Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/VP5bZ3RyC237ot6J1Zr0RxMw_MU.roa
File: VP5bZ3RyC237ot6J1Zr0RxMw_MU.roa (raw, json)
Hash identifier: v/V3hYI/vxJEkZXkAnfAORgsVPd3+sDNjEogZbTCTxM=
Subject key identifier: 54:FE:5B:67:74:72:0B:6D:FB:A2:DE:89:D5:9A:F4:47:13:30:FC:C5
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 018BD5CAC425D78230ED5415E6EBA78DBB73
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/VP5bZ3RyC237ot6J1Zr0RxMw_MU.roa
Signing time: Thu 16 Nov 2023 01:41:57 +0000
ROA not before: Thu 16 Nov 2023 01:41:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6204
IP address blocks: 103.246.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d5:ca:c4:25:d7:82:30:ed:54:15:e6:eb:a7:8d:bb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Nov 16 01:41:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54fe5b6774720b6dfba2de89d59af4471330fcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:28:12:ba:81:05:e4:a9:25:d5:2c:0c:5b:4c:
b8:b2:b6:fc:a5:4b:43:4f:cd:51:f4:18:d3:6e:d5:
ea:63:78:dc:a4:80:76:6d:a9:ad:26:b4:7f:5b:e7:
6d:22:bf:06:92:47:8b:32:49:3e:80:a0:88:44:65:
59:a6:22:d1:98:1d:fa:8d:d8:a9:78:01:90:46:32:
a6:84:33:1e:39:ec:cf:bb:48:b4:a4:ce:d5:b6:73:
0b:2c:34:1a:98:e2:00:7d:27:28:89:e6:ca:cd:43:
ab:f0:0d:63:68:44:97:60:92:af:75:75:b9:0e:54:
3f:8f:91:6a:df:36:4b:e0:bc:15:d3:76:e2:c2:94:
87:ea:db:65:d7:6f:ce:de:24:96:db:b1:77:05:3a:
0d:3b:4e:94:53:59:83:0a:7e:cb:10:6d:8b:dc:ce:
17:2b:2f:c8:b5:12:8b:79:3f:55:0c:40:db:af:a6:
bf:c5:70:49:ab:e1:6c:38:9e:3f:b2:6b:75:e6:39:
f5:15:8b:ad:e5:e7:0d:8d:73:3b:75:c5:3b:cf:17:
b1:54:d1:51:cf:90:5e:09:16:8d:b1:ea:e6:44:72:
9e:ca:82:ac:e5:c3:01:07:1f:c2:95:25:8a:58:d6:
e6:5f:0a:b9:4c:a9:6a:c5:de:cc:2f:49:ac:19:90:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FE:5B:67:74:72:0B:6D:FB:A2:DE:89:D5:9A:F4:47:13:30:FC:C5
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/VP5bZ3RyC237ot6J1Zr0RxMw_MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.246.249.0/24
Signature Algorithm: sha256WithRSAEncryption
42:54:02:09:14:77:1b:98:9a:d7:48:f1:8a:51:fe:0c:77:16:
5c:a3:d3:d9:ca:79:50:dc:b1:98:c7:d0:b1:9b:11:fe:fc:46:
4c:84:34:20:f0:53:a2:77:47:e7:a4:30:b9:fe:18:18:90:55:
d9:96:81:a1:4c:ef:2c:9c:50:ac:36:f4:ce:b9:19:32:07:8c:
eb:ca:27:85:ef:83:fe:1e:b3:c9:76:fa:6a:ab:6b:72:1c:b1:
23:95:b8:a0:f8:c6:3d:b6:ce:0d:1d:f5:8a:c7:f6:02:85:37:
0f:88:60:e0:39:a8:3e:4a:a8:04:94:3c:42:11:51:d5:8b:68:
e8:e2:c3:71:4d:23:cd:ca:00:a1:74:1f:d0:b5:a1:3f:7a:78:
49:55:cf:e7:a6:49:9f:68:91:9e:03:1a:2f:67:cd:83:a3:78:
ea:f8:6d:15:5d:6e:9d:d3:43:77:6a:ff:1a:df:81:73:9c:05:
50:c6:7e:bb:72:03:cc:37:64:00:0b:92:b3:aa:8e:f7:41:00:
ec:f1:83:65:66:5f:8b:06:9d:43:0e:a6:3d:ea:e1:b9:05:7a:
66:fc:1a:9c:5e:51:f5:18:f3:bc:29:20:e8:40:1d:7c:27:68:
b6:ad:7c:c7:fe:cb:3c:f2:a0:01:3f:98:bc:ab:35:4f:c2:90:
82:77:a8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:26 2025 by rpki-client