Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kfSllKM4poJZZflkjZ1zXsywoeA.roa
File: kfSllKM4poJZZflkjZ1zXsywoeA.roa (raw, json)
Hash identifier: yI1PLjeI5F/gm2QNdWqj0rGoPxFIYYRdL8kAMp9JwcU=
Subject key identifier: 91:F4:A5:94:A3:38:A6:82:59:65:F9:64:8D:9D:73:5E:CC:B0:A1:E0
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0187809ACCE1C156E9D8D395E6416F3E1F86
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kfSllKM4poJZZflkjZ1zXsywoeA.roa
Signing time: Fri 14 Apr 2023 16:30:41 +0000
ROA not before: Fri 14 Apr 2023 16:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35409
IP address blocks: 103.47.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:9a:cc:e1:c1:56:e9:d8:d3:95:e6:41:6f:3e:1f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 14 16:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91f4a594a338a6825965f9648d9d735eccb0a1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:56:db:4a:65:89:fb:df:d8:19:19:21:5a:
1a:c4:4d:f0:68:1e:ce:ea:48:a4:97:46:32:0a:1f:
7e:32:cb:a5:92:b9:40:4c:63:84:ab:df:a5:c9:63:
7e:7d:37:63:10:0e:ad:06:f6:a4:0c:ea:0c:59:d5:
6f:b9:e0:de:be:f7:c5:99:28:b2:46:f1:4e:bb:5c:
53:bf:a7:39:c8:af:51:4c:9e:92:f9:02:9f:e7:18:
df:a3:bc:b3:ba:8a:ec:ce:4d:3d:fe:fb:a3:be:c2:
47:cc:d8:4d:a9:da:49:9f:f2:50:c8:08:4c:b1:b0:
e5:ff:5b:f9:9d:52:f0:02:cd:a9:10:9a:d2:9c:da:
b7:d3:14:59:9c:3d:1a:b6:2d:24:d5:9d:3a:6b:a0:
9f:de:fb:b3:9c:04:99:8e:ca:83:32:da:d3:e5:fa:
53:1e:e6:8a:3f:44:c3:c7:b3:68:23:a5:3e:b7:ec:
8b:7f:9d:5d:54:df:f0:ea:13:de:1f:ad:8a:42:cf:
73:50:5a:fb:8c:73:0e:98:ae:1d:01:a6:54:d2:81:
44:2f:97:c7:3b:61:2f:94:0b:3a:b2:c0:0d:10:75:
19:22:2a:5f:6b:f5:46:f6:ae:1c:91:fc:a2:8b:5d:
a1:d8:85:a8:a0:4b:ef:bc:fb:bf:f2:4a:c9:4c:88:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F4:A5:94:A3:38:A6:82:59:65:F9:64:8D:9D:73:5E:CC:B0:A1:E0
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kfSllKM4poJZZflkjZ1zXsywoeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:ad:e9:9b:86:d3:4e:7f:2d:86:0f:e6:91:f8:e7:5b:9a:63:
cf:17:2c:46:23:e1:13:63:02:b9:ca:c7:cf:af:4e:de:69:3b:
ab:2c:08:53:f9:68:45:11:4a:8a:cb:94:a6:b9:5f:14:52:88:
5a:ac:4f:a2:ae:34:18:1a:f4:13:ab:ab:e0:0f:92:b6:ac:38:
85:76:29:01:d4:5e:8e:a5:05:c7:3c:7d:71:44:ca:d4:89:a8:
00:b4:4e:30:de:be:10:09:ba:6a:39:5d:a4:aa:53:d8:61:f5:
de:f4:a9:4d:9a:5f:9a:64:c6:7c:01:f9:57:4d:db:ab:1b:55:
81:37:52:67:0c:4d:95:c4:07:9d:99:2d:bd:ab:e0:01:6e:a4:
31:a0:c4:19:75:c0:cf:7f:d1:5c:03:e3:9f:80:2f:5e:74:c1:
10:eb:a8:6a:90:88:4e:71:32:ee:76:a0:0d:34:b7:57:f2:69:
f0:39:6a:fa:19:38:19:60:82:9d:98:2e:ed:37:17:e9:98:96:
1b:9c:58:84:f6:76:db:27:bc:54:b3:15:e5:1d:69:24:4b:dc:
58:80:ff:1e:62:96:cc:a8:9f:a2:f0:65:8c:2e:ec:ee:a2:69:
cd:f8:41:94:6f:f4:e1:00:d8:68:22:2a:11:92:58:2d:e0:05:
15:51:b2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:53 2025 by rpki-client