Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/JVUZQ1aIKzNCbeHJhgJxFQfQg6c.roa
File: JVUZQ1aIKzNCbeHJhgJxFQfQg6c.roa (raw, json)
Hash identifier: jKKGdCO9WXzTw2Os5YjHLlJespyPjslAEInDh7sYdr8=
Subject key identifier: 25:55:19:43:56:88:2B:33:42:6D:E1:C9:86:02:71:15:07:D0:83:A7
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 018BDC93E3DEB8097A43CEC3C798ABF2927B
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/JVUZQ1aIKzNCbeHJhgJxFQfQg6c.roa
Signing time: Fri 17 Nov 2023 09:19:21 +0000
ROA not before: Fri 17 Nov 2023 09:19:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138915
IP address blocks: 103.213.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:93:e3:de:b8:09:7a:43:ce:c3:c7:98:ab:f2:92:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Nov 17 09:19:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2555194356882b33426de1c98602711507d083a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:1d:f6:9f:6f:01:72:a6:5b:a1:a7:c4:30:
aa:53:18:4b:3d:33:34:5b:65:50:eb:c4:f6:aa:e9:
e7:3e:ab:3b:23:13:c5:69:18:80:94:8c:4b:f4:ec:
b4:98:2b:f9:b8:3c:37:66:12:69:e6:9c:7a:9e:4d:
e7:33:d8:83:88:79:4d:d1:8f:8e:92:47:56:69:08:
7d:45:b3:75:1b:8c:c2:80:fc:63:23:c7:af:1d:66:
00:71:f2:93:93:74:36:1e:02:9d:af:a2:55:5e:72:
1c:12:8a:65:49:eb:78:d2:40:98:72:41:bf:b2:9b:
82:9f:c0:0c:89:00:54:74:0a:da:46:2f:2f:54:2e:
63:34:86:01:f5:a0:f5:80:8c:aa:62:71:8c:05:9b:
39:e1:80:3a:02:c8:e3:58:98:c5:ce:70:d7:1e:40:
66:66:bf:f6:d8:3d:2e:a9:f2:96:78:73:43:b9:e9:
1a:20:cf:81:96:4c:cc:a3:f3:12:2a:96:d5:80:df:
15:57:d6:22:a0:fa:ce:5b:40:68:75:a0:76:19:89:
b0:a2:cb:88:94:e2:14:ff:48:a0:c6:c7:a6:cd:62:
01:ca:dc:53:13:fd:2a:a7:9d:a7:65:ba:e4:d6:d4:
fc:0e:98:0e:2b:97:1f:89:e4:67:99:67:0a:51:3d:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:55:19:43:56:88:2B:33:42:6D:E1:C9:86:02:71:15:07:D0:83:A7
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/JVUZQ1aIKzNCbeHJhgJxFQfQg6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.248.0/24
Signature Algorithm: sha256WithRSAEncryption
66:50:d5:e7:e8:ae:e1:f2:23:ce:09:ff:5f:98:42:9a:c4:f2:
1f:6e:d1:b6:19:5c:b9:94:d3:f5:78:48:ff:f4:bd:72:fb:1f:
91:3d:22:59:31:a9:41:98:10:1b:ff:c3:a2:51:5a:84:76:a3:
0b:5c:34:30:6b:c5:7e:14:75:b5:1c:50:a6:fc:da:4e:6d:59:
b2:97:45:13:d8:d5:19:2c:4f:1a:e7:92:de:80:6d:d8:01:5c:
81:f2:ce:f0:88:65:cb:28:50:8b:e2:9f:b3:ee:ad:f4:10:73:
ab:51:2f:b2:70:2b:fb:da:fa:55:3a:23:23:f7:3c:52:a9:cf:
cc:ca:3a:fc:39:fd:49:37:bd:a3:28:78:f1:9e:96:62:c8:21:
bc:cd:9e:bd:51:87:1e:50:37:05:4a:43:cb:b6:13:8f:31:07:
cd:aa:30:40:49:b9:a5:7f:0a:67:fd:14:e6:95:1e:03:6b:26:
4f:4f:55:56:f6:66:f9:e0:3a:72:f4:9f:c3:a7:37:4c:43:3c:
9d:2c:d4:ad:2f:66:f4:41:fe:18:e9:82:aa:03:a6:22:ea:1c:
29:8f:01:87:75:c9:5b:55:ef:ac:a7:95:a4:62:04:50:ba:82:
f8:b5:da:37:e2:23:6a:b7:b2:fa:b0:24:a7:18:ac:61:8d:b3:
18:fb:54:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvck+PeuAl6Q87Dx5ir8pJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjMxMTE3MDkxOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTU1MTk0MzU2ODgyYjMzNDI2ZGUxYzk4NjAyNzExNTA3ZDA4M2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodod9p9vAXKmW6GnxDCqUxhLPTM0
W2VQ68T2qunnPqs7IxPFaRiAlIxL9Oy0mCv5uDw3ZhJp5px6nk3nM9iDiHlN0Y+O
kkdWaQh9RbN1G4zCgPxjI8evHWYAcfKTk3Q2HgKdr6JVXnIcEoplSet40kCYckG/
spuCn8AMiQBUdAraRi8vVC5jNIYB9aD1gIyqYnGMBZs54YA6AsjjWJjFznDXHkBm
Zr/22D0uqfKWeHNDuekaIM+BlkzMo/MSKpbVgN8VV9YioPrOW0BodaB2GYmwosuI
lOIU/0igxsemzWIBytxTE/0qp52nZbrk1tT8DpgOK5cfieRnmWcKUT0TLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCVVGUNWiCszQm3hyYYCcRUH0IOnMB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvSlZVWlExYUlLek5DYmVISmhnSnhGUWZRZzZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9X4MA0G
CSqGSIb3DQEBCwUAA4IBAQBmUNXn6K7h8iPOCf9fmEKaxPIfbtG2GVy5lNP1eEj/
9L1y+x+RPSJZMalBmBAb/8OiUVqEdqMLXDQwa8V+FHW1HFCm/NpObVmyl0UT2NUZ
LE8a55LegG3YAVyB8s7wiGXLKFCL4p+z7q30EHOrUS+ycCv72vpVOiMj9zxSqc/M
yjr8Of1JN72jKHjxnpZiyCG8zZ69UYceUDcFSkPLthOPMQfNqjBASbmlfwpn/RTm
lR4DayZPT1VW9mb54Dpy9J/DpzdMQzydLNStL2b0Qf4Y6YKqA6Yi6hwpjwGHdclb
Ve+sp5WkYgRQuoL4tdo34iNqt7L6sCSnGKxhjbMY+1T3
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:55:41 2025 by rpki-client