Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/y4MKmOSOhJy61axzkq39lFpHUxE.roa
File: y4MKmOSOhJy61axzkq39lFpHUxE.roa (raw, json)
Hash identifier: /uJlVeC4e7neia/U6rms+VNPeGpqdfK5cF1X26vYKAE=
Subject key identifier: CB:83:0A:98:E4:8E:84:9C:BA:D5:AC:73:92:AD:FD:94:5A:47:53:11
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018834D1CCC2256371AF78EDA837E88E43C7
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/y4MKmOSOhJy61axzkq39lFpHUxE.roa
Signing time: Fri 19 May 2023 16:22:24 +0000
ROA not before: Fri 19 May 2023 16:22:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.57.0/24 maxlen: 24
14.102.227.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:34:d1:cc:c2:25:63:71:af:78:ed:a8:37:e8:8e:43:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 19 16:22:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb830a98e48e849cbad5ac7392adfd945a475311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:b4:1f:31:fd:90:f5:03:2e:52:d0:8f:d2:
79:cc:2e:4b:08:2c:00:4c:79:98:4e:63:52:09:81:
a5:8d:2f:91:2e:2d:07:5b:78:9f:0d:e9:00:f3:2c:
24:73:f6:8b:61:d5:58:0d:81:8a:2f:b7:63:c9:9b:
13:bb:e8:7e:df:08:77:1c:11:3e:8a:55:6e:cc:01:
ad:92:ee:31:24:d6:28:ef:2c:95:e2:11:4d:ba:bd:
5d:79:13:d2:91:b7:a1:f6:f3:c2:7c:7f:3d:2c:1c:
fa:26:2e:e6:81:d4:4f:b1:26:6c:39:16:69:16:8f:
0a:63:c1:e4:96:8d:c8:8c:e2:1e:b5:05:82:b6:38:
a4:7c:66:9d:4f:81:f7:3c:6f:3a:69:06:be:db:28:
c2:cb:d7:26:85:22:02:b5:65:07:92:58:26:c4:8f:
3e:99:7e:ad:a6:0c:83:b8:c7:57:4b:52:c6:e8:58:
4b:e9:9b:e6:12:93:ff:42:a5:f6:72:af:d9:7e:d4:
eb:d1:c5:b4:45:be:1b:0d:ab:6c:d7:9e:32:4b:d7:
6e:8e:01:27:10:a7:f7:4d:fd:67:3f:e2:d1:39:b0:
ed:65:eb:b7:2f:b8:a6:19:b2:b3:3a:b9:33:0d:07:
ce:8b:6e:ca:00:de:b7:df:cd:32:e3:f0:08:14:27:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:83:0A:98:E4:8E:84:9C:BA:D5:AC:73:92:AD:FD:94:5A:47:53:11
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/y4MKmOSOhJy61axzkq39lFpHUxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.227.0/24
14.102.236.0/24
14.102.238.0/24
103.47.57.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c2:68:10:03:1c:96:d2:27:e5:9f:a7:3e:2f:b4:c0:1f:db:
4f:d4:46:5f:87:34:83:f8:2e:11:f6:10:4b:e4:96:5a:18:8b:
aa:98:52:8b:24:fe:15:8c:cd:b7:0f:bc:b1:32:04:e0:0b:02:
32:06:f7:64:d7:b7:9c:72:03:b0:82:31:fe:ee:35:86:52:72:
e7:84:44:be:45:27:3e:52:0f:1c:c8:da:a8:4a:ce:00:29:3b:
86:96:4e:9b:2b:b3:61:72:93:e4:e7:80:3d:ff:db:48:9b:f1:
d3:b6:23:10:f3:09:45:cd:32:b1:87:8f:39:f3:dd:75:80:7f:
3a:95:4c:af:37:77:79:45:94:1d:8c:19:cd:b8:66:0d:fe:bd:
06:07:e6:07:79:a9:66:4e:4d:e7:55:6f:4d:1a:6b:5f:28:1c:
9e:6c:40:6d:c5:f9:7d:fe:c0:25:cc:21:cb:26:89:13:1c:ab:
a2:5c:26:9f:31:1a:9d:42:bf:55:b5:0c:c8:88:05:c9:4e:aa:
e9:42:a5:1b:09:9f:3d:29:e9:32:cf:01:d1:0c:3a:35:a4:84:
1f:22:be:79:e0:b4:67:53:6c:a4:e9:06:07:86:1d:71:a5:98:
fe:30:47:1c:16:7d:52:17:85:6d:5c:a5:6f:ab:59:29:c1:af:
0b:9c:3b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:44 2025 by rpki-client