Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-1BSFxSO7kmUO9Tf0MoRMsA9Su8.roa
File: 1-1BSFxSO7kmUO9Tf0MoRMsA9Su8.roa (raw, json)
Hash identifier: EAMuMWefmjiuMyiJc3wsRazPcau+Hj830iBUpXXsUAc=
Subject key identifier: FB:50:52:17:14:8E:EE:49:94:3B:D4:DF:D0:CA:11:32:C0:3D:4A:EF
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018BB51BC409F80460C4C1FBEBB1DB1EB9AB
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-1BSFxSO7kmUO9Tf0MoRMsA9Su8.roa
Signing time: Thu 09 Nov 2023 17:22:57 +0000
ROA not before: Thu 09 Nov 2023 17:22:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 103.47.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b5:1b:c4:09:f8:04:60:c4:c1:fb:eb:b1:db:1e:b9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 9 17:22:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb505217148eee49943bd4dfd0ca1132c03d4aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:cc:11:d0:17:db:02:23:91:36:d3:ec:de:
96:f9:cf:31:85:68:b8:f4:6c:3e:29:74:ea:7a:dd:
11:92:00:52:2b:55:a4:61:c7:c7:2c:6e:e4:f4:9d:
d3:34:ac:b5:f7:fa:5c:fb:13:90:b0:d9:45:cd:08:
8c:fa:2a:6b:51:e0:eb:20:57:e0:15:ed:64:65:1d:
3b:f8:4f:d1:c1:85:1e:32:92:47:1c:00:97:d9:65:
3d:da:7a:25:c4:6a:01:4d:fe:89:06:ab:8c:6f:c0:
b5:7a:37:c4:6b:04:4a:c7:48:2b:0b:11:dc:91:e5:
f5:f6:ff:c0:17:b1:cb:51:de:2c:5a:d4:ea:43:3b:
59:ab:16:52:6b:30:1d:58:3b:64:df:ec:1e:ea:fe:
9c:9a:0d:a3:63:21:02:58:43:33:4f:05:d3:cf:cc:
34:fb:80:ee:93:42:89:92:78:c5:12:70:74:64:0b:
cc:ac:9c:9e:b6:08:43:1d:0d:a3:b8:50:ba:97:e7:
77:68:36:e5:92:cc:1c:d8:07:eb:fd:45:64:59:87:
b4:5c:6e:2b:c7:80:61:7c:35:4f:d5:b6:2e:8e:3a:
43:78:d1:be:2e:ae:5a:4f:7d:17:95:fd:8c:d2:52:
75:ae:9b:2a:c6:95:7a:15:13:35:75:5a:01:69:0e:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:50:52:17:14:8E:EE:49:94:3B:D4:DF:D0:CA:11:32:C0:3D:4A:EF
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-1BSFxSO7kmUO9Tf0MoRMsA9Su8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
47:9b:72:25:63:84:55:69:15:c6:2e:07:ea:eb:a9:94:58:07:
da:73:54:63:f5:da:23:4d:78:a0:b7:ca:64:b2:3a:9e:3c:35:
c3:05:93:89:ef:06:45:8e:c7:16:40:9e:21:2a:5c:03:76:c1:
7f:a6:68:a3:97:2b:df:b9:54:0e:35:d7:33:dd:90:aa:72:8b:
67:e3:7f:e1:cb:a7:8b:87:06:12:04:85:6b:e4:25:9f:af:ce:
4e:d2:7e:28:e6:48:2f:4f:6d:48:9f:ed:3f:fe:b4:25:5d:46:
01:f3:e4:7b:f3:93:4e:7d:c5:5f:b1:7f:f9:e2:4b:eb:21:5b:
5e:71:e1:60:9e:df:15:ba:a7:96:29:f6:3c:29:a9:7d:3d:eb:
38:c6:21:3d:e4:13:66:a1:52:1d:30:4d:1c:02:3d:c4:b9:5b:
e9:96:dc:b3:10:96:62:09:b2:f4:66:27:5c:5d:18:ce:fd:91:
a3:d2:08:c9:61:44:cc:60:18:73:3d:32:67:f3:65:54:86:fc:
93:81:83:87:86:3d:2e:61:54:97:33:00:0f:e2:61:67:1d:97:
61:0e:fc:9a:bf:02:ad:4e:a3:34:4b:1f:2b:95:bd:bb:87:4e:
11:e8:b4:61:1c:6b:98:b5:e4:e5:1a:36:ef:9a:02:cf:4c:da:
f4:a2:b1:5b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYu1G8QJ+ARgxMH767HbHrmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjMxMTA5MTcyMjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjUwNTIxNzE0OGVlZTQ5OTQzYmQ0ZGZkMGNhMTEzMmMwM2Q0YWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY/MEdAX2wIjkTbT7N6W+c8xhWi4
9Gw+KXTqet0RkgBSK1WkYcfHLG7k9J3TNKy19/pc+xOQsNlFzQiM+iprUeDrIFfg
Fe1kZR07+E/RwYUeMpJHHACX2WU92nolxGoBTf6JBquMb8C1ejfEawRKx0grCxHc
keX19v/AF7HLUd4sWtTqQztZqxZSazAdWDtk3+we6v6cmg2jYyECWEMzTwXTz8w0
+4Duk0KJknjFEnB0ZAvMrJyetghDHQ2juFC6l+d3aDblkswc2Afr/UVkWYe0XG4r
x4BhfDVP1bYujjpDeNG+Lq5aT30Xlf2M0lJ1rpsqxpV6FRM1dVoBaQ6ZNwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPtQUhcUju5JlDvU39DKETLAPUrvMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvMS0xQlNGeFNPN2ttVU85VGYwTW9STXNBOVN1OC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWIvMWZmNDRmLTUxZDYtNDU0NS1hZDM2LWI0YjhkYjIwYjFm
Yi8xLzdodzBjc0phelRSelpMZldNU1lZcWpVd3kyTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcvOzAN
BgkqhkiG9w0BAQsFAAOCAQEAR5tyJWOEVWkVxi4H6uuplFgH2nNUY/XaI014oLfK
ZLI6njw1wwWTie8GRY7HFkCeISpcA3bBf6Zoo5cr37lUDjXXM92QqnKLZ+N/4cun
i4cGEgSFa+Qln6/OTtJ+KOZIL09tSJ/tP/60JV1GAfPke/OTTn3FX7F/+eJL6yFb
XnHhYJ7fFbqnlin2PCmpfT3rOMYhPeQTZqFSHTBNHAI9xLlb6ZbcsxCWYgmy9GYn
XF0Yzv2Ro9IIyWFEzGAYcz0yZ/NlVIb8k4GDh4Y9LmFUlzMAD+JhZx2XYQ78mr8C
rU6jNEsfK5W9u4dOEei0YRxrmLXk5Ro275oCz0za9KKxWw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:02 2025 by rpki-client