Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/j4EmSBVmrCT-br231elJxi_SMm4.roa
File: j4EmSBVmrCT-br231elJxi_SMm4.roa (raw, json)
Hash identifier: pmFKT6/G167xWhxout/LzMh35iaeurVTWNDdEd/c9I0=
Subject key identifier: 8F:81:26:48:15:66:AC:24:FE:6E:BD:B7:D5:E9:49:C6:2F:D2:32:6E
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0183C6D5185A12E71AC7C6A4310BFD5D65BF
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/j4EmSBVmrCT-br231elJxi_SMm4.roa
Signing time: Tue 11 Oct 2022 11:36:37 +0000
ROA not before: Tue 11 Oct 2022 11:36:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 103.76.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:d5:18:5a:12:e7:1a:c7:c6:a4:31:0b:fd:5d:65:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Oct 11 11:36:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f8126481566ac24fe6ebdb7d5e949c62fd2326e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:53:16:11:74:54:4a:47:a3:94:72:18:08:c3:
b8:68:44:2f:c1:96:67:5b:0a:e7:09:56:87:c0:01:
7a:f9:f6:85:3f:af:3f:aa:78:df:b4:9e:d2:46:01:
31:63:36:b8:64:65:93:96:df:3c:54:56:16:0e:50:
db:41:15:0c:4a:70:d7:2c:b6:75:2a:76:7c:cb:e9:
60:79:b2:e6:0e:4b:82:ba:0e:4b:88:45:de:6c:69:
0e:3b:05:6b:f8:10:38:d1:24:fc:e2:d2:c2:5c:7a:
92:06:60:63:1e:cf:d3:bb:cf:1b:28:5d:16:40:d8:
f0:15:f9:d1:18:47:0d:bd:56:a2:90:4f:b9:fb:1d:
bc:89:74:69:03:ac:32:97:f2:a9:16:e2:05:05:0e:
8a:dd:49:3e:44:20:26:e5:5e:dd:84:b0:ba:d9:1e:
7c:54:9f:90:b7:7c:85:5e:1f:c5:85:ae:71:7f:c4:
cd:da:b2:16:1f:f5:e7:0b:bd:f5:7c:e8:83:93:f1:
df:a9:56:6a:b4:3b:bc:a0:94:fe:61:a6:27:0b:e2:
5a:af:f2:23:99:25:f2:e7:06:a7:e9:e6:3b:d3:25:
9c:e5:06:a3:f0:d7:fb:bc:20:2d:1c:07:0c:39:2f:
4f:14:32:35:2b:0c:a3:38:1c:f1:d7:54:d0:6e:ba:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:81:26:48:15:66:AC:24:FE:6E:BD:B7:D5:E9:49:C6:2F:D2:32:6E
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/j4EmSBVmrCT-br231elJxi_SMm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.128.0/24
Signature Algorithm: sha256WithRSAEncryption
08:1c:fe:19:fd:52:81:e8:16:d5:3c:dd:b3:b2:be:48:e3:24:
f5:73:e1:04:33:44:c2:a1:29:2a:dd:ef:73:41:e7:97:be:cf:
a1:2c:46:81:55:33:a2:b4:bf:27:bf:53:33:1b:78:a1:b0:0e:
48:60:50:af:ed:51:46:8e:fb:a5:d2:cd:c1:51:f9:60:ba:f8:
e2:7a:49:db:93:d3:e3:74:0e:36:85:69:60:3c:93:18:8e:c9:
7d:9e:de:fe:63:d5:ad:06:73:bc:03:4f:fa:6f:5a:7b:54:11:
62:31:a7:16:58:a5:52:c3:ed:36:0e:8b:84:82:df:18:67:e4:
7e:dc:2d:0b:d1:0a:1a:5a:3e:13:42:7c:f9:74:96:de:89:10:
da:f3:d9:ab:2c:2a:71:43:06:2e:d4:cd:64:b5:dc:91:f9:d3:
a8:31:b8:9a:c4:b8:06:18:88:11:d1:0e:f3:f2:fa:43:de:7b:
13:ed:3a:2d:f5:d4:95:85:09:84:ad:62:28:3f:73:5e:98:df:
18:d1:52:66:c9:54:d1:85:0e:23:f0:a9:08:ad:64:7d:03:36:
8a:a5:8c:94:ed:50:6a:a5:5f:b5:e2:1d:64:7e:ad:29:d0:bc:
2d:dd:fd:38:c1:45:38:a7:81:9a:c4:bd:4e:4c:71:ef:cd:eb:
7d:15:cf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org