Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CP1Zb0uCKm8bjcnIsm15JgMp96g.roa
File: CP1Zb0uCKm8bjcnIsm15JgMp96g.roa (raw, json)
Hash identifier: nGaRIRfBp4ScouEp219DPVPmVD+SYNdvu20PYuR3uzk=
Subject key identifier: 08:FD:59:6F:4B:82:2A:6F:1B:8D:C9:C8:B2:6D:79:26:03:29:F7:A8
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01878FF9BE9BE47B9CD86CB1CF0ECF6530B1
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CP1Zb0uCKm8bjcnIsm15JgMp96g.roa
Signing time: Mon 17 Apr 2023 16:08:41 +0000
ROA not before: Mon 17 Apr 2023 16:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 103.47.58.0/24 maxlen: 24
14.102.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8f:f9:be:9b:e4:7b:9c:d8:6c:b1:cf:0e:cf:65:30:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 17 16:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08fd596f4b822a6f1b8dc9c8b26d79260329f7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:2d:2f:53:de:26:52:3e:63:31:8c:5a:14:
90:7d:51:ec:01:72:05:f0:cf:b9:81:cc:8e:9e:d7:
76:a8:d8:e5:cb:1d:80:54:3f:6a:45:eb:a7:68:0d:
57:fa:6f:74:f4:67:9a:75:98:5f:9b:c9:80:2f:dd:
a4:a5:e6:f6:6b:1e:3d:90:fd:29:71:82:90:cf:9c:
6b:de:01:a2:86:c2:6c:c3:5e:60:ae:c4:ae:9f:8d:
24:53:04:66:70:c2:8a:d4:8d:d9:42:5a:a0:dc:25:
18:d2:9f:d6:b2:aa:44:56:40:4a:d9:63:1e:97:79:
b1:42:59:57:0a:a3:77:8a:62:24:65:95:23:2f:d0:
4d:11:39:0d:92:d1:2d:5b:7e:18:9a:c9:02:a9:2c:
c3:59:a7:12:e9:3b:eb:21:ca:6e:95:40:bc:d0:55:
72:d6:fc:ba:d7:41:ef:99:20:c0:fb:af:db:09:7b:
55:11:89:00:e0:28:ad:ce:b2:a3:37:30:91:1c:6e:
6b:16:48:0d:de:47:2b:6c:b3:ba:44:4b:ac:ef:57:
eb:ec:67:29:bb:6f:80:7c:b9:b6:43:63:03:5c:27:
ab:97:bb:8e:76:aa:9d:a8:ad:b3:f7:c1:05:d2:cf:
77:45:76:06:e6:1a:71:b1:d5:b8:5f:c6:86:a1:06:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FD:59:6F:4B:82:2A:6F:1B:8D:C9:C8:B2:6D:79:26:03:29:F7:A8
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CP1Zb0uCKm8bjcnIsm15JgMp96g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.235.0/24
103.47.58.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:51:f6:ac:6a:df:34:90:28:03:d6:94:dc:06:17:32:5c:4b:
14:44:5e:be:c8:bb:97:05:24:c5:67:0b:d1:e7:45:05:4f:f8:
8d:49:7c:67:38:55:80:e6:bd:73:8c:a9:bb:38:40:ac:10:a2:
a4:40:cc:10:f3:21:9f:04:e0:39:0a:82:09:35:17:b8:3f:be:
84:a3:88:a3:d9:23:fd:de:f9:83:0e:ed:43:f1:73:54:96:17:
ea:5f:a3:8c:c0:8a:17:25:91:27:58:01:b2:62:f3:f0:b9:1b:
5e:52:c3:9f:c8:c2:91:51:73:40:86:16:69:6c:ab:40:bb:c5:
29:89:ed:64:6f:d8:98:fb:f1:0d:bb:1a:00:e9:6b:80:c7:97:
ae:99:8c:cf:d7:1c:40:d2:fa:18:43:29:bc:31:79:9c:d7:a9:
60:85:86:54:34:51:e9:cc:16:4a:03:51:2b:49:3c:54:e5:48:
5e:c9:ca:fb:7c:2d:0e:58:6a:2e:9a:b6:f9:08:11:93:01:57:
b5:e0:72:0c:74:c9:c4:a7:4f:03:4d:2b:25:d7:5a:ac:72:9d:
e5:63:d6:d8:01:a6:88:db:63:77:81:6e:ec:69:62:49:43:62:
c4:6e:65:8a:78:01:c1:9a:a6:6f:66:3d:ad:0f:0e:4e:41:79:
c2:be:04:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:42 2025 by rpki-client