Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/W6RZvk6uLpLhJMyP3pOkvmMaZ3s.roa
File: W6RZvk6uLpLhJMyP3pOkvmMaZ3s.roa (raw, json)
Hash identifier: TcsNhL/NvBPwkubc8v1d+mzbMssf3gfEJJtTtREIDLA=
Subject key identifier: 5B:A4:59:BE:4E:AE:2E:92:E1:24:CC:8F:DE:93:A4:BE:63:1A:67:7B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01826DBB3B8CE5F222AF8299E69D1F88A58B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/W6RZvk6uLpLhJMyP3pOkvmMaZ3s.roa
Signing time: Fri 05 Aug 2022 11:19:23 +0000
ROA not before: Fri 05 Aug 2022 11:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43431
IP address blocks: 103.227.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:bb:3b:8c:e5:f2:22:af:82:99:e6:9d:1f:88:a5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 5 11:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ba459be4eae2e92e124cc8fde93a4be631a677b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:03:16:51:9e:dd:8d:8c:d7:b2:06:65:33:
a8:79:49:f4:82:3f:c4:97:57:c2:a5:31:b1:94:6f:
32:38:cc:fa:a6:64:e4:27:19:d9:f9:7c:f5:bf:f7:
21:b7:9f:14:61:00:98:97:a4:76:df:b8:68:8d:4d:
32:68:ff:ad:a7:d2:42:2f:df:84:ca:99:75:93:d0:
6d:e3:f9:c9:f0:b7:e3:d0:a7:ad:12:cd:ef:ed:86:
ca:b5:75:02:ba:3f:6a:ba:fa:7a:6d:46:cd:92:1c:
b4:b9:7b:14:25:95:e3:e8:d8:b0:d2:69:f0:6c:fc:
40:9e:0c:97:bd:52:7a:84:59:19:4d:e2:3f:62:36:
0e:84:a1:8b:17:8a:c0:49:2d:b7:23:c8:57:84:7a:
78:ec:9d:92:f8:35:b5:59:58:f4:2f:6a:4c:cf:60:
59:27:c2:8d:ba:ba:32:ad:b3:e4:4a:25:c5:7f:90:
2c:0e:c2:50:ae:a4:95:8b:35:8f:a6:31:93:0e:ef:
51:50:2c:f0:cf:b2:84:eb:81:44:d8:a9:11:26:e9:
cd:fd:bd:0b:dc:7a:6c:4f:91:95:a2:5e:11:d8:c8:
7d:0f:8b:2f:ed:ee:b9:bd:b7:cb:ad:99:0e:9f:a0:
55:ef:ab:87:36:da:7c:0d:77:18:50:3a:41:85:bd:
de:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A4:59:BE:4E:AE:2E:92:E1:24:CC:8F:DE:93:A4:BE:63:1A:67:7B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/W6RZvk6uLpLhJMyP3pOkvmMaZ3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.86.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a6:0d:ba:b7:21:ad:87:57:6e:dd:cc:b8:18:cc:8d:f0:b6:
fb:bd:b4:ee:17:35:46:22:dc:0d:54:b7:5e:f8:88:11:7d:1a:
cf:1a:4f:cd:2d:31:6b:d4:f1:49:5d:e3:cc:2d:b6:30:2d:ce:
9e:3b:db:15:0f:80:4a:24:71:b4:8d:6d:af:95:10:ef:a7:25:
ae:ae:a8:30:2d:c4:93:88:03:70:e2:ea:c3:c5:0f:ed:2b:e5:
f8:57:c6:c6:8f:be:f1:33:6b:fb:9e:5a:86:37:58:dc:2c:ea:
a2:6c:e6:db:88:37:b6:ff:dc:fd:db:0d:17:99:5c:03:9f:45:
9c:cf:77:61:55:98:e3:89:d7:33:c1:c3:ac:5d:32:d4:92:2c:
e4:35:bc:aa:d1:7a:71:31:b0:3d:9b:16:45:59:2e:11:61:cb:
4f:2d:a0:e1:26:a6:a9:27:19:55:da:de:76:d0:4c:aa:b2:a2:
b6:e0:e7:59:a7:90:63:1e:71:f6:5c:7c:46:d5:7d:f0:14:80:
26:39:fb:8f:aa:07:f2:d5:77:d2:7f:f8:d6:65:bb:7f:e2:0a:
4e:fa:61:d4:49:8d:3d:0f:b1:4a:0d:ee:05:94:9c:ef:75:16:
b0:29:32:4b:75:a8:49:96:cb:6f:b2:36:51:ed:d2:13:ee:7d:
58:97:9d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:46 2025 by rpki-client