Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XksI9gQksktYpYCNnAfOUUVRNI0.roa
File: XksI9gQksktYpYCNnAfOUUVRNI0.roa (raw, json)
Hash identifier: UO/5FfsSjENlE522XzrSX82+YKU5mqUNWd1s2UIKFgM=
Subject key identifier: 5E:4B:08:F6:04:24:B2:4B:58:A5:80:8D:9C:07:CE:51:45:51:34:8D
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0187C36531B356C8006B85FE5250B491E7D3
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XksI9gQksktYpYCNnAfOUUVRNI0.roa
Signing time: Thu 27 Apr 2023 15:46:41 +0000
ROA not before: Thu 27 Apr 2023 15:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.56.0/24 maxlen: 24
103.47.57.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c3:65:31:b3:56:c8:00:6b:85:fe:52:50:b4:91:e7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 27 15:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e4b08f60424b24b58a5808d9c07ce514551348d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:f0:c5:00:8d:00:88:bc:ba:e1:1d:67:a5:
f5:ba:78:da:fd:bd:09:ab:ea:65:f6:eb:31:ad:6f:
31:39:c1:fe:23:29:64:5a:34:7e:78:14:c2:0b:c8:
b3:ca:8f:6f:6b:e2:d2:24:28:17:6a:eb:cc:b9:a8:
e5:0b:76:08:0a:68:2e:eb:68:f2:42:bc:07:4a:65:
fd:94:f1:72:e7:3e:bb:10:42:82:ba:db:fc:87:9c:
14:88:5a:24:87:8c:0d:37:f6:a2:41:a7:e4:a1:48:
40:53:9c:a6:f2:f5:ff:2f:01:eb:4a:d4:cb:a4:83:
18:4e:9d:f6:f5:d0:5b:ae:c9:57:0a:0d:fa:29:22:
01:60:0f:6a:09:c6:ec:58:e3:07:c6:11:db:7c:8a:
f4:4e:db:bd:cf:91:5e:af:69:b3:a1:a8:0b:71:9e:
e1:d1:41:1e:d8:f3:5a:5b:9e:2b:cf:3c:28:eb:66:
a8:29:bb:70:4c:1e:d1:d0:77:7f:0c:f6:52:4d:45:
d0:69:45:58:78:4d:40:85:f3:30:d8:e2:7a:f0:d7:
c5:5a:7f:1c:71:d1:6d:59:42:3a:e5:74:da:04:1d:
23:61:85:83:c0:24:b8:95:20:3b:fd:e1:56:d9:b2:
c1:84:e9:2c:8b:40:06:76:12:7f:f8:90:d7:04:a8:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4B:08:F6:04:24:B2:4B:58:A5:80:8D:9C:07:CE:51:45:51:34:8D
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XksI9gQksktYpYCNnAfOUUVRNI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.236.0/24
14.102.238.0/24
103.47.56.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:85:7f:56:fe:a9:fb:a2:a8:0b:68:0b:64:93:39:97:b0:ec:
c8:97:02:79:6b:8b:4a:a6:78:13:d7:c5:af:06:45:a6:01:89:
1d:10:5a:ce:2e:1e:85:0e:e6:8e:7d:12:a0:89:b2:a7:de:d3:
2f:03:9a:8f:93:ba:e8:d5:77:88:f0:1e:c4:5c:f7:66:b2:e8:
8c:63:b5:de:62:0d:a8:41:37:64:35:90:96:8b:0a:7e:21:8a:
b9:be:06:c6:d0:0b:9d:5c:d9:59:0c:66:74:a6:51:c3:7b:48:
26:51:fd:f4:d1:e8:ba:ed:42:4c:a0:9b:d3:2f:9e:71:d7:50:
2e:cd:16:7d:5c:2d:55:83:b2:62:f7:b1:03:f9:d1:8e:3d:a8:
dc:d1:a0:da:cf:aa:12:64:a1:4b:97:ad:00:52:a7:3f:31:74:
9e:c2:7a:49:87:ea:77:f5:25:9d:8e:6c:a0:9f:b7:6c:cd:e2:
af:e2:55:93:cb:c8:ab:45:ed:12:6d:18:f3:21:09:95:03:13:
e3:7c:32:68:8c:b2:63:ce:f7:9d:6b:78:4d:e3:1f:02:c2:1a:
15:48:ae:3d:8a:74:f5:b8:88:f2:ca:99:80:ea:d5:44:9c:ed:
6e:20:ff:87:2d:05:88:78:57:b3:7c:79:da:bd:9b:2e:b9:0f:
b6:bd:9c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:25 2025 by rpki-client