Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/BZQRY7z_Qvy7sy80WaGYMddfsoA.roa
File: BZQRY7z_Qvy7sy80WaGYMddfsoA.roa (raw, json)
Hash identifier: +GhA2owLgAxxG9AaSnHG3hIkb7bC3P0mPy4lpfbTyZc=
Subject key identifier: 05:94:11:63:BC:FF:42:FC:BB:B3:2F:34:59:A1:98:31:D7:5F:B2:80
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 0170B1D4
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/BZQRY7z_Qvy7sy80WaGYMddfsoA.roa
Signing time: Wed 23 Feb 2022 07:54:59 +0000
ROA not before: Wed 23 Feb 2022 07:54:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36351
IP address blocks: 202.170.196.0/22 maxlen: 22
115.124.32.0/22 maxlen: 22
103.243.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24162772 (0x170b1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Feb 23 07:54:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05941163bcff42fcbbb32f3459a19831d75fb280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:f5:52:1c:74:8a:fd:13:cd:8d:ae:d6:4e:
d4:91:30:7d:ad:ee:63:23:0e:0b:29:64:3b:8c:0a:
25:1d:1c:52:b4:b1:a7:56:2f:de:09:ab:9f:a0:74:
2a:1b:41:0b:76:f4:3a:41:c5:d6:6c:fe:f6:f0:c9:
e1:78:c7:50:61:55:30:bf:6f:9f:cd:fd:17:ff:8f:
97:8f:93:02:5f:05:05:38:97:78:cd:76:d2:5b:73:
fa:9b:25:ef:05:37:8b:22:5e:86:b3:c0:cf:98:7c:
f8:fd:f0:88:68:6d:94:f3:2d:98:09:a0:73:51:53:
7e:fa:d4:8c:e8:c7:04:ac:1f:89:7f:19:d9:d8:09:
b2:36:be:47:2e:0a:ce:4f:62:fa:cc:18:08:32:02:
e6:de:cf:9d:25:bb:26:00:ad:64:9d:da:9f:ba:f8:
70:0d:13:f2:51:a5:ff:7e:c7:8c:a7:cf:f5:9c:6b:
a3:bd:75:2d:a9:1f:89:28:3c:59:83:1e:63:98:4b:
9f:8a:72:d4:11:7f:d9:97:b6:f5:66:c7:10:b1:7e:
6f:53:21:f0:12:c1:6d:15:45:ae:2c:02:f8:14:f8:
6e:b2:fd:10:74:59:9d:b4:e3:67:b1:8d:50:af:35:
5f:7b:1e:f9:14:b0:81:6a:d2:69:d6:c1:d2:42:c7:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:94:11:63:BC:FF:42:FC:BB:B3:2F:34:59:A1:98:31:D7:5F:B2:80
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/BZQRY7z_Qvy7sy80WaGYMddfsoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.243.204.0/22
115.124.32.0/22
202.170.196.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:6c:de:8b:8a:c1:2c:28:2a:98:f5:2b:64:7f:86:bf:d0:cd:
33:39:ee:92:61:57:2a:f4:43:7b:94:ea:5e:6f:c4:7e:06:74:
eb:ba:0e:e9:c4:46:ff:42:ec:58:07:a0:7d:c4:4b:b4:31:db:
01:2a:54:39:d6:24:6f:ed:55:ef:41:c4:e1:bf:20:69:67:3b:
22:a2:52:ca:31:f8:b4:3d:1a:8c:29:46:ad:e0:f7:31:c2:cc:
a4:4f:a1:49:54:12:0b:54:eb:3a:6c:c7:01:fe:0e:2e:80:1d:
3b:37:19:30:65:02:92:f5:e7:ba:f3:80:4e:75:e1:d2:60:01:
e7:a6:26:94:34:c9:c1:76:f2:47:09:90:47:4e:2b:70:2d:42:
9e:91:1c:db:bc:6c:05:e2:f2:db:d2:76:16:56:88:b4:57:9f:
48:da:9b:ea:e7:d3:18:11:3f:95:72:97:df:f7:80:a8:15:18:
9a:53:9e:1d:71:10:91:94:ef:c3:bc:bd:55:66:8d:47:5e:36:
67:b5:e6:b5:1c:2e:71:c8:68:d1:81:8c:37:06:91:69:07:06:
20:51:fd:63:48:ee:aa:ba:ba:22:3c:77:3d:99:05:a2:2b:63:
8b:7e:a4:0b:3a:d2:fc:d7:cf:80:2f:ef:50:f5:c6:fe:ff:91:
52:95:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:15 2023 by rpki-client on console-ams.rpki-client.org