Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/32njV9urqYG3tIQiclPZ6S_-XVc.roa
File: 32njV9urqYG3tIQiclPZ6S_-XVc.roa (raw, json)
Hash identifier: 7U9RRewKZgxtzdTLl0RISNgmOuzG3EKWSj+ucHCYCas=
Subject key identifier: DF:69:E3:57:DB:AB:A9:81:B7:B4:84:22:72:53:D9:E9:2F:FE:5D:57
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01886DBA9648833ADD51D3C10929B88E34E8
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/32njV9urqYG3tIQiclPZ6S_-XVc.roa
Signing time: Tue 30 May 2023 17:35:24 +0000
ROA not before: Tue 30 May 2023 17:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6d:ba:96:48:83:3a:dd:51:d3:c1:09:29:b8:8e:34:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 30 17:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df69e357dbaba981b7b484227253d9e92ffe5d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:43:86:5e:3c:e1:22:28:ef:2b:b4:f1:c1:
31:ad:69:f7:72:fd:40:37:7c:ac:b5:99:e9:57:81:
a3:a8:54:48:55:02:7a:a0:c3:cc:91:de:e7:0c:58:
69:d8:10:14:d9:cb:b0:b6:fe:47:20:d5:74:e4:3d:
c5:c0:f0:2e:f3:a5:b5:b9:52:48:f7:16:c6:8a:1e:
5a:08:9c:c1:df:b5:45:e4:f3:4b:c0:d7:d5:d2:69:
7f:b2:00:e7:79:86:d4:41:76:7d:50:86:bd:de:55:
32:62:42:c3:7d:fd:19:83:fb:c5:ed:49:53:4f:31:
e6:92:81:b7:b8:a0:89:54:bf:c0:56:8c:cc:05:37:
02:14:35:94:d7:62:c6:98:08:60:bd:c9:74:2d:47:
0e:73:7f:e7:34:62:c4:b0:d6:29:cb:e8:e6:0d:8a:
c2:97:f8:de:0a:e6:66:60:45:b2:01:4f:63:a8:d9:
22:0d:f4:b9:d3:a9:9e:2e:d5:fc:27:d9:f7:1d:3a:
f7:1a:c6:91:c7:09:86:4d:92:1e:09:fa:2a:c5:a1:
ad:2e:bf:e5:8b:1b:64:f5:22:91:79:36:28:c6:0d:
69:bf:c9:e8:a8:b2:88:31:83:9f:8a:d2:a4:95:e5:
11:e7:2d:b3:db:9c:0a:fa:47:0f:46:0f:46:1c:92:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:69:E3:57:DB:AB:A9:81:B7:B4:84:22:72:53:D9:E9:2F:FE:5D:57
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/32njV9urqYG3tIQiclPZ6S_-XVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.57.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:9c:eb:8f:33:0e:31:74:66:08:5e:7f:6e:73:d6:7c:ee:54:
f2:37:a1:fb:06:b9:bf:fd:27:19:36:37:f3:1e:81:1e:83:bb:
a1:bd:44:7f:8e:56:3d:79:b7:10:83:3c:5b:5b:97:41:39:99:
21:84:39:de:18:d4:43:89:94:bf:5f:ee:af:6b:43:7c:f3:76:
85:80:49:8b:28:48:12:f6:da:e4:51:4e:96:72:1c:c4:6b:42:
53:91:a0:c1:9d:5b:a6:dc:4c:0c:bc:af:90:3e:67:44:32:61:
85:6c:02:1d:43:ee:fb:57:29:25:40:95:a4:69:6e:23:7b:6c:
12:2c:a3:4a:e1:9f:3b:8e:9e:64:c4:f3:7e:de:0b:28:49:96:
ac:4c:f9:eb:d9:39:b8:9a:d6:80:fb:dc:19:86:53:2c:5b:d8:
63:0b:18:36:ca:18:d7:a8:d1:4b:dc:a8:1e:09:c8:d6:68:7c:
32:80:fe:ff:c6:4a:fc:5b:9a:6a:86:21:d1:b9:a2:9d:52:1d:
42:fb:12:5a:77:84:33:21:4f:c0:ff:65:bd:32:bf:25:4c:1f:
d8:5b:4c:8f:07:72:b0:f7:ea:a5:0c:98:39:26:41:a0:19:30:
ea:41:b4:a9:3a:37:d4:57:da:72:a0:ec:a7:93:f1:18:d9:65:
9a:e7:c0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:02 2025 by rpki-client