Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/YtlNTpDiUT7jVvFlU7AzCZZ82XU.roa
File: YtlNTpDiUT7jVvFlU7AzCZZ82XU.roa (raw, json)
Hash identifier: IbrOsb4yphx9s4kS5IWoukhHdx37gsUsV0aYuaRlal8=
Subject key identifier: 62:D9:4D:4E:90:E2:51:3E:E3:56:F1:65:53:B0:33:09:96:7C:D9:75
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 0183D135EEFA83604BAE34A0BFB213F041E8
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/YtlNTpDiUT7jVvFlU7AzCZZ82XU.roa
Signing time: Thu 13 Oct 2022 11:58:36 +0000
ROA not before: Thu 13 Oct 2022 11:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213222
IP address blocks: 103.231.139.0/24 maxlen: 24
103.231.138.0/24 maxlen: 24
185.137.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d1:35:ee:fa:83:60:4b:ae:34:a0:bf:b2:13:f0:41:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Oct 13 11:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62d94d4e90e2513ee356f16553b03309967cd975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:aa:1b:48:d6:a9:83:40:b3:89:6b:f9:fe:
a5:f5:ce:05:f6:5c:bc:1b:63:db:15:32:e7:df:d3:
be:a7:88:ab:d2:e4:79:17:a9:33:be:df:c8:b1:15:
79:33:20:33:31:72:ee:91:63:40:08:21:6a:6e:38:
b7:e7:3b:cd:5c:1d:49:d9:26:c4:b6:64:59:72:3a:
d1:d9:2e:65:56:10:82:4f:64:26:d7:17:ea:a9:cb:
58:e1:df:98:71:ca:03:f7:37:47:cd:85:12:bf:8d:
e9:de:61:b2:2e:8f:60:7e:33:b3:fa:90:a5:3d:dc:
54:9b:f1:65:08:5a:e2:24:f9:97:8e:4c:72:6e:5d:
a0:b4:6f:e7:86:a4:cf:49:4f:a6:a4:7b:d0:c3:25:
b4:e5:a3:95:1f:cb:28:70:90:4c:8e:ed:f5:e3:3e:
fb:f4:e9:87:07:20:1b:74:f1:50:d2:6d:f2:e4:3b:
d9:2d:45:2e:7a:b5:f5:0e:f0:91:50:38:9d:0b:2e:
1f:f2:65:2c:0b:75:b1:b5:47:e9:eb:98:d5:87:36:
60:12:8a:90:1a:2d:98:1f:c0:bb:79:61:e6:a5:99:
4b:b2:ab:f4:6b:42:6c:a2:54:ef:9e:16:4b:5c:0d:
94:bb:60:84:40:a7:a5:00:a2:46:0f:da:d7:db:f2:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D9:4D:4E:90:E2:51:3E:E3:56:F1:65:53:B0:33:09:96:7C:D9:75
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/YtlNTpDiUT7jVvFlU7AzCZZ82XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.138.0/23
185.137.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:af:a0:ca:0e:b0:3b:8f:63:d3:03:cb:c5:d1:3a:a2:d9:7b:
cf:75:ba:12:61:65:14:59:5a:52:6b:9e:99:9d:8d:a1:ed:64:
a2:d9:a3:8b:49:72:1e:66:ea:c6:25:11:03:bb:61:79:5b:9b:
98:70:e9:e9:23:34:2c:4c:49:26:60:c2:f7:da:f4:0f:4e:f3:
f9:34:32:d5:b2:83:9c:22:bf:40:a1:db:02:78:57:24:aa:c9:
1b:3d:5e:9f:25:b0:64:51:ac:d9:19:59:dd:91:13:4d:a3:bc:
c2:29:e7:14:2a:7c:35:6a:19:dd:e8:65:9a:70:b3:4b:7b:e1:
83:08:6e:ba:c3:9e:c1:74:86:75:42:78:9b:8b:93:f1:ee:ea:
8e:e8:1c:b6:2e:87:11:ed:53:c7:48:03:ef:78:65:2f:09:b6:
10:fe:e9:ae:d3:36:2a:0d:3a:b6:29:14:07:56:5e:80:d2:b7:
b8:22:94:1a:9c:b7:dd:64:4b:21:ab:c4:f1:93:d5:b1:a6:f6:
2a:90:04:88:84:8e:c7:a2:57:2c:e5:0f:5e:fd:1b:71:a6:05:
a8:cc:88:c8:4e:08:48:9a:c2:58:ce:17:9b:cf:cf:e5:e9:76:
04:0c:2e:4d:7d:23:86:90:de:0d:5c:b4:20:20:ad:b5:eb:57:
df:1d:9d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:45 2024 by rpki-client on console-ams.rpki-client.org