Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/F1SdaevLQ888JmwX6_DdaRLK0Gc.roa
File: F1SdaevLQ888JmwX6_DdaRLK0Gc.roa (raw, json)
Hash identifier: w6blI0BzEVUQgCsvj+GUiVsxOqY97i2Aq9POlsY1ODo=
Subject key identifier: 17:54:9D:69:EB:CB:43:CF:3C:26:6C:17:EB:F0:DD:69:12:CA:D0:67
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 0F9229FB
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/F1SdaevLQ888JmwX6_DdaRLK0Gc.roa
Signing time: Sat 01 Jan 2022 10:03:28 +0000
ROA not before: Sat 01 Jan 2022 10:03:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49596
IP address blocks: 103.231.136.0/24 maxlen: 24
103.231.137.0/24 maxlen: 24
103.231.138.0/24 maxlen: 24
185.137.109.0/24 maxlen: 24
185.137.110.0/24 maxlen: 24
185.137.108.0/24 maxlen: 24
185.137.108.0/22 maxlen: 22
2a0a:40c0::/29 maxlen: 29
2a07:387::/32 maxlen: 32
2a07:380::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261237243 (0xf9229fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Jan 1 10:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17549d69ebcb43cf3c266c17ebf0dd6912cad067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:37:b6:65:44:f6:3e:a7:86:3b:74:94:b1:0b:
ff:63:dc:52:6a:bf:10:52:27:52:5e:fe:bd:6f:13:
9c:51:14:38:af:c2:59:79:85:51:a6:46:9d:1d:bf:
5b:09:37:e7:d6:3a:08:e4:ca:dc:b8:df:33:8b:18:
ee:fd:60:ef:f8:30:8f:f0:91:26:d8:26:33:55:69:
14:62:0f:8e:4c:43:66:f8:7f:a6:5e:db:e4:66:b2:
98:77:a2:50:d2:f7:8b:65:8d:08:c1:92:d0:a5:f4:
32:ed:b1:a1:ee:25:aa:42:f1:8a:37:0d:a1:b7:dc:
f7:91:17:0b:8f:a5:29:ae:83:a0:13:fb:23:21:49:
89:42:71:f3:50:dc:74:3f:d5:9c:cf:2d:b9:00:57:
b6:f1:63:a9:bc:44:d1:06:b2:79:5f:84:41:99:9b:
5c:4a:c1:2f:92:27:9e:ac:df:99:0e:91:87:68:24:
c5:54:fc:06:ea:5e:63:8e:66:4a:95:b5:3d:de:8e:
e5:5a:9c:f2:e9:af:a4:53:4d:9a:dc:bf:dc:fe:cb:
73:bb:55:65:f6:41:d2:49:91:fa:d6:62:bf:a7:9f:
c9:4b:38:46:3c:40:c1:2e:f0:18:a9:1b:30:90:86:
fc:ce:68:d8:f1:fd:22:2b:7e:21:c4:f5:5b:ec:b6:
f4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:54:9D:69:EB:CB:43:CF:3C:26:6C:17:EB:F0:DD:69:12:CA:D0:67
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/F1SdaevLQ888JmwX6_DdaRLK0Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.136.0-103.231.138.255
185.137.108.0/22
IPv6:
2a07:380::/29
2a0a:40c0::/29
Signature Algorithm: sha256WithRSAEncryption
14:71:2e:39:9d:ec:9b:9d:2d:72:ac:c7:51:50:5d:bf:e4:cf:
3d:f3:9d:ab:eb:60:75:98:0b:de:a6:d5:6a:b5:e7:e4:d4:6b:
b4:e4:11:08:6e:c7:6c:2c:ba:23:12:e8:88:f1:e3:56:fa:72:
6a:1e:ec:de:df:4d:44:77:6b:e4:51:da:5e:54:e7:97:2c:92:
14:dd:78:e1:4c:7e:b3:a7:d2:fd:36:b5:0a:e5:75:4b:68:c7:
fa:e5:3e:14:e5:fe:b7:7a:cc:e0:1f:bf:7d:90:b2:29:91:de:
29:a8:fc:b5:5a:a2:09:32:5b:91:95:e9:29:f3:48:28:ac:b0:
43:07:ff:a6:4d:bb:c9:5b:5f:76:24:64:fe:9d:aa:ef:3a:19:
38:c9:bc:a3:06:6a:d4:8a:3d:16:df:66:37:06:e2:e4:81:84:
af:89:11:6a:e7:e9:dd:31:05:55:f1:2f:8f:c6:3e:a0:93:ac:
ef:4e:85:1a:8a:4d:a2:25:f5:8b:78:29:87:92:ca:7b:b1:68:
60:45:07:b9:f1:fd:8b:db:7c:2b:61:af:46:12:94:cf:d9:69:
4c:bf:69:28:7c:f8:3a:1e:c6:32:dd:36:47:8b:bf:9b:8f:e8:
0c:26:3d:38:ef:f1:92:2e:15:ed:b7:7e:51:5a:18:12:16:eb:
cc:30:f2:00
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIED5Ip+zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NmJkZGFlMDRkYmNiMWY4MmY1NWIwNzgzMDdiYTRiMDg0Yjk5NGJiMB4XDTIyMDEw
MTEwMDMyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTc1NDlkNjllYmNi
NDNjZjNjMjY2YzE3ZWJmMGRkNjkxMmNhZDA2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM83tmVE9j6nhjt0lLEL/2PcUmq/EFInUl7+vW8TnFEUOK/C
WXmFUaZGnR2/Wwk359Y6COTK3LjfM4sY7v1g7/gwj/CRJtgmM1VpFGIPjkxDZvh/
pl7b5GaymHeiUNL3i2WNCMGS0KX0Mu2xoe4lqkLxijcNobfc95EXC4+lKa6DoBP7
IyFJiUJx81DcdD/VnM8tuQBXtvFjqbxE0QayeV+EQZmbXErBL5InnqzfmQ6Rh2gk
xVT8BupeY45mSpW1Pd6O5Vqc8umvpFNNmty/3P7Lc7tVZfZB0kmR+tZiv6efyUs4
RjxAwS7wGKkbMJCG/M5o2PH9Iit+IcT1W+y29CECAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBQXVJ1p68tDzzwmbBfr8N1pEsrQZzAfBgNVHSMEGDAWgBQmvdrgTbyx+C9V
sHgwe6SwhLmUuzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pyM2E0RTI4c2ZndlZiQjRNSHVrc0lTNWxMcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDYvZmViM2JhLWVlOTAtNGYwMy05ZTAwLWY2MTc5YTkxMGIxNS8x
L0YxU2RhZXZMUTg4OEptd1g2X0RkYVJMSzBHYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYv
ZmViM2JhLWVlOTAtNGYwMy05ZTAwLWY2MTc5YTkxMGIxNS8xL0pyM2E0RTI4c2Zn
dlZiQjRNSHVrc0lTNWxMcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwGgQCAAEwFDAMAwQDZ+eIAwQAZ+eKAwQCuYlsMBQE
AgACMA4DBQMqBwOAAwUDKgpAwDANBgkqhkiG9w0BAQsFAAOCAQEAFHEuOZ3sm50t
cqzHUVBdv+TPPfOdq+tgdZgL3qbVarXn5NRrtOQRCG7HbCy6IxLoiPHjVvpyah7s
3t9NRHdr5FHaXlTnlyySFN144Ux+s6fS/Ta1CuV1S2jH+uU+FOX+t3rM4B+/fZCy
KZHeKaj8tVqiCTJbkZXpKfNIKKywQwf/pk27yVtfdiRk/p2q7zoZOMm8owZq1Io9
Ft9mNwbi5IGEr4kRaufp3TEFVfEvj8Y+oJOs706FGopNoiX1i3gph5LKe7FoYEUH
ufH9i9t8K2GvRhKUz9lpTL9pKHz4Oh7GMt02R4u/m4/oDCY9OO/xki4V7bd+UVoY
EhbrzDDyAA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:45 2024 by rpki-client on console-ams.rpki-client.org