Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/q7l2mSNNDXowI2Nodn-2mhQ3kvw.roa
File: q7l2mSNNDXowI2Nodn-2mhQ3kvw.roa (raw, json)
Hash identifier: Vx6ybCURyZnRJAHW2+3NCujURzVarxC6uipok19LM54=
Subject key identifier: AB:B9:76:99:23:4D:0D:7A:30:23:63:68:76:7F:B6:9A:14:37:92:FC
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0183357346F6CE1BA40063023DB049FA2CA6
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/q7l2mSNNDXowI2Nodn-2mhQ3kvw.roa
Signing time: Tue 13 Sep 2022 06:04:50 +0000
ROA not before: Tue 13 Sep 2022 06:04:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 103.76.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:35:73:46:f6:ce:1b:a4:00:63:02:3d:b0:49:fa:2c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Sep 13 06:04:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abb97699234d0d7a30236368767fb69a143792fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a2:f8:5a:6e:44:d4:44:b1:e1:28:67:ed:5b:
8b:4a:6a:bf:ff:b8:23:95:e5:a7:7e:27:55:29:f1:
1b:a7:14:b3:f1:5c:c8:a1:a4:d6:40:bc:30:d4:4d:
78:e0:ef:6e:07:b2:a4:b2:60:5d:a2:87:08:8f:88:
09:96:ca:81:b5:4c:00:b7:06:46:a5:b8:0c:d7:85:
06:e2:8d:7e:46:34:9b:f2:03:9d:05:86:5b:cb:bd:
6c:f5:fe:b7:f1:15:ab:c6:52:ad:a4:63:d4:cc:d0:
fc:aa:ea:f0:c8:53:d2:b0:90:01:d7:65:43:27:f0:
d5:02:df:5a:78:3d:d7:c5:b9:e5:58:07:7c:b6:22:
04:35:c7:9c:07:1f:60:7c:a8:4c:e6:0b:33:4b:da:
52:e9:f3:9c:eb:18:d1:3b:7c:f4:81:8e:41:62:64:
15:61:2c:f6:8e:ff:b3:1b:93:89:c2:ae:fe:f3:1e:
d5:b0:5e:95:a5:e7:c8:08:c1:fe:1c:66:fb:96:f7:
66:99:d1:89:8c:87:49:e5:2f:71:c8:3b:09:aa:3c:
b2:9a:6e:15:ea:7f:32:9e:d4:e1:b8:6d:57:07:89:
b7:58:a3:52:1b:85:0e:47:40:d0:cc:36:ff:3c:b6:
53:94:05:52:ee:77:20:59:b4:16:eb:cd:12:69:fc:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B9:76:99:23:4D:0D:7A:30:23:63:68:76:7F:B6:9A:14:37:92:FC
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/q7l2mSNNDXowI2Nodn-2mhQ3kvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
63:17:7b:12:2b:97:d3:fb:3f:9d:b8:de:9f:8d:ff:ee:63:6f:
96:9c:75:92:06:23:05:fb:0a:bf:62:74:72:3c:bd:70:da:49:
c8:12:50:fb:73:5a:f5:67:79:91:f8:34:0b:bb:40:38:38:0e:
cf:38:1d:27:d0:a2:fd:bd:72:59:0b:ff:e8:e5:88:33:a3:51:
f3:6d:db:de:10:b1:35:f9:03:c6:5f:f4:12:4d:ca:4d:06:4f:
df:07:af:ab:49:4e:43:c8:f9:ac:d3:b6:c8:85:97:33:a5:3d:
75:a1:75:0f:b6:3e:68:30:2f:6d:49:df:8b:9c:68:19:4a:4b:
1e:9f:1d:8b:5c:42:93:00:64:9c:f9:a9:eb:ba:44:23:90:91:
bf:5d:ce:a4:19:93:90:05:b7:52:e7:66:2a:dd:d5:91:9b:e4:
09:6d:4b:61:48:6c:d0:fc:97:d8:27:5b:92:bb:55:04:9b:55:
74:f2:80:c8:ce:42:87:c2:7e:8a:29:3d:a3:5c:bd:6e:a8:12:
e7:b8:fb:1f:04:d3:23:7e:42:b8:4f:0e:fa:ea:5e:15:6f:79:
1d:63:ff:5e:af:a4:7d:50:8b:56:c2:2e:b2:c4:3f:f5:5f:98:
26:42:8e:d3:8e:9c:60:77:f2:dd:cc:a3:59:6b:37:46:27:7e:
b8:97:57:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org