Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LHqNZ3IQuUbu08KwMDcAB7XMPj8.roa
File: LHqNZ3IQuUbu08KwMDcAB7XMPj8.roa (raw, json)
Hash identifier: fQbDV8eE/9sBJD+09cO/bhGn+K+SSSqmo4FS4aW7syQ=
Subject key identifier: 2C:7A:8D:67:72:10:B9:46:EE:D3:C2:B0:30:37:00:07:B5:CC:3E:3F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0187E2F81AEDA92A6A85EC18EDA5AF92A2FD
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LHqNZ3IQuUbu08KwMDcAB7XMPj8.roa
Signing time: Wed 03 May 2023 18:55:23 +0000
ROA not before: Wed 03 May 2023 18:55:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35409
IP address blocks: 103.47.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e2:f8:1a:ed:a9:2a:6a:85:ec:18:ed:a5:af:92:a2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 3 18:55:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c7a8d677210b946eed3c2b030370007b5cc3e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:34:d3:cd:3a:76:3b:08:97:f8:a5:c4:c7:
03:d2:90:03:c5:cf:c2:a5:c6:33:bb:29:72:e9:e0:
94:68:22:13:13:34:1b:10:ac:00:4a:40:f5:2a:02:
52:97:f6:40:00:58:a3:77:0b:38:7d:e8:f6:be:19:
68:ff:84:3c:ef:55:48:54:83:05:f3:39:71:43:0a:
ac:48:dc:96:ba:12:7a:2f:fd:21:f1:c0:89:0a:ba:
23:57:2e:33:c9:17:d0:3a:4f:51:5b:c5:6a:77:ed:
9c:48:85:7d:b2:5a:2c:08:f4:19:84:4b:3f:17:41:
57:47:9f:e1:ae:ed:ac:a6:a8:0c:0b:1a:ed:cb:a9:
76:a2:57:69:56:e1:79:58:00:98:d8:bb:a7:6b:f2:
c4:ab:1b:28:04:a6:a1:8e:83:b9:38:6e:85:f6:98:
b3:6e:c0:be:94:e6:1f:63:91:f3:aa:00:2c:03:cd:
54:72:0f:d5:49:4c:b9:90:62:c5:13:42:4d:c6:21:
04:86:5d:bb:10:95:b7:d6:e4:5f:9a:87:08:c5:63:
32:35:32:61:76:a3:c5:f0:dd:42:27:6e:ab:3c:8c:
cd:e5:66:3a:3a:99:7f:0e:ed:74:e3:37:cf:4d:4b:
09:a4:ff:dd:34:cc:ca:74:81:e3:f1:19:b3:d9:63:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7A:8D:67:72:10:B9:46:EE:D3:C2:B0:30:37:00:07:B5:CC:3E:3F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LHqNZ3IQuUbu08KwMDcAB7XMPj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
61:55:e3:c7:1b:91:81:3c:85:24:43:88:d0:27:88:92:d8:d1:
66:89:71:a7:51:07:89:00:c3:f6:a4:9e:2b:99:39:c4:fb:92:
0f:b7:78:42:e5:be:a5:85:07:98:44:7c:70:f3:dc:75:3b:ce:
03:40:2e:69:bb:25:96:5a:b2:45:54:f4:f7:cd:2d:cf:9a:79:
ec:98:ba:ba:ca:19:11:06:89:5c:59:4a:bd:0e:54:a4:a5:6c:
3a:d0:eb:04:49:43:ba:7a:c1:d3:e2:14:f5:7d:b8:34:35:2f:
73:a0:a6:f8:14:7a:c3:96:7c:84:eb:ec:97:02:fd:72:32:21:
d0:2d:1c:1e:c0:2a:92:fd:3c:27:a7:21:ad:f6:5a:55:79:e6:
d8:67:46:be:b2:d1:2f:70:69:35:9e:91:45:7b:58:cf:1e:9d:
1c:09:5a:5e:47:d5:92:da:0c:0f:8d:51:3d:31:79:dd:a3:65:
d3:6c:8e:66:b5:42:3b:f4:e1:d6:a2:06:33:66:33:0a:61:b2:
a9:22:ae:64:17:a2:85:ca:3a:6f:ab:49:1f:50:be:41:0c:00:
a4:d1:d0:b9:d6:b9:f7:13:06:cf:53:e1:7a:8a:b0:60:5f:9a:
a8:75:2b:3b:c9:6e:b8:16:80:71:76:36:c7:f2:8c:ba:91:28:
00:31:f7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:32 2025 by rpki-client