Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/x3sYKZxAiqBNXnbnhWLVpfsuHE0.roa
File: x3sYKZxAiqBNXnbnhWLVpfsuHE0.roa (raw, json)
Hash identifier: VotLTVQqrxwjYslXI4OV05tMp+PFXNlUKP73S/wF4FY=
Subject key identifier: C7:7B:18:29:9C:40:8A:A0:4D:5E:76:E7:85:62:D5:A5:FB:2E:1C:4D
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01839D44161149F12972C451C270071F865A
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/x3sYKZxAiqBNXnbnhWLVpfsuHE0.roa
Signing time: Mon 03 Oct 2022 09:53:48 +0000
ROA not before: Mon 03 Oct 2022 09:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 103.76.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:44:16:11:49:f1:29:72:c4:51:c2:70:07:1f:86:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Oct 3 09:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c77b18299c408aa04d5e76e78562d5a5fb2e1c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2a:d7:16:81:ff:43:b7:56:91:80:40:b0:48:
cb:f8:f7:2b:0c:1a:1f:d9:26:c0:42:7f:fb:68:f8:
ec:2b:8f:6b:8c:1a:98:4b:6d:98:05:b7:d9:57:36:
64:b5:40:79:ca:25:3c:23:e3:fb:05:72:1a:92:e5:
f6:6e:13:2e:91:fe:15:c0:42:64:35:4d:2d:7f:2a:
3a:e9:71:35:80:0c:ee:ba:0b:03:e2:71:0b:ce:72:
2e:5a:cb:1e:e9:80:a1:59:a5:73:48:25:19:80:64:
68:e4:72:a2:5c:7d:88:cb:cf:92:9f:63:e6:cf:3e:
e6:70:2d:9b:4a:84:97:cf:cc:03:6a:31:f6:d0:14:
2f:46:ee:86:3c:2f:93:3c:81:6b:5d:f7:ed:a7:a6:
7b:41:21:a3:0e:93:cc:4b:ba:67:66:21:be:4e:50:
4e:01:f3:18:b3:be:a0:0a:b5:1a:81:e3:81:84:3a:
5d:97:15:a9:1e:35:a0:b6:f5:6c:80:7a:ad:c9:59:
70:c6:ed:00:6d:82:c7:ed:bd:b3:42:fc:91:58:ab:
65:0b:60:32:45:fd:73:af:c0:14:13:a3:49:a4:75:
11:25:86:17:a5:d8:dc:de:5c:11:23:8b:93:62:ad:
a2:5c:28:00:07:23:28:aa:60:f9:28:fc:ab:3e:17:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7B:18:29:9C:40:8A:A0:4D:5E:76:E7:85:62:D5:A5:FB:2E:1C:4D
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/x3sYKZxAiqBNXnbnhWLVpfsuHE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.130.0/24
Signature Algorithm: sha256WithRSAEncryption
96:17:1a:10:1d:73:cc:09:bf:0f:b7:22:3a:ad:42:fe:cb:20:
60:0a:db:e0:af:fd:f9:50:bf:bc:cb:e3:26:75:de:d1:29:59:
78:6c:ef:4e:81:87:5c:16:a9:59:29:16:a0:41:91:d6:b2:a4:
a6:b2:c6:21:cf:5f:15:87:01:b6:8a:cf:78:30:bf:c1:37:e7:
95:ec:b3:18:f6:4a:ef:c1:0e:64:03:ab:68:61:b2:40:ff:7f:
41:43:bb:41:0f:11:b1:b7:f7:e1:a8:f8:cc:df:aa:ea:57:2b:
86:ac:5e:37:c5:5d:f7:0a:3e:b2:33:d7:5e:65:42:aa:66:b3:
f5:87:12:fd:b0:0d:2c:9e:ae:b8:62:15:5a:c9:9d:7d:9e:b3:
3f:02:67:bc:bd:23:b9:5e:6d:00:04:e5:57:ec:a5:22:1f:ff:
09:c4:dc:83:c2:5d:f1:e4:3a:15:7d:7c:a5:f9:f4:d2:0d:f2:
a6:48:69:31:d3:bb:15:1d:86:1c:4b:9d:94:02:f7:0c:25:4c:
cd:0b:35:89:16:7c:09:5f:6e:4c:6f:be:94:de:95:32:d6:0a:
82:9d:82:97:f0:6f:85:00:b3:af:e5:ce:da:98:da:d0:14:fb:
d3:59:d2:85:87:0b:84:a8:28:38:6c:97:af:f6:aa:4a:24:70:
fd:a3:e7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org