Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ScZZ3uQ344labM39s9mwK-JrINg.roa
File: ScZZ3uQ344labM39s9mwK-JrINg.roa (raw, json)
Hash identifier: P0z/GrBiDAwYr9t99ezYiniZuqNGS6Xms+4repmpv+Y=
Subject key identifier: 49:C6:59:DE:E4:37:E3:89:5A:6C:CD:FD:B3:D9:B0:2B:E2:6B:20:D8
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 018B3E4EFF45ADE419E9B7B9139817A78528
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ScZZ3uQ344labM39s9mwK-JrINg.roa
Signing time: Tue 17 Oct 2023 15:44:06 +0000
ROA not before: Tue 17 Oct 2023 15:44:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198825
IP address blocks: 103.102.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:4e:ff:45:ad:e4:19:e9:b7:b9:13:98:17:a7:85:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Oct 17 15:44:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49c659dee437e3895a6ccdfdb3d9b02be26b20d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:e2:1b:cb:3e:06:90:63:cd:81:35:89:4a:
0f:e5:76:2f:77:7f:81:37:74:f0:27:ec:e9:80:64:
ee:40:18:00:b0:ac:1e:c1:a8:58:50:3f:c7:0b:9c:
f8:2a:55:ec:ae:b6:ee:05:22:e7:33:bb:64:bd:54:
17:ac:00:1d:d5:3e:ba:8f:61:83:be:69:a4:2a:07:
4e:b6:2d:3c:93:8a:14:1a:50:c1:07:5f:3a:20:da:
85:1b:23:58:e1:71:0a:60:5f:36:eb:5c:c5:72:02:
3d:a4:77:d3:e6:be:7f:46:92:65:56:b7:c6:c8:4e:
0b:df:c5:e0:aa:f0:a1:25:29:56:de:06:64:13:ac:
cd:af:78:89:1c:ed:3f:1f:98:2b:4b:19:8c:c0:56:
b5:e7:51:c0:25:72:9d:06:0a:0a:25:85:fb:be:e2:
3a:a3:06:f3:45:c9:31:f3:ca:2d:9f:52:c5:3f:2d:
1d:d4:6e:f1:fc:e5:ff:69:1e:3c:22:58:78:c2:16:
ac:d8:fa:8b:54:05:46:1d:7a:01:4e:e6:f3:a6:f4:
4f:f0:ba:fd:9b:1b:99:7f:2f:bd:44:15:65:36:36:
61:da:cc:08:f5:ac:3d:be:91:ad:09:97:1b:27:0a:
fa:e4:34:b0:45:b5:1d:b8:a4:5b:ad:b4:59:94:36:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C6:59:DE:E4:37:E3:89:5A:6C:CD:FD:B3:D9:B0:2B:E2:6B:20:D8
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ScZZ3uQ344labM39s9mwK-JrINg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.230.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b7:14:1e:aa:ce:01:75:d1:c3:b7:f0:49:09:90:0b:55:15:
21:db:2c:22:1b:f7:e3:41:80:ed:c3:a3:71:ac:75:f0:bf:bd:
76:cf:f5:9a:df:32:e2:ec:97:f5:b5:bf:de:d6:b8:f1:ac:84:
fc:a6:17:b3:1a:69:ca:52:f3:cc:32:2d:85:08:6f:89:a5:76:
a5:de:e5:f2:c2:57:63:c2:a1:b9:cc:f9:3f:c7:40:a1:a2:8f:
d2:7d:8c:3a:b6:81:43:b0:10:75:0a:4a:12:68:60:e0:c7:ec:
f2:1d:7a:c4:0d:4a:b2:bc:d1:34:b9:bc:91:d0:3b:b7:f6:89:
8c:5d:58:f6:d0:b9:32:17:92:fc:91:84:4b:7e:14:85:b3:94:
07:e7:ba:70:b2:d2:f8:fc:07:9d:49:8f:3a:ee:01:03:ba:85:
3d:43:38:f1:ac:ec:fc:95:8f:f9:7d:5c:22:ea:45:0f:0d:14:
62:32:d5:fe:1b:c9:89:24:64:7b:51:af:64:35:d2:c0:d1:da:
61:84:d8:67:c5:83:2b:0f:8d:5c:5e:70:26:7c:0e:a3:fc:73:
af:9d:76:e4:71:7d:7c:b2:3f:93:db:21:0b:7c:9b:58:b9:a8:
27:f3:b0:70:00:ed:f9:1c:dd:39:93:53:95:33:46:a8:23:27:
e8:a3:eb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:23:02 2025 by rpki-client