Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/A-TFjp88SGvQtXMPLjbZ0gR4Eqs.roa
File: A-TFjp88SGvQtXMPLjbZ0gR4Eqs.roa (raw, json)
Hash identifier: UxN3cSrYs7pKut5Exu+xOU3htq2tPOfZbLIJNpm+Np8=
Subject key identifier: 03:E4:C5:8E:9F:3C:48:6B:D0:B5:73:0F:2E:36:D9:D2:04:78:12:AB
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 018B331E2660A7B7E2CB6F063E75A0CE6984
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/A-TFjp88SGvQtXMPLjbZ0gR4Eqs.roa
Signing time: Sun 15 Oct 2023 11:34:55 +0000
ROA not before: Sun 15 Oct 2023 11:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216291
IP address blocks: 103.102.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:33:1e:26:60:a7:b7:e2:cb:6f:06:3e:75:a0:ce:69:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Oct 15 11:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03e4c58e9f3c486bd0b5730f2e36d9d2047812ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:d2:0c:df:85:5e:a6:71:1b:f5:30:96:d7:
39:06:2b:7a:b0:68:43:b3:cc:44:7d:42:d7:d9:72:
ee:60:1a:04:e8:e0:9a:41:53:45:1b:13:72:81:7b:
7b:1c:f9:29:bb:3b:4e:dd:64:5c:fb:40:8a:b8:e6:
a9:cf:1d:d6:12:53:d7:ee:b0:23:88:92:97:bb:7c:
be:f3:7e:51:ae:10:10:5e:06:f1:aa:79:46:ce:64:
87:95:77:05:3b:00:25:56:f2:81:11:4b:88:87:3d:
ba:f3:6c:2b:4d:c1:e6:4a:98:3e:ec:c0:3e:d9:b9:
16:f6:a1:cd:47:b1:58:91:a1:0d:73:34:40:b6:5e:
2f:80:6b:1e:8d:4e:56:06:84:0b:25:06:62:c8:72:
8a:3a:1c:ed:eb:36:ff:bf:11:de:b1:cc:44:b7:f7:
cc:f2:68:e7:30:45:b2:a6:49:b3:38:2b:de:5a:de:
8a:32:3a:d5:a3:42:fa:4d:7d:6c:5d:50:65:a9:b5:
de:44:45:2d:74:02:89:77:31:fe:4f:4a:6e:ba:5a:
a5:c6:ea:cf:1f:33:8b:7f:a3:2a:1f:32:97:d4:df:
6a:a2:3a:e1:88:69:75:ec:b4:dd:f0:7d:01:42:86:
2e:74:0b:d5:9d:74:04:8d:58:2e:bc:c5:de:03:17:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E4:C5:8E:9F:3C:48:6B:D0:B5:73:0F:2E:36:D9:D2:04:78:12:AB
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/A-TFjp88SGvQtXMPLjbZ0gR4Eqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:21:53:3a:fe:bd:d9:2f:9f:45:26:03:4f:66:94:53:49:c4:
4c:98:bd:e6:9d:55:ec:09:1f:f6:1d:07:34:17:41:da:75:43:
3d:c8:92:1e:cc:35:8d:e9:b3:77:01:7b:df:e4:c9:0e:26:ba:
f8:50:f9:77:94:71:e3:4a:6e:0b:c3:ae:db:3c:8d:6d:f5:27:
64:c4:28:d5:b4:d2:bb:c1:c0:2d:f8:99:44:cc:ef:75:b6:8c:
96:36:46:cd:c8:1e:35:0d:60:f6:8f:fa:4a:25:f2:cd:46:d2:
95:08:bf:3e:6c:79:42:02:f9:c1:e0:ca:62:7c:09:f6:b9:6b:
ff:87:1d:d0:bc:e8:41:8c:15:54:b0:2f:8b:f6:66:77:47:6b:
93:5b:39:67:13:52:50:95:09:d9:6f:3a:c6:e7:21:4e:14:53:
d4:4d:43:ad:1f:6b:82:8c:50:ac:94:85:54:a6:a7:31:f9:86:
73:ec:47:fe:2e:1f:82:c8:69:db:aa:dc:d7:a9:df:48:04:96:
b5:bf:be:6d:83:61:6f:dd:9b:6a:12:8e:2c:99:59:cb:88:d6:
05:bf:28:a2:9c:8c:f2:15:c2:2b:8b:b9:94:a6:37:b9:d8:91:
ab:55:fa:f0:75:8e:b9:bb:41:60:39:eb:ac:f2:64:0c:80:9a:
9a:01:1b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:14:13 2025 by rpki-client