Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/lUA8v_HAFG3BOxF8tYYHRyGQeUA.roa
File: lUA8v_HAFG3BOxF8tYYHRyGQeUA.roa (raw, json)
Hash identifier: HWHkKGCsI2QBbxB8/anH1XRWRkBPk/1KJIGMZ7KFRr8=
Subject key identifier: 95:40:3C:BF:F1:C0:14:6D:C1:3B:11:7C:B5:86:07:47:21:90:79:40
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0183EF6776BB9E7485730196DB6AF06BCEF2
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/lUA8v_HAFG3BOxF8tYYHRyGQeUA.roa
Signing time: Wed 19 Oct 2022 08:41:18 +0000
ROA not before: Wed 19 Oct 2022 08:41:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202335
IP address blocks: 103.75.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:67:76:bb:9e:74:85:73:01:96:db:6a:f0:6b:ce:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Oct 19 08:41:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95403cbff1c0146dc13b117cb586074721907940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:99:77:d5:47:c1:3d:27:3e:e7:61:ed:cb:
38:3a:b3:c9:7f:6d:7f:26:04:25:55:9a:9f:ae:9e:
49:66:24:c5:eb:5f:1f:f3:c9:84:f9:3b:4e:d6:59:
f5:7e:4e:cb:ce:68:19:1d:96:64:0e:a5:90:2c:3c:
3f:9e:4d:c8:7e:fe:44:96:c4:78:a9:a2:1a:91:9f:
40:6b:7d:42:4a:04:ac:cc:28:9f:ff:d1:43:86:46:
76:da:18:91:d2:7c:b5:a0:7f:d5:23:70:4d:10:76:
64:db:ca:f9:75:9b:c9:7d:9c:2d:66:f7:16:8a:5e:
33:9d:17:5d:69:92:86:b1:bc:b7:09:d9:c0:c5:f9:
d0:b1:94:83:95:41:c6:4a:c0:1e:08:08:c9:4f:a1:
a8:fa:d7:de:31:05:1b:43:7b:af:c0:4f:9a:60:7f:
43:8c:12:4c:76:72:36:2e:dd:97:d3:f5:88:fc:03:
da:93:e6:8a:f2:58:3d:3f:7b:88:dd:99:3b:e2:e6:
fc:3c:2c:f6:72:54:31:a0:13:5b:ea:cf:05:18:db:
9a:87:99:aa:88:85:7e:a3:97:62:b4:0e:96:bf:5f:
5f:6c:b8:36:56:4f:bc:db:de:3d:b4:85:85:a4:d7:
db:4c:bf:7e:9e:93:a9:af:58:9c:b8:f8:75:a0:01:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:40:3C:BF:F1:C0:14:6D:C1:3B:11:7C:B5:86:07:47:21:90:79:40
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/lUA8v_HAFG3BOxF8tYYHRyGQeUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.69.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:fe:07:4b:d6:8e:ef:16:77:82:ea:76:d7:df:fa:1e:37:ad:
20:e9:c5:8c:4f:15:1a:82:01:2a:72:75:1a:d6:b8:00:22:8d:
c6:ce:b7:b1:63:c3:b8:88:f0:a8:23:a5:12:f2:20:7e:d1:11:
f2:6c:52:90:fb:f4:69:ad:23:af:e7:20:fe:8d:07:40:ce:ba:
3e:74:a0:5b:a6:53:88:70:fe:9e:64:7b:4f:36:39:2d:0b:42:
51:8a:1d:15:57:90:00:26:0f:33:ff:42:12:bd:f2:ce:7a:0a:
fe:f9:f3:ae:22:93:85:35:05:8b:d0:e7:02:7b:9f:99:19:b5:
a7:d8:b6:22:0e:43:0f:ab:f9:21:19:99:02:ee:8a:1b:96:31:
d4:7a:ef:85:89:2e:a7:c0:0d:31:78:f9:61:2f:8b:56:f8:97:
47:34:b1:04:22:18:1d:8e:31:d3:68:db:7a:43:4c:a0:fd:7e:
43:cd:9a:df:d2:9c:79:3f:e5:9a:17:b7:dc:5f:2a:ee:62:9b:
e3:31:1b:bb:fe:e4:b1:cf:c6:da:03:85:4e:e9:03:8d:d2:f1:
6a:01:8b:3d:a5:f9:97:91:1b:0e:78:99:b3:8e:cd:56:75:8d:
71:ba:af:0b:ac:69:a3:2b:1b:5c:a3:5e:91:16:89:a8:ca:8c:
70:2d:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org