Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jZ86ytNh7XJUJhSyaBAvuzM1DoA.roa
File: jZ86ytNh7XJUJhSyaBAvuzM1DoA.roa (raw, json)
Hash identifier: LwMOP4TNEdfnFWCNs7C4NCo/7XDa/WxOHStiKkWyp20=
Subject key identifier: 8D:9F:3A:CA:D3:61:ED:72:54:26:14:B2:68:10:2F:BB:33:35:0E:80
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01889A521CC2BDFA3A2E290BFBB941FE9762
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jZ86ytNh7XJUJhSyaBAvuzM1DoA.roa
Signing time: Thu 08 Jun 2023 09:24:12 +0000
ROA not before: Thu 08 Jun 2023 09:24:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 103.227.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:52:1c:c2:bd:fa:3a:2e:29:0b:fb:b9:41:fe:97:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 8 09:24:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d9f3acad361ed72542614b268102fbb33350e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:c7:fd:b4:75:b0:05:dc:1c:4a:81:63:2e:
63:1d:bb:be:dc:4b:1c:68:06:34:19:bf:33:0b:c9:
35:ec:29:a7:fa:f0:8c:46:1b:e4:c1:65:1b:6d:ce:
f8:88:97:28:6d:31:91:ee:ea:64:b3:a2:d8:e2:a2:
31:74:7e:db:3b:07:47:eb:85:f1:54:6d:39:19:ca:
1f:a9:45:2b:d3:fe:7e:cd:6b:df:9f:14:74:5c:30:
6a:21:3c:96:0b:7e:ea:b1:4e:a8:b3:d4:51:21:87:
70:e7:c5:9c:d4:3a:25:39:5f:b5:fc:74:58:d4:2b:
0e:5b:8f:6b:b1:94:b1:da:2a:bd:fe:44:86:2e:05:
50:89:b3:61:7c:db:94:3c:ff:af:f0:99:a1:50:cb:
df:e0:34:96:65:31:b9:2b:ee:fc:a6:ee:00:cc:89:
36:e5:b9:a3:a9:32:18:dc:a4:2b:0b:3c:e5:18:e8:
e2:b6:e2:8b:53:30:8d:fa:dc:4c:ed:af:1e:27:d2:
09:70:cd:54:21:84:d1:25:cc:56:e9:38:e7:9f:2e:
9f:65:ef:ee:27:fd:42:64:78:ed:94:51:37:e6:b4:
45:d3:9e:a7:f2:eb:eb:63:31:a9:50:a7:17:81:51:
5a:33:7b:d9:38:7e:68:46:ef:13:ed:18:44:ad:de:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9F:3A:CA:D3:61:ED:72:54:26:14:B2:68:10:2F:BB:33:35:0E:80
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jZ86ytNh7XJUJhSyaBAvuzM1DoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.87.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f7:aa:29:dc:a9:8e:4a:b3:a2:b8:21:82:55:30:54:31:4c:
93:30:08:8b:76:85:fd:fc:ec:1c:bb:f9:69:e4:f1:d3:f2:5d:
0d:b3:16:77:a4:37:1d:5d:07:6e:16:6d:af:5e:f3:fb:9c:20:
39:e6:dd:59:2e:28:66:af:98:ed:76:48:09:68:f1:fc:0e:92:
90:fa:df:f5:71:cd:3c:e9:bc:89:30:7a:27:71:f9:c2:50:1d:
e1:94:e7:94:0c:0f:16:1d:76:81:e5:64:cd:2c:4f:a6:58:b1:
5a:85:66:61:4d:50:1a:d2:fd:53:36:6e:43:d0:ff:05:1e:75:
3f:6f:fd:cf:3e:ea:f6:02:e1:0e:66:77:c8:ae:c4:1f:8f:56:
ce:55:90:b3:21:2a:86:77:e1:1c:6d:6e:91:e2:48:0f:9a:0c:
be:23:0f:34:68:76:56:32:bc:6a:00:e8:4c:3a:10:13:49:5c:
c8:4c:33:ae:15:ba:53:84:41:27:21:4c:3b:39:6c:f8:3f:3b:
52:ca:47:99:84:dd:11:17:fd:76:a1:5f:35:c4:02:88:9c:17:
4f:9b:8b:cb:5b:f5:85:95:dc:1e:58:a5:7e:62:1a:69:c0:07:
c4:9d:e4:d3:02:35:92:d1:cc:4e:a2:5a:c7:31:dc:c7:1d:5c:
f0:9d:ef:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiaUhzCvfo6LikL+7lB/pdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwNjA4MDkyNDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDlmM2FjYWQzNjFlZDcyNTQyNjE0YjI2ODEwMmZiYjMzMzUwZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNnH/bR1sAXcHEqBYy5jHbu+3Esc
aAY0Gb8zC8k17Cmn+vCMRhvkwWUbbc74iJcobTGR7upks6LY4qIxdH7bOwdH64Xx
VG05GcofqUUr0/5+zWvfnxR0XDBqITyWC37qsU6os9RRIYdw58Wc1DolOV+1/HRY
1CsOW49rsZSx2iq9/kSGLgVQibNhfNuUPP+v8JmhUMvf4DSWZTG5K+78pu4AzIk2
5bmjqTIY3KQrCzzlGOjituKLUzCN+txM7a8eJ9IJcM1UIYTRJcxW6Tjnny6fZe/u
J/1CZHjtlFE35rRF056n8uvrYzGpUKcXgVFaM3vZOH5oRu8T7RhErd6dYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI2fOsrTYe1yVCYUsmgQL7szNQ6AMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvalo4Nnl0Tmg3WEpVSmhTeWFCQXZ1ek0xRG9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+NXMA0G
CSqGSIb3DQEBCwUAA4IBAQAo96op3KmOSrOiuCGCVTBUMUyTMAiLdoX9/Owcu/lp
5PHT8l0NsxZ3pDcdXQduFm2vXvP7nCA55t1ZLihmr5jtdkgJaPH8DpKQ+t/1cc08
6byJMHoncfnCUB3hlOeUDA8WHXaB5WTNLE+mWLFahWZhTVAa0v1TNm5D0P8FHnU/
b/3PPur2AuEOZnfIrsQfj1bOVZCzISqGd+EcbW6R4kgPmgy+Iw80aHZWMrxqAOhM
OhATSVzITDOuFbpThEEnIUw7OWz4PztSykeZhN0RF/12oV81xAKInBdPm4vLW/WF
ldweWKV+YhppwAfEneTTAjWS0cxOolrHMdzHHVzwne/e
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:23:02 2025 by rpki-client