Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OcE8LphQz71Vz9xy4K9SSy-irLU.roa
File: OcE8LphQz71Vz9xy4K9SSy-irLU.roa (raw, json)
Hash identifier: pWmnXUJ/qlGnEG+kS8hPU0ucnuwRDyyf3SlxAPPc0wY=
Subject key identifier: 39:C1:3C:2E:98:50:CF:BD:55:CF:DC:72:E0:AF:52:4B:2F:A2:AC:B5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018210FAD48060AB22EC2A6F21FD90A63609
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OcE8LphQz71Vz9xy4K9SSy-irLU.roa
Signing time: Mon 18 Jul 2022 11:04:10 +0000
ROA not before: Mon 18 Jul 2022 11:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 103.227.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:10:fa:d4:80:60:ab:22:ec:2a:6f:21:fd:90:a6:36:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 18 11:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39c13c2e9850cfbd55cfdc72e0af524b2fa2acb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:92:22:e6:0a:ef:4a:1c:df:b7:07:33:d9:14:
34:f5:3e:c6:0f:e0:01:3e:71:6b:0e:99:45:db:ca:
11:6d:a1:97:4c:c2:cf:d4:ee:3d:99:01:b0:4b:e2:
ca:78:02:e5:a7:3c:98:17:8d:61:92:ca:35:93:16:
20:e9:ab:4d:f9:fb:c0:f5:ad:e8:b9:b4:1b:dd:6e:
5d:bd:9c:9e:5e:b7:65:2c:a5:19:b1:a9:50:cc:e8:
f5:9a:b8:f1:8f:89:62:c1:b2:c8:e1:50:1e:15:0c:
65:dc:68:e9:cd:59:e1:84:d6:08:65:04:78:f4:75:
18:bf:8d:f5:55:62:ef:01:07:3f:9f:56:f3:61:81:
c1:75:49:58:61:75:07:ec:e5:b0:16:4b:2f:c7:86:
a3:ac:66:3d:06:6f:89:9a:9b:8c:9e:c8:5c:91:bb:
c7:4d:c7:cd:58:08:3e:d6:da:96:40:a8:02:e0:24:
ff:d8:2b:be:8d:eb:49:62:d3:59:a3:a5:9b:31:e5:
e1:95:bd:1b:0a:d2:85:95:6e:27:18:c1:66:81:42:
28:ed:1d:8a:16:b4:fc:f1:f4:ff:af:59:6d:fc:b4:
04:2b:92:40:9b:df:90:8d:eb:d9:c9:41:68:e2:2a:
54:19:7b:55:4e:f4:7a:73:3a:fd:38:e9:02:b9:e0:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C1:3C:2E:98:50:CF:BD:55:CF:DC:72:E0:AF:52:4B:2F:A2:AC:B5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OcE8LphQz71Vz9xy4K9SSy-irLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.86.0/24
Signature Algorithm: sha256WithRSAEncryption
23:35:70:db:bd:fc:52:d2:f1:da:a8:19:85:7b:d0:70:37:da:
25:82:0a:ba:c8:64:91:f7:93:16:66:03:c5:26:cc:ca:c4:0a:
14:b4:a5:a7:db:ec:bd:4d:fb:e7:0f:2b:03:01:cd:b9:37:63:
23:83:ea:fc:24:32:f9:1b:77:4c:b1:64:03:4e:be:f5:b4:71:
84:29:bf:45:fd:c9:3b:c8:1b:e2:9a:5f:4e:81:0d:c9:d2:76:
53:4a:b7:4d:b5:89:70:7b:70:60:91:dd:43:4b:42:fe:c3:94:
57:86:e5:99:21:0d:20:9c:e8:36:71:fa:e1:41:dd:84:29:b0:
e6:01:3e:38:3c:22:04:e8:c0:5b:1c:a5:d6:53:1c:e0:b0:c1:
86:b6:b0:d7:36:bc:dc:cd:f7:2c:9e:96:4d:48:e3:45:28:8e:
33:db:b8:49:86:e6:29:b9:dd:fa:ec:7e:88:af:83:af:9e:23:
22:29:15:21:6a:10:dd:7b:3d:fa:dc:dd:57:be:24:6b:6c:47:
83:02:42:8e:d0:a1:92:96:f8:50:b1:6c:f4:a7:a6:7b:2a:da:
80:ea:e2:c4:3b:95:04:f0:fb:f9:ea:a7:e1:8d:cd:67:97:33:
02:b7:3c:90:19:d7:9f:4d:14:f9:c4:91:e4:fe:b2:e4:0c:2e:
85:61:11:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:55 2025 by rpki-client