Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/Ri2j9TFZvtj_ffD6agxl8PoFN1o.roa
File: Ri2j9TFZvtj_ffD6agxl8PoFN1o.roa (raw, json)
Hash identifier: KkRZTXIA8emYPAg52YENucGi+BjcaAoqGnKJLlZQxbM=
Subject key identifier: 46:2D:A3:F5:31:59:BE:D8:FF:7D:F0:FA:6A:0C:65:F0:FA:05:37:5A
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 018B3EEF3721188CDF380998F25867F688F8
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/Ri2j9TFZvtj_ffD6agxl8PoFN1o.roa
Signing time: Tue 17 Oct 2023 18:39:06 +0000
ROA not before: Tue 17 Oct 2023 18:39:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198825
IP address blocks: 103.102.230.0/24 maxlen: 24
2a13:c7c1:10::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:ef:37:21:18:8c:df:38:09:98:f2:58:67:f6:88:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Oct 17 18:39:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=462da3f53159bed8ff7df0fa6a0c65f0fa05375a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:27:83:64:f9:3a:06:27:44:5a:2f:b5:7d:f8:
77:f0:0a:10:9b:a7:25:ff:6c:99:99:0f:a6:b4:80:
bc:5c:68:ed:fc:cc:42:7d:f7:36:e5:7d:a6:ea:40:
02:7d:83:27:92:f0:19:46:d9:9d:85:bc:03:85:7e:
79:68:56:d9:88:27:bd:4c:12:57:91:72:4e:d9:65:
4a:63:ac:cd:78:5b:59:47:fe:c8:a0:9c:a6:07:be:
c1:00:95:56:ef:01:c6:f9:10:18:b8:02:7c:70:88:
db:e4:3c:60:e9:d8:58:20:82:e6:d3:6a:14:01:fc:
48:96:87:86:88:d1:80:96:6a:06:08:da:79:8c:5a:
94:26:f6:e3:cf:8e:fd:f6:db:63:eb:21:50:9d:80:
7b:06:be:e0:91:14:94:0c:bf:ab:e4:98:eb:1c:be:
38:06:3c:60:cb:bb:43:aa:a7:7b:1a:fb:bd:2c:04:
3b:85:a6:4f:67:0f:75:40:f0:b9:a6:27:ba:67:16:
e2:f3:25:4f:32:55:d6:c0:0c:b1:41:ba:63:ae:36:
11:96:bb:81:62:91:ab:e3:bb:da:76:88:fd:81:c5:
5e:25:32:cb:ae:f5:b4:fb:60:13:4b:42:07:af:7b:
18:09:ed:17:b0:d5:8c:c1:ef:a3:af:d3:9d:60:0c:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2D:A3:F5:31:59:BE:D8:FF:7D:F0:FA:6A:0C:65:F0:FA:05:37:5A
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/Ri2j9TFZvtj_ffD6agxl8PoFN1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.230.0/24
IPv6:
2a13:c7c1:10::/44
Signature Algorithm: sha256WithRSAEncryption
22:5a:66:6e:92:d0:b5:45:15:45:5f:a9:56:09:b7:ba:bf:7b:
69:c5:bf:b8:82:3b:fc:c9:99:fd:65:90:1d:89:30:fe:35:4d:
46:02:91:fd:4f:13:3a:d9:83:04:43:67:b7:76:fe:cb:15:98:
95:82:4c:cb:19:81:14:59:bb:a2:f5:e2:06:52:49:3f:df:e1:
3b:30:05:dc:e4:ae:cb:e9:c5:35:64:c7:e3:4d:12:22:3b:30:
28:43:ac:31:e5:e4:4d:bb:c4:93:6c:29:b1:12:e8:0e:57:e5:
62:72:33:9a:28:17:6b:ab:ab:93:d9:11:a2:46:e8:f8:e7:56:
4e:0a:c9:79:4c:f8:ee:7c:89:2e:9b:97:d7:8b:74:89:6d:26:
71:d9:8a:86:2a:0b:1a:22:0e:20:e6:72:7c:ae:60:ce:03:79:
89:39:10:c8:14:d0:cb:08:ad:d1:da:59:b1:23:0e:b9:83:63:
35:7e:aa:4e:6b:db:ea:cb:a8:5d:e7:c1:dd:d7:5c:e5:63:de:
09:21:bf:28:61:29:2f:8c:ef:ab:36:ae:94:a6:68:1f:d4:5a:
3f:44:d2:71:3c:a6:2c:d0:5e:26:43:24:a0:6c:73:b2:68:d2:
95:66:da:bf:3e:f5:2e:b2:3d:24:bb:de:f6:f2:38:21:6e:44:
07:67:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:33:34 2025 by rpki-client