Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/u5Nod40dxRlpczdYpIRE0hR-zb8.roa
File: u5Nod40dxRlpczdYpIRE0hR-zb8.roa (raw, json)
Hash identifier: PqPX16Fn4T8Q1ZQThFNwUQJrx9l7jKos7stRdIVQUAQ=
Subject key identifier: BB:93:68:77:8D:1D:C5:19:69:73:37:58:A4:84:44:D2:14:7E:CD:BF
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 03972CA7
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/u5Nod40dxRlpczdYpIRE0hR-zb8.roa
Signing time: Sat 01 Jan 2022 00:51:11 +0000
ROA not before: Sat 01 Jan 2022 00:51:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3177
IP address blocks: 195.28.11.0/24 maxlen: 24
103.215.223.0/24 maxlen: 24
103.215.221.0/24 maxlen: 24
103.215.222.0/24 maxlen: 24
103.215.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60239015 (0x3972ca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jan 1 00:51:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb9368778d1dc51969733758a48444d2147ecdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:e2:87:42:80:60:7a:68:f9:bb:d7:f4:10:
d8:62:d9:55:99:86:50:1c:43:54:2a:a2:38:88:31:
f4:ee:df:af:a0:01:6a:97:ae:91:56:ec:8e:68:72:
0c:24:5b:85:bb:40:4a:2f:5b:b8:58:d2:f1:bd:b4:
a3:c6:bd:5d:34:e2:9d:8b:c5:49:14:1c:28:e2:9a:
62:7e:ce:85:1b:9e:2b:b4:04:b9:b0:8c:65:85:66:
16:2c:79:15:a7:7e:2d:4e:cc:2d:7a:be:44:83:d1:
86:18:f2:30:dd:e1:9e:63:b2:65:1a:b2:2a:59:80:
42:ee:d5:bd:6d:4d:b8:f9:90:14:e4:81:ff:fe:03:
65:9f:1e:39:8a:f9:c7:c4:44:25:9f:be:78:14:47:
cd:2e:c7:79:b1:91:22:fd:75:f2:59:69:3f:4e:64:
eb:76:33:64:7b:b1:02:ef:56:04:e0:a1:b2:aa:3d:
9a:d8:4d:be:bc:bc:79:a7:ef:ba:dd:fa:31:10:1a:
9a:5d:37:3b:22:c0:31:c5:ce:84:01:01:4e:71:6f:
8b:92:70:dc:bb:04:4f:42:d3:62:20:6d:1f:be:c9:
98:f1:a9:71:f3:b6:21:ec:23:02:7a:95:94:6e:07:
79:77:c3:a8:3f:3a:56:02:a4:79:c8:53:0f:da:9a:
76:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:93:68:77:8D:1D:C5:19:69:73:37:58:A4:84:44:D2:14:7E:CD:BF
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/u5Nod40dxRlpczdYpIRE0hR-zb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.220.0/22
195.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
11:2e:55:6e:9a:dc:50:09:e1:f7:a1:3b:28:53:06:69:c5:a4:
e0:a4:21:f6:64:f0:d0:bf:63:7a:c6:b2:e2:49:af:38:dc:67:
c0:6a:c4:bf:eb:54:42:39:5d:3f:78:d1:54:c3:91:f9:1e:11:
6f:9d:b3:f8:28:73:9d:54:af:bd:d0:90:75:47:d2:e8:7b:df:
85:73:d1:7e:bd:02:a6:6e:66:d2:84:05:2d:f2:04:5a:6a:f4:
ae:f4:19:93:32:b7:58:da:ae:63:ec:24:30:2a:62:7e:1c:97:
fc:f6:2a:b1:35:14:9b:de:52:00:81:3e:1c:e6:36:07:27:fa:
9e:91:58:91:7a:1e:f3:2c:19:28:5e:ae:3f:28:d7:11:a1:5e:
c5:e1:1a:ee:f4:38:ff:e1:05:6a:97:e5:1b:c1:74:39:65:70:
73:dc:77:f7:04:c2:33:25:f6:0b:eb:75:9e:5a:ae:fd:08:aa:
93:6c:46:ab:10:b8:71:89:ba:88:04:4c:70:8c:32:fc:d5:43:
68:54:85:97:44:f4:80:f2:6a:63:e7:99:e3:31:d8:3f:b3:bb:
56:a5:02:39:65:6b:f0:9b:fb:03:9d:ef:72:9b:fe:01:5a:70:
93:d6:af:93:a5:c2:46:6d:1c:f8:76:9f:a3:19:28:04:23:e6:
55:b3:62:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-fra.rpki-client.org