Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/LVwS4yGSk9kquvoQataankFvlmY.roa
File: LVwS4yGSk9kquvoQataankFvlmY.roa (raw, json)
Hash identifier: E5Ry/A3HrJa9d7Ldd74MJC0iY/CHGd4phn42OWEvEFw=
Subject key identifier: 2D:5C:12:E3:21:92:93:D9:2A:BA:FA:10:6A:D6:9A:9E:41:6F:96:66
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 1B1611CA
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/LVwS4yGSk9kquvoQataankFvlmY.roa
Signing time: Sat 05 Feb 2022 15:49:49 +0000
ROA not before: Sat 05 Feb 2022 15:49:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 103.35.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454431178 (0x1b1611ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Feb 5 15:49:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d5c12e3219293d92abafa106ad69a9e416f9666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:46:2c:ad:7f:bc:07:05:92:46:f0:73:04:
18:d1:3d:aa:1e:37:17:c7:e8:f3:07:d3:6e:7e:86:
10:c4:fd:04:fb:20:44:c8:1e:03:f6:1b:cf:8e:9a:
eb:d2:ea:6a:f0:fe:3d:d6:55:08:8f:6a:b7:1a:26:
07:3c:c8:b6:ed:ba:9c:76:6f:3e:81:f3:fc:1a:db:
ff:21:0d:04:d7:65:1f:88:5f:06:9b:40:8e:56:c6:
72:ff:11:6a:43:64:60:32:cc:f1:2e:38:20:4d:95:
29:45:07:38:42:47:ba:ca:c8:90:d1:01:b7:a8:d2:
f5:3b:8b:d2:b0:92:a7:8c:c0:d4:bf:e5:0e:9e:7b:
da:4b:0f:63:aa:57:8a:cd:dc:28:20:5e:b5:d8:35:
17:05:96:e1:43:90:1a:18:49:d9:7b:2b:96:dd:ea:
c1:8d:48:85:c1:ef:71:e7:e0:4c:9a:38:ed:61:2a:
fe:d4:c5:2f:11:84:55:47:73:42:76:99:e1:ab:60:
91:dc:35:eb:4a:f3:e9:58:e1:14:62:88:fc:4c:5d:
e3:6e:05:69:7c:b2:39:7b:89:6a:7f:9d:c0:fc:d6:
50:e1:33:75:87:93:4a:79:7f:29:e2:a2:36:2a:dc:
e8:c3:4e:0f:c4:16:a4:01:77:02:94:fa:6b:de:9b:
7b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5C:12:E3:21:92:93:D9:2A:BA:FA:10:6A:D6:9A:9E:41:6F:96:66
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/LVwS4yGSk9kquvoQataankFvlmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.35.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:6f:22:13:07:01:db:1e:76:93:5c:b2:91:7f:3e:08:b0:20:
f0:92:08:cc:2b:ad:b9:1a:63:60:a3:f0:ac:8b:36:fc:49:d3:
ac:ec:87:93:61:cb:f2:e4:b3:fc:21:79:12:57:68:63:8e:a7:
b3:74:4e:de:28:7a:fe:9e:42:49:a4:e5:2e:4b:20:02:24:59:
38:1a:52:00:87:74:74:3d:07:d9:6c:c2:52:3c:7f:8e:f2:75:
c9:74:a1:19:24:5e:bc:38:6a:28:41:65:bf:a6:c9:2f:6f:9a:
51:b8:2c:2d:3d:89:a1:27:bd:29:51:47:ef:fd:fc:2d:a7:92:
6a:56:1d:8c:0f:ab:6a:61:b6:b3:86:3a:64:45:17:4e:ee:9d:
6b:d5:ff:49:a9:a5:b9:07:26:45:64:0b:3b:b3:85:a7:b5:ed:
b3:26:55:55:4f:24:9f:e1:db:d9:34:00:62:e0:c8:a1:11:93:
ba:d0:09:9d:32:71:ab:89:64:3d:ba:5f:71:ee:84:1d:5b:50:
f3:03:7d:a9:36:7c:47:71:bb:1f:f0:4b:b3:7b:9a:2d:f2:30:
8e:35:46:33:99:eb:3b:b3:0d:a1:44:2f:07:0f:cd:01:89:88:
31:65:0f:dc:57:28:8a:58:8d:fc:cd:3d:82:b4:86:a7:1a:ca:
94:0a:27:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org