Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XZ1FOWBbY84qHUplc_Tm-EwewQI.roa
File: XZ1FOWBbY84qHUplc_Tm-EwewQI.roa (raw, json)
Hash identifier: m8aGNZwfS0sQVJrl4ucQ/ir6DIEIeywG9g3WmZG5KcQ=
Subject key identifier: 5D:9D:45:39:60:5B:63:CE:2A:1D:4A:65:73:F4:E6:F8:4C:1E:C1:02
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018515DC8D59DD04B33F20234F72F70A1321
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XZ1FOWBbY84qHUplc_Tm-EwewQI.roa
Signing time: Thu 15 Dec 2022 12:57:33 +0000
ROA not before: Thu 15 Dec 2022 12:57:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 103.227.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:dc:8d:59:dd:04:b3:3f:20:23:4f:72:f7:0a:13:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 15 12:57:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d9d4539605b63ce2a1d4a6573f4e6f84c1ec102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:68:47:47:08:74:4b:7c:b5:18:b6:b1:25:
5c:f7:28:01:ec:27:f1:5e:d6:66:b0:72:b5:db:c4:
af:d9:a4:cf:97:b6:40:12:cf:1a:16:e9:89:0c:ff:
4d:fc:ba:f6:1e:d5:76:27:67:88:c6:9e:e4:86:c5:
3b:2e:79:52:9b:6a:01:35:5e:20:39:b9:f2:77:98:
7c:17:32:3d:e3:97:39:db:30:10:fb:d3:e6:69:d6:
95:29:10:cf:82:bf:9e:32:e9:6d:25:f7:41:f3:c6:
55:b2:73:07:e1:89:8d:0d:77:7b:4b:28:6d:1f:17:
79:33:77:1c:2d:d6:cf:b8:99:f2:37:32:9d:84:09:
73:6f:69:ec:a8:12:c1:55:43:72:c3:03:81:cc:88:
68:17:16:74:b8:98:31:90:6d:1f:dc:a7:dd:38:bd:
e4:dc:11:ac:fb:23:f2:15:ab:dc:07:c3:8c:ac:65:
c2:96:2d:ee:0d:7a:e5:32:be:d5:3f:f5:db:dc:2c:
af:bd:5c:db:82:eb:4c:ec:fb:db:17:e2:2c:ac:c3:
fd:ab:85:9f:55:50:9d:15:00:38:ad:b6:ae:6e:b5:
20:01:e2:6a:ae:68:4b:dd:42:c6:1a:17:00:d1:a5:
8c:93:61:5c:e4:bb:53:0d:5a:6a:81:8f:cf:2b:54:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9D:45:39:60:5B:63:CE:2A:1D:4A:65:73:F4:E6:F8:4C:1E:C1:02
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XZ1FOWBbY84qHUplc_Tm-EwewQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.87.0/24
Signature Algorithm: sha256WithRSAEncryption
49:25:e8:75:98:7c:a7:c9:2f:eb:39:41:b8:c8:fa:9a:06:2b:
8c:84:f6:97:ad:74:b7:59:42:ae:8c:af:80:df:99:e8:e9:90:
fe:2c:ba:29:81:c9:dc:90:75:d7:6f:d4:e0:e6:3f:4e:aa:a2:
d4:c4:6e:ee:6d:e2:a7:f5:7e:47:9b:da:2e:cc:25:a7:7e:1e:
55:5a:ec:8e:6a:c8:c8:c4:00:9c:56:53:98:26:80:07:71:4a:
3e:7c:f4:aa:a1:d3:c8:f5:3e:b5:42:7b:14:d5:d9:53:4e:df:
7c:c0:bc:aa:a9:87:c5:73:35:37:20:99:b2:8e:92:b8:33:ba:
41:6c:ed:3e:ef:25:8c:45:0c:85:4d:c0:7f:87:7c:3e:2a:f9:
13:e3:62:9b:95:95:6e:77:c4:34:22:18:f8:ac:c9:fe:86:94:
2f:5a:4a:be:f9:b1:39:6f:79:eb:bb:29:80:da:f8:e8:c1:20:
56:93:53:7b:80:a0:1a:65:9d:3b:a0:39:ee:91:5e:14:4b:c4:
f2:b2:48:c6:48:4d:e9:78:26:ac:8d:6e:29:36:ee:74:cd:b7:
85:00:a9:b4:8f:9b:48:fd:e1:e0:c5:7e:78:75:fa:4d:f4:f2:
61:d5:0d:c4:65:63:b9:12:d9:c5:03:f7:53:cd:86:97:04:d2:
89:82:45:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUV3I1Z3QSzPyAjT3L3ChMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIxMjE1MTI1NzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDlkNDUzOTYwNWI2M2NlMmExZDRhNjU3M2Y0ZTZmODRjMWVjMTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh95oR0cIdEt8tRi2sSVc9ygB7Cfx
XtZmsHK128Sv2aTPl7ZAEs8aFumJDP9N/Lr2HtV2J2eIxp7khsU7LnlSm2oBNV4g
Obnyd5h8FzI945c52zAQ+9PmadaVKRDPgr+eMultJfdB88ZVsnMH4YmNDXd7Syht
Hxd5M3ccLdbPuJnyNzKdhAlzb2nsqBLBVUNywwOBzIhoFxZ0uJgxkG0f3KfdOL3k
3BGs+yPyFavcB8OMrGXCli3uDXrlMr7VP/Xb3CyvvVzbgutM7PvbF+IsrMP9q4Wf
VVCdFQA4rbaubrUgAeJqrmhL3ULGGhcA0aWMk2Fc5LtTDVpqgY/PK1RyhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF2dRTlgW2POKh1KZXP05vhMHsECMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvWFoxRk9XQmJZODRxSFVwbGNfVG0tRXdld1FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+NXMA0G
CSqGSIb3DQEBCwUAA4IBAQBJJeh1mHynyS/rOUG4yPqaBiuMhPaXrXS3WUKujK+A
35no6ZD+LLopgcnckHXXb9Tg5j9OqqLUxG7ubeKn9X5Hm9ouzCWnfh5VWuyOasjI
xACcVlOYJoAHcUo+fPSqodPI9T61QnsU1dlTTt98wLyqqYfFczU3IJmyjpK4M7pB
bO0+7yWMRQyFTcB/h3w+KvkT42KblZVud8Q0Ihj4rMn+hpQvWkq++bE5b3nruymA
2vjowSBWk1N7gKAaZZ07oDnukV4US8TyskjGSE3peCasjW4pNu50zbeFAKm0j5tI
/eHgxX54dfpN9PJh1Q3EZWO5EtnFA/dTzYaXBNKJgkUE
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:56 2025 by rpki-client