Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/nqEFSpZQh5g1z648vx8CmK6J5Nw.roa
File: nqEFSpZQh5g1z648vx8CmK6J5Nw.roa (raw, json)
Hash identifier: ghLDt+T2xx/dJ+G/djl9ksv82Ez9vUm5Jy0qzgvw7Zs=
Subject key identifier: 9E:A1:05:4A:96:50:87:98:35:CF:AE:3C:BF:1F:02:98:AE:89:E4:DC
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 018B237F2074D35F8A2EB235D1D253F4F0CA
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/nqEFSpZQh5g1z648vx8CmK6J5Nw.roa
Signing time: Thu 12 Oct 2023 10:46:55 +0000
ROA not before: Thu 12 Oct 2023 10:46:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198831
IP address blocks: 103.102.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:7f:20:74:d3:5f:8a:2e:b2:35:d1:d2:53:f4:f0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Oct 12 10:46:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ea1054a9650879835cfae3cbf1f0298ae89e4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:23:d4:95:b5:e1:d0:93:6c:e1:0c:2b:8f:
37:ad:df:38:3c:fd:f7:a2:06:bc:87:84:fc:5b:d6:
2b:36:ee:98:42:84:f8:5a:d3:24:90:28:81:53:96:
af:ba:b6:78:e1:02:5b:6f:0a:95:3e:27:65:4f:6b:
9c:6c:80:c7:0e:34:cb:89:56:91:e1:2d:79:8a:55:
3c:08:7e:59:a8:e9:7f:d6:e1:e9:65:93:be:d1:5d:
40:c1:4b:11:a0:c1:15:f9:6a:21:8b:8b:b3:cd:22:
ea:a5:51:c6:4c:11:4c:40:a2:fc:f8:60:0e:f5:ba:
ad:b1:32:f6:c0:77:f5:94:f9:6c:b0:c1:d0:80:b8:
6d:c6:9f:74:32:de:16:ff:38:bd:79:1e:a0:31:9a:
6d:7c:d6:9c:b8:f6:00:09:9a:c2:e2:78:e7:7f:ea:
51:25:4e:69:5b:cb:2d:f1:3c:08:85:3f:38:1a:94:
42:6c:ea:b2:6e:cc:e4:92:8b:b9:65:a1:51:74:36:
3a:2b:3e:0f:5e:2c:68:0b:19:c5:38:bc:01:ff:2a:
0d:fc:6f:cf:16:43:d0:2f:2a:53:8c:e0:a8:b5:d4:
f4:a8:bb:03:33:b0:2a:26:65:90:56:5a:97:9c:e2:
5d:fc:2e:51:62:9f:eb:73:c6:2d:10:d5:f4:a2:54:
1c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A1:05:4A:96:50:87:98:35:CF:AE:3C:BF:1F:02:98:AE:89:E4:DC
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/nqEFSpZQh5g1z648vx8CmK6J5Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.231.0/24
Signature Algorithm: sha256WithRSAEncryption
83:42:ac:9d:c4:a3:aa:72:21:c9:b4:18:32:e0:2e:38:3a:0a:
74:7d:b3:db:4f:a3:78:ac:42:3d:dd:03:59:5f:fd:0d:0c:d3:
85:57:a7:4d:2f:14:b2:24:82:70:c7:b0:1a:06:ba:9b:72:a1:
16:40:50:8f:1d:9b:c9:bc:b5:17:86:af:b3:92:8c:45:a5:6d:
43:a8:49:b1:5e:dd:cd:91:de:1b:e2:be:67:f6:17:5c:fd:45:
f4:a6:b5:b1:12:81:b4:aa:09:41:73:1d:ad:0d:44:86:ee:b9:
85:e8:3d:0e:7f:64:76:d4:cf:e7:67:1d:d3:ab:5e:63:53:1c:
54:7a:39:81:d4:8b:fa:50:e2:da:74:a1:c6:7f:cd:43:29:d2:
69:c9:85:ad:9e:28:9c:e7:6d:ad:25:93:44:e2:a7:a4:32:b6:
0b:d8:aa:88:16:e2:9d:96:70:f5:0f:a0:07:a8:49:34:02:04:
0f:40:ac:b2:45:a1:a9:f0:f8:61:0d:6f:53:42:bf:78:75:30:
49:ae:60:26:f1:33:96:3f:80:59:38:63:6a:c5:a5:0e:8d:5c:
cc:21:3b:91:5e:1f:d5:0e:06:de:77:52:b4:8a:9d:b6:f8:34:
63:ea:21:86:6e:6a:b7:a6:69:8b:70:15:d0:c8:03:5e:d6:5b:
91:93:0a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:24:01 2025 by rpki-client