Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5B1eE7zMeYXQO0Mg-3KO7E0rPxY.roa
File: 5B1eE7zMeYXQO0Mg-3KO7E0rPxY.roa (raw, json)
Hash identifier: 7vJB3Dag3Z7zNDM4YfeGjAhxMuPKqhdsl6bu+K7i1eU=
Subject key identifier: E4:1D:5E:13:BC:CC:79:85:D0:3B:43:20:FB:72:8E:EC:4D:2B:3F:16
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0188A610B2F2641BA916632FE518A5433AA3
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5B1eE7zMeYXQO0Mg-3KO7E0rPxY.roa
Signing time: Sat 10 Jun 2023 16:08:12 +0000
ROA not before: Sat 10 Jun 2023 16:08:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.47.57.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a6:10:b2:f2:64:1b:a9:16:63:2f:e5:18:a5:43:3a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 10 16:08:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e41d5e13bccc7985d03b4320fb728eec4d2b3f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:70:c8:82:2b:5f:45:b9:98:46:1b:75:5d:
71:15:90:a9:ba:6f:9c:27:90:ae:e9:44:c8:c9:85:
39:63:ea:2e:5c:98:42:8d:9e:02:b2:c6:1a:ba:41:
70:f7:40:fd:cb:5f:20:1a:d6:08:81:36:f9:29:03:
13:d8:4d:24:ea:3b:e2:b4:9a:a8:7c:02:d3:4c:eb:
26:23:00:59:80:09:20:95:2d:ff:47:7c:e4:75:6e:
4a:ba:7b:57:ae:f2:e4:1e:64:0c:e3:1e:f0:7b:78:
b1:49:d6:43:f0:b2:d0:02:cc:e1:00:f0:cd:69:3d:
96:56:58:07:a2:12:04:05:d4:e1:f4:c2:db:bc:28:
16:f3:2d:27:21:76:1b:a2:d4:f3:9d:db:05:68:ca:
ab:31:ab:ef:e0:6c:93:e7:a3:27:db:01:01:6a:4e:
6d:aa:0e:c9:b4:d7:3c:43:c9:d6:66:2d:d3:21:72:
4a:ef:51:8a:4b:07:95:25:9c:9a:d6:b7:48:4a:c2:
3a:5d:d0:53:d8:27:97:62:d6:9b:54:13:12:cd:ed:
71:d1:ce:46:a3:91:5d:26:89:3b:f0:77:02:99:34:
ed:01:67:60:d3:25:94:02:3c:97:4e:7e:d3:9d:01:
70:b5:1c:b6:5b:a2:0a:09:f1:1e:f9:ae:66:67:ca:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1D:5E:13:BC:CC:79:85:D0:3B:43:20:FB:72:8E:EC:4D:2B:3F:16
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5B1eE7zMeYXQO0Mg-3KO7E0rPxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.238.0/24
103.47.57.0/24
Signature Algorithm: sha256WithRSAEncryption
21:72:de:93:1a:69:3f:a3:b3:7e:27:16:e7:f6:3e:da:a9:38:
c1:ce:62:89:33:d0:1c:97:e2:b4:5c:32:c1:3d:46:23:94:a9:
56:35:00:3e:ab:d0:ea:14:5f:42:f2:8e:fa:24:73:06:d9:60:
44:a2:ec:8d:86:0c:97:66:5a:de:3c:61:8c:04:1f:21:50:06:
12:8f:5e:ee:4c:1b:fa:d7:49:4d:06:b6:77:50:74:16:d8:2e:
57:03:e0:4c:44:e2:b1:09:7a:25:1c:12:9c:dc:b1:44:09:15:
9d:85:c1:d5:c5:5d:c0:43:96:26:b1:ea:33:b5:51:fc:e8:70:
3e:98:4b:16:7d:cb:31:60:99:50:15:26:ec:42:ed:f7:6a:3b:
de:2f:5b:03:07:d0:50:88:4f:25:ab:ee:5a:f2:6b:82:b6:4a:
2a:27:0e:b9:af:07:88:37:21:99:08:53:62:39:22:22:b3:e3:
c0:6f:45:87:52:35:7a:d2:98:ef:22:44:26:70:1f:c1:14:12:
5e:41:33:b7:ab:88:0b:6d:63:f1:91:33:8e:19:ec:06:38:6c:
cb:0e:69:77:31:81:80:5a:2b:9b:aa:97:ab:21:9e:95:e5:e5:
2d:2f:82:a4:fd:f0:c1:4a:53:38:fd:05:24:00:75:51:51:03:
68:ba:49:5f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYimELLyZBupFmMv5RilQzqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjMwNjEwMTYwODEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDFkNWUxM2JjY2M3OTg1ZDAzYjQzMjBmYjcyOGVlYzRkMmIzZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH5wyIIrX0W5mEYbdV1xFZCpum+c
J5Cu6UTIyYU5Y+ouXJhCjZ4CssYaukFw90D9y18gGtYIgTb5KQMT2E0k6jvitJqo
fALTTOsmIwBZgAkglS3/R3zkdW5KuntXrvLkHmQM4x7we3ixSdZD8LLQAszhAPDN
aT2WVlgHohIEBdTh9MLbvCgW8y0nIXYbotTzndsFaMqrMavv4GyT56Mn2wEBak5t
qg7JtNc8Q8nWZi3TIXJK71GKSweVJZya1rdISsI6XdBT2CeXYtabVBMSze1x0c5G
o5FdJok78HcCmTTtAWdg0yWUAjyXTn7TnQFwtRy2W6IKCfEe+a5mZ8rT/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOQdXhO8zHmF0DtDIPtyjuxNKz8WMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvNUIxZUU3ek1lWVhRTzBNZy0zS083RTByUHhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQADmbuAwQA
Zy85MA0GCSqGSIb3DQEBCwUAA4IBAQAhct6TGmk/o7N+Jxbn9j7aqTjBzmKJM9Ac
l+K0XDLBPUYjlKlWNQA+q9DqFF9C8o76JHMG2WBEouyNhgyXZlrePGGMBB8hUAYS
j17uTBv610lNBrZ3UHQW2C5XA+BMROKxCXolHBKc3LFECRWdhcHVxV3AQ5Ymseoz
tVH86HA+mEsWfcsxYJlQFSbsQu33ajveL1sDB9BQiE8lq+5a8muCtkoqJw65rweI
NyGZCFNiOSIis+PAb0WHUjV60pjvIkQmcB/BFBJeQTO3q4gLbWPxkTOOGewGOGzL
Dml3MYGAWiubqperIZ6V5eUtL4Kk/fDBSlM4/QUkAHVRUQNouklf
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:25 2025 by rpki-client