Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/gs7nl04Sl_C8g7Ma8cxlUkeIcNA.roa
File: gs7nl04Sl_C8g7Ma8cxlUkeIcNA.roa (raw, json)
Hash identifier: o0BvC92+Jwpd0uf/u+rOPqYBJB+B9R53r72P0EAQsJs=
Subject key identifier: 82:CE:E7:97:4E:12:97:F0:BC:83:B3:1A:F1:CC:65:52:47:88:70:D0
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01828E8427756A9ED6212AB9869D8C2DB9A6
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/gs7nl04Sl_C8g7Ma8cxlUkeIcNA.roa
Signing time: Thu 11 Aug 2022 20:06:41 +0000
ROA not before: Thu 11 Aug 2022 20:06:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 103.76.131.0/24 maxlen: 24
88.218.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8e:84:27:75:6a:9e:d6:21:2a:b9:86:9d:8c:2d:b9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Aug 11 20:06:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82cee7974e1297f0bc83b31af1cc6552478870d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:27:d1:ea:63:2c:34:e6:a6:bd:ea:95:06:f1:
5a:cd:7f:5e:a2:39:14:e2:76:fc:3b:67:29:a6:c0:
c8:81:f7:9e:c7:28:40:1c:26:58:ae:8f:4b:ef:8d:
72:33:e6:d2:c9:2f:eb:68:52:49:74:19:93:1b:d5:
75:8e:82:d9:e8:2d:68:5d:a1:3f:af:7e:e4:44:26:
19:0c:72:8e:3b:76:42:5e:9b:01:05:96:0e:5a:d7:
92:a7:b9:e7:b3:2f:e4:b8:67:77:16:e6:e2:47:02:
7b:b1:9e:60:d2:59:bc:f4:ab:7f:5f:83:73:51:59:
0a:e3:3b:ff:3e:f5:e7:4d:53:c2:88:d5:f0:39:8c:
fe:07:13:91:fa:5a:ba:90:19:36:94:d6:e6:0f:5c:
c4:67:2a:7f:02:c8:14:3d:a6:26:23:fb:85:46:83:
55:b2:50:00:7f:0e:d9:74:06:a3:6d:42:12:8b:45:
af:c6:5c:c5:44:f9:ce:77:61:97:49:e9:fd:5f:ab:
8d:9b:6d:4b:b6:10:d3:d9:38:c4:f3:7e:fd:1e:14:
d9:3b:72:e3:d3:a2:2d:a1:1f:cc:7c:8e:ad:c0:fd:
28:f2:1e:44:0d:c4:a3:a8:9f:c5:53:cb:53:14:68:
fd:04:76:17:17:38:18:22:4b:35:2d:e4:b5:59:67:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CE:E7:97:4E:12:97:F0:BC:83:B3:1A:F1:CC:65:52:47:88:70:D0
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/gs7nl04Sl_C8g7Ma8cxlUkeIcNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.41.0/24
103.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
07:89:05:05:84:e4:73:f0:c7:e7:97:b2:1e:9a:f6:e8:36:19:
fb:3a:8f:25:8e:ea:4f:2c:33:bf:6f:02:b5:a1:d9:48:39:91:
8a:09:d6:95:a6:61:3a:f3:92:1e:b3:28:c9:33:dd:ef:7b:76:
b5:85:5c:ad:da:48:b3:52:dd:9a:73:de:41:51:88:3c:e9:ee:
2d:db:b5:3e:4c:d0:ea:f9:10:cb:8c:f1:2c:6d:a0:1e:39:79:
92:73:2a:df:a0:6e:9c:36:03:33:28:1d:31:38:bd:c4:0b:d0:
25:fc:9d:98:41:24:66:10:d8:94:a6:d6:b2:6f:dc:35:03:27:
62:21:8a:3b:51:60:bd:be:fc:1e:6f:e2:19:c3:3d:e7:b0:d4:
3c:6f:31:10:5e:c3:d9:3c:c2:2b:7e:9e:bd:12:7c:34:66:d9:
82:99:4f:56:61:f5:dd:5b:8f:13:d0:f6:8a:ed:4d:80:0c:36:
82:f1:6b:d6:93:f4:72:58:a9:93:d0:39:89:45:ac:f7:c8:2f:
f2:f2:7b:74:2a:38:ff:eb:79:33:b9:93:a6:0a:fa:78:23:7c:
93:0e:9b:84:0d:13:8c:a8:a3:b6:c1:4f:49:11:e6:a7:dd:be:
bc:2b:11:53:20:f2:a1:64:ee:94:52:61:b1:7f:cf:7b:d2:7f:
e0:49:89:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org