Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oTt6WOgKHvS9tJXiqQqSs8YA0NM.roa
File: oTt6WOgKHvS9tJXiqQqSs8YA0NM.roa (raw, json)
Hash identifier: TWCKHV7cXW9XB8imp8jZNOV0e1ELgcmxewjglS7BaC8=
Subject key identifier: A1:3B:7A:58:E8:0A:1E:F4:BD:B4:95:E2:A9:0A:92:B3:C6:00:D0:D3
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0189D0D927545DF30AC98C9A3C70C9C4C6B0
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oTt6WOgKHvS9tJXiqQqSs8YA0NM.roa
Signing time: Mon 07 Aug 2023 16:33:59 +0000
ROA not before: Mon 07 Aug 2023 16:33:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.56.0/24 maxlen: 24
103.47.59.0/24 maxlen: 24
14.102.226.0/24 maxlen: 24
14.102.229.0/24 maxlen: 24
14.102.230.0/24 maxlen: 24
14.102.231.0/24 maxlen: 24
14.102.227.0/24 maxlen: 24
14.102.228.0/22 maxlen: 24
14.102.228.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.237.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
14.102.239.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:d9:27:54:5d:f3:0a:c9:8c:9a:3c:70:c9:c4:c6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 7 16:33:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a13b7a58e80a1ef4bdb495e2a90a92b3c600d0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:d7:c4:35:be:3d:c3:78:d9:f6:7d:c9:23:
d4:73:f6:24:58:02:af:c2:d3:7d:98:73:9c:ad:e9:
d2:72:34:c5:3b:d6:6b:92:a4:f7:ab:2d:3d:60:5b:
25:a4:4e:65:6c:a1:dd:2a:07:35:fa:f5:06:e0:db:
93:4c:2b:d6:46:1a:51:74:37:e1:da:55:82:77:ef:
f4:39:c5:63:bf:43:01:23:6d:4f:68:74:f2:56:9e:
ce:70:6a:27:3a:3b:24:96:c1:7b:48:ce:dd:e8:4d:
1f:16:1d:90:eb:97:0f:20:34:cb:cd:2c:ad:4c:14:
d2:2a:8f:6e:b0:70:39:e9:47:ed:54:1f:ad:eb:8c:
3f:1f:89:53:79:f1:ad:13:82:f3:45:2b:15:06:d9:
f3:02:4c:c6:7c:e0:5b:68:1a:8f:3d:6b:3a:12:72:
74:e4:d2:f6:8d:d5:17:58:3e:9d:62:1d:b9:ad:0f:
4f:0d:43:2f:d5:a8:3b:93:73:38:6f:ca:8f:01:59:
46:af:1b:6b:8e:49:68:5e:18:72:c5:a8:6d:84:aa:
34:87:15:4e:b8:0f:b6:28:c0:68:18:90:eb:1b:fe:
c4:2a:08:71:89:b4:29:9a:28:bb:1f:95:b9:04:f6:
ef:49:60:7c:61:10:af:ed:7e:c6:bc:8f:a2:a8:22:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3B:7A:58:E8:0A:1E:F4:BD:B4:95:E2:A9:0A:92:B3:C6:00:D0:D3
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oTt6WOgKHvS9tJXiqQqSs8YA0NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0-14.102.231.255
14.102.234.0/24
14.102.236.0/22
103.47.56.0/24
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:7a:a4:89:78:9c:34:8b:9f:3b:8f:60:5c:b9:ba:9e:6d:c7:
8d:ab:3b:f2:7f:d3:2b:7f:29:a9:2a:0e:27:20:0e:27:6f:1b:
18:c0:98:8d:3d:98:44:89:b4:4d:66:ea:58:27:67:06:00:52:
98:36:04:d6:4f:e5:51:74:ff:4b:72:53:12:d6:f8:a4:23:e2:
01:12:82:62:d0:9c:cc:2f:69:3d:7c:e5:be:6a:0a:46:4f:2c:
83:24:69:03:9b:dd:6a:c1:c6:cf:18:b4:71:33:5a:e9:12:88:
32:b8:d9:a1:ff:fb:f5:94:cb:06:d9:43:cd:ce:c7:d4:6a:b8:
64:02:f3:04:83:8f:70:80:ea:f2:6d:98:7b:92:49:65:8e:ab:
75:15:f3:bc:ab:6e:5e:ef:d3:37:e9:d9:b2:3d:69:87:76:e1:
48:72:11:ef:d3:11:22:0b:12:0e:4e:a9:5f:5f:8e:3b:e0:cb:
78:47:c4:c0:d3:6a:3f:f7:4e:2e:eb:a0:9f:c7:33:74:e7:15:
94:21:f6:b8:26:60:7b:71:bd:e6:77:96:0a:84:0a:97:63:2f:
01:1b:88:42:19:ed:f9:d5:07:e1:86:37:d6:2c:c3:3d:9c:d9:
c1:28:ce:45:2d:da:96:38:49:cd:a3:fa:e5:91:00:29:e7:7c:
68:50:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:55 2025 by rpki-client