Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/cWMuOmR7pagQMfpeUOAJP9VhjUY.roa
File: cWMuOmR7pagQMfpeUOAJP9VhjUY.roa (raw, json)
Hash identifier: uxOPGkc7M4eOesux5t8TfX9x3BEYqMVtJ2uYQZuVQak=
Subject key identifier: 71:63:2E:3A:64:7B:A5:A8:10:31:FA:5E:50:E0:09:3F:D5:61:8D:46
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01879003BA2742D4554AB5D233170911E575
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/cWMuOmR7pagQMfpeUOAJP9VhjUY.roa
Signing time: Mon 17 Apr 2023 16:19:35 +0000
ROA not before: Mon 17 Apr 2023 16:19:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.56.0/24 maxlen: 24
103.47.57.0/24 maxlen: 24
14.102.224.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:90:03:ba:27:42:d4:55:4a:b5:d2:33:17:09:11:e5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 17 16:19:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71632e3a647ba5a81031fa5e50e0093fd5618d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:ed:5b:83:2f:76:40:9d:5b:08:54:02:81:
4b:fc:d5:ff:39:b1:ab:d2:88:61:9e:cf:b2:d5:b2:
e4:13:d6:30:72:a7:f2:07:90:9e:9a:3b:55:76:f2:
e0:67:13:6a:41:d4:1c:14:69:24:76:9f:53:ca:7c:
ba:d8:85:4f:23:f4:68:8f:e0:3e:1c:a0:ea:b3:3f:
55:77:56:e7:de:47:77:1a:cb:29:45:09:5d:26:00:
a1:d1:af:d3:74:bc:de:22:be:14:c4:39:50:4f:4c:
f1:5b:c0:5c:f7:af:47:20:9c:2b:c1:3e:e3:cc:af:
db:80:90:04:8a:df:29:72:cf:08:a6:bb:14:53:a9:
ee:45:d3:6f:9a:70:f1:45:35:69:48:57:ad:56:c4:
3c:3c:a8:e8:1b:8b:51:0b:2c:32:78:3d:f2:d7:92:
fc:16:09:90:d1:1c:c9:93:08:1b:fc:0d:c8:c0:9c:
7f:d6:6e:a3:17:5d:60:f8:ea:75:a4:2b:e7:75:f2:
f5:15:8b:9a:2e:78:48:6b:26:b5:87:5a:3f:f3:fc:
56:4d:a1:6a:ce:5f:80:3d:e6:a8:32:c3:a2:78:ab:
2c:cf:19:50:00:a3:2c:47:40:b0:63:7e:ba:78:2d:
25:a2:10:9f:ab:77:18:3a:c8:af:64:ec:a8:01:60:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:63:2E:3A:64:7B:A5:A8:10:31:FA:5E:50:E0:09:3F:D5:61:8D:46
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/cWMuOmR7pagQMfpeUOAJP9VhjUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.224.0/24
14.102.236.0/24
14.102.238.0/24
103.47.56.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:b2:dc:ce:22:e5:21:b3:cf:af:7d:96:1c:f8:bc:70:66:ea:
90:74:b1:5e:e6:80:9b:b5:f4:ba:07:4f:fe:ac:a9:b4:cd:ba:
84:a9:71:e6:15:ec:d3:2f:59:51:4e:ec:e0:81:c2:34:de:f9:
af:88:a1:98:f9:7c:40:68:1a:b0:bc:a1:88:ae:71:1a:1e:b2:
67:9c:8f:fb:67:a1:09:6c:a2:6c:db:f8:c0:35:b9:d5:a7:03:
b8:ba:b7:e0:bb:0e:cd:8a:35:da:1b:29:b3:e6:86:44:72:20:
ed:bc:56:26:ea:f3:66:fb:d0:fa:27:65:83:8a:bd:3f:b1:99:
ec:86:19:3c:a0:c5:21:7f:45:41:ed:6e:12:e5:03:14:2b:09:
0c:6d:72:c6:e3:09:25:22:0a:10:1c:6c:b3:bc:e5:68:6d:f9:
5d:8d:04:da:b4:84:c6:51:e4:85:f6:88:9f:be:06:9f:09:ab:
7e:03:05:39:98:b5:47:56:84:98:05:60:d5:1c:f1:8c:b8:e2:
33:d2:9b:9d:67:30:08:6a:74:a5:35:af:40:ce:97:82:e6:da:
17:ad:32:5e:ff:6c:00:8d:2a:2f:4d:b2:57:9f:ee:22:0f:16:
a5:3f:c0:77:dd:e8:9a:48:f4:9f:de:0d:a0:86:fd:92:2b:f4:
5a:63:ca:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:58 2025 by rpki-client