d9:a4:90:99:db:e9:
94:e2:c4:18:5a:7e:c2:62:37:f4:5e:90:ef:a2:94:7a:47:e4:
67:fc:34:b8:fb:ca:08:ac:d7:d1:4a:46:ce:32:bf:1c:39:4b:
87:94:b7:22:91:ed:f8:0b:c9:e0:80:ed:a0:c5:7d:a5:6c:cd:
16:90:d4:82:39:0a:60:fe:80:2c:92:31:a7:a9:ee:f2:a8:e7:
c7:e4:bb:74:a8:06:30:f0:1a:38:01:6e:38:1f:96:c3:d4:d3:
4e:eb:93:8b:fd:bb:3f:32:08:84:46:d4:f9:00:ec:7e:0d:cd:
c8:70:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org