Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/zBkA-bo17hkasr9-s7DMxPYSdbE.roa
File: zBkA-bo17hkasr9-s7DMxPYSdbE.roa (raw, json)
Hash identifier: bT4/3Z4JjqzvVPVpvPDIn+tA4MtU0p9/GFbImM1kC8o=
Subject key identifier: CC:19:00:F9:BA:35:EE:19:1A:B2:BF:7E:B3:B0:CC:C4:F6:12:75:B1
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0183AC7BBC0D2DE2DCD7EFA4501BDE633CAA
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/zBkA-bo17hkasr9-s7DMxPYSdbE.roa
Signing time: Thu 06 Oct 2022 08:48:53 +0000
ROA not before: Thu 06 Oct 2022 08:48:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141968
IP address blocks: 103.76.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:7b:bc:0d:2d:e2:dc:d7:ef:a4:50:1b:de:63:3c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Oct 6 08:48:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc1900f9ba35ee191ab2bf7eb3b0ccc4f61275b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:44:e1:1b:1e:1f:30:d9:4d:b6:fe:ac:df:
d4:af:37:50:43:a8:73:6b:dc:62:58:b1:2f:08:ff:
29:3b:e4:c3:58:c7:56:2b:ef:a6:58:81:cd:9f:aa:
ee:21:3b:3e:a9:e8:09:f1:0d:d4:c4:51:fe:3f:38:
4e:e4:f2:45:82:36:ac:3a:76:d8:e8:b8:55:b9:61:
0e:ce:dc:91:54:a3:86:63:e9:80:56:d9:49:c5:cf:
f4:c2:95:94:e6:dd:13:34:86:9a:f4:4d:a9:92:5d:
03:05:b9:f7:d6:00:02:c1:75:e5:c9:9b:8b:67:5d:
93:23:2c:cd:7c:42:eb:b0:ab:84:ac:81:f4:8e:4f:
95:77:78:ae:20:11:eb:72:fd:68:47:57:51:73:e6:
bf:0b:0d:54:87:64:8c:d3:84:6a:68:31:95:e7:9a:
7e:94:ab:f4:87:b9:b6:6c:05:9c:a7:d6:28:32:8e:
4c:c9:0d:e4:ae:83:ca:2f:7d:d4:49:ae:bf:e0:dc:
f1:53:d7:ae:d4:39:d4:aa:b4:74:bf:cc:ac:aa:56:
8e:3a:23:b9:24:b2:73:d6:6e:2b:d6:13:87:2f:4b:
6a:eb:46:77:8a:10:96:9b:1c:21:f4:59:2a:ca:08:
d6:1e:0c:67:ea:8a:37:27:22:b0:34:c5:a3:a1:24:
52:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:19:00:F9:BA:35:EE:19:1A:B2:BF:7E:B3:B0:CC:C4:F6:12:75:B1
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/zBkA-bo17hkasr9-s7DMxPYSdbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:73:37:0b:01:9d:f2:ad:6d:67:52:fc:82:a9:39:c1:e6:62:
42:79:ea:4e:da:b5:1f:cd:ca:5d:db:c9:03:18:77:f0:20:a4:
6d:10:8f:50:54:36:4f:a9:69:66:d2:85:92:30:e0:a4:93:58:
9e:79:f5:16:2c:64:4a:66:8b:4a:c0:9f:23:7f:98:9c:dd:4d:
46:e7:78:f3:a6:fe:68:1a:e1:6c:b6:02:7c:6b:bf:73:75:bb:
1c:a7:27:30:1b:a9:18:f4:5b:59:48:e3:48:7c:87:db:ea:26:
f2:8f:9c:c1:5b:9f:be:1d:f1:d8:57:da:30:61:e9:ef:9f:c0:
ab:3f:98:41:66:92:c8:d4:bd:f4:ff:d0:a1:47:1c:ec:e6:d8:
be:f5:0f:6b:95:b8:e1:05:cf:e8:45:5a:f1:e8:87:1e:7f:57:
cb:3a:2a:49:68:2a:69:f4:ff:67:9a:ec:06:dc:b6:32:3b:50:
3a:3e:ce:e8:eb:8f:1d:72:41:9d:67:ae:d8:62:6e:4e:77:f4:
da:41:35:02:df:8c:8f:65:d3:41:74:0d:62:34:b8:e6:cd:15:
55:7a:a5:dc:80:63:b9:35:18:81:bd:0d:b3:a3:be:0a:65:60:
1a:78:16:4c:5f:5f:f1:7c:97:f7:e4:44:c5:ee:6b:4e:e7:91:
eb:48:a8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org