Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/SLS38y8ZZJUgXBV7Gwm6x6ftYVk.roa
File: SLS38y8ZZJUgXBV7Gwm6x6ftYVk.roa (raw, json)
Hash identifier: AdX3eJgANsVZxTcaMeAz5fiVH1E8yj5BIFZKdCBZbIM=
Subject key identifier: 48:B4:B7:F3:2F:19:64:95:20:5C:15:7B:1B:09:BA:C7:A7:ED:61:59
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 01887BD366BE874B3A94063B5AD041CE3373
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/SLS38y8ZZJUgXBV7Gwm6x6ftYVk.roa
Signing time: Fri 02 Jun 2023 11:17:11 +0000
ROA not before: Fri 02 Jun 2023 11:17:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3177
IP address blocks: 195.28.11.0/24 maxlen: 24
103.215.223.0/24 maxlen: 24
103.215.221.0/24 maxlen: 24
103.215.222.0/24 maxlen: 24
103.215.220.0/24 maxlen: 24
2a05:63c0::/29 maxlen: 29
2a0f:c040::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:d3:66:be:87:4b:3a:94:06:3b:5a:d0:41:ce:33:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jun 2 11:17:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48b4b7f32f196495205c157b1b09bac7a7ed6159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:61:56:34:29:0f:1b:ca:b0:f6:75:a1:47:f1:
68:29:a2:3e:f2:cf:56:52:16:71:07:47:b6:0b:c0:
0c:f7:6e:04:72:d6:f8:a5:9b:fb:e3:97:2b:53:77:
cf:9c:2d:aa:19:c8:2c:2d:b4:80:3c:ae:6a:2d:1a:
7f:61:19:96:b5:13:33:d9:05:87:3e:e6:64:53:1f:
a0:63:98:f9:22:2d:e8:80:56:08:00:02:41:78:56:
e8:5d:e9:e1:66:89:78:24:f2:67:fe:ae:43:28:d9:
c9:71:3f:b4:d8:2f:8e:c7:f3:13:d3:12:d1:fc:b3:
97:dc:b1:87:34:ef:06:bd:18:59:9f:96:b7:cf:6d:
ff:3d:9f:e0:2d:c7:e1:3c:a1:26:57:a8:ed:43:3c:
72:1f:dc:43:18:cf:ae:21:18:74:18:05:5b:67:50:
32:69:8a:fe:8c:e9:ca:ec:60:8e:46:43:1e:02:b4:
e8:00:2e:96:fc:3a:4c:d2:dc:07:1c:01:88:1f:d1:
f1:5f:9f:a9:f8:07:c6:1f:b7:e7:28:b7:9f:e0:1b:
6b:5c:af:e6:40:b0:65:67:f7:10:36:3e:98:9b:1a:
72:fc:59:d0:58:46:91:31:57:d3:e1:77:de:5f:e9:
c7:dc:d1:2d:b7:fe:f3:3d:4c:ca:e4:20:41:65:e0:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B4:B7:F3:2F:19:64:95:20:5C:15:7B:1B:09:BA:C7:A7:ED:61:59
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/SLS38y8ZZJUgXBV7Gwm6x6ftYVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.220.0/22
195.28.11.0/24
IPv6:
2a05:63c0::/29
2a0f:c040::/29
Signature Algorithm: sha256WithRSAEncryption
43:06:08:23:f2:d4:73:86:fe:39:46:0c:aa:08:7a:0d:e8:e8:
4d:39:d6:3d:8f:ec:c4:92:d4:e2:7f:78:bd:67:aa:44:34:54:
bd:42:61:df:ea:ed:7a:7b:af:63:86:f8:9e:12:cb:f8:ef:38:
b7:30:42:9c:47:72:56:b9:0d:80:4e:76:d5:ae:d0:43:c2:40:
a0:d7:5b:94:62:bb:12:01:a9:0f:68:87:3c:c8:6c:87:1a:04:
5a:a4:ee:94:1c:f7:43:1a:b5:e0:66:82:9a:3e:89:00:d7:de:
f6:ce:fb:9d:e1:6e:52:34:b8:37:9b:04:91:85:21:36:39:bc:
c4:9e:b5:eb:78:6f:d2:68:47:49:72:94:c0:a0:83:a7:13:f6:
3d:fa:ce:a9:a9:f8:2b:67:ea:0f:7a:88:08:83:62:fb:2c:c8:
6a:60:ef:a9:ef:c0:12:b2:2c:08:3f:55:a8:44:75:22:6f:03:
08:fc:06:05:ec:4a:2f:49:1d:92:ac:34:25:4d:44:51:d8:f7:
de:70:4b:16:92:1f:ee:18:6a:38:fc:6c:2b:b3:ec:c2:d3:76:
d8:89:21:6e:88:84:f3:4b:51:b3:b0:f9:2b:dc:85:2d:11:c2:
ae:f2:75:09:c0:a9:e8:26:67:7a:dc:06:ab:ea:f0:c3:64:7e:
fc:4c:af:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:01 2025 by rpki-client