Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6IhpLpiHEcqxkhhkmVP_BCNjjXU.roa
File: 6IhpLpiHEcqxkhhkmVP_BCNjjXU.roa (raw, json)
Hash identifier: Pv+NIOF1WGYzKBM1Lq3IRUgNfsLp/H9GGdD+gWyJGOU=
Subject key identifier: E8:88:69:2E:98:87:11:CA:B1:92:18:64:99:53:FF:04:23:63:8D:75
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018B4D4C2196A4649DCE96A10FD2FDA444BB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6IhpLpiHEcqxkhhkmVP_BCNjjXU.roa
Signing time: Fri 20 Oct 2023 13:35:16 +0000
ROA not before: Fri 20 Oct 2023 13:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7979
IP address blocks: 103.209.231.0/24 maxlen: 24
45.152.197.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4d:4c:21:96:a4:64:9d:ce:96:a1:0f:d2:fd:a4:44:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 20 13:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e888692e988711cab19218649953ff0423638d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:b2:28:06:9a:c4:4a:18:03:47:c8:4e:52:
e7:4e:ff:b4:cd:ea:17:8b:04:27:e8:43:8c:ff:c4:
11:47:3e:21:65:a8:17:7f:c9:1c:36:48:b1:b3:a6:
92:20:e5:1e:d4:e7:af:3f:8b:75:d3:ba:0b:f6:69:
e9:f9:92:e2:a7:e1:a8:5b:0e:9f:ba:86:4f:d0:d8:
b7:b5:92:95:5a:1a:b8:0e:cf:76:53:bd:21:be:a2:
f2:53:f0:16:94:44:55:e8:87:6c:cc:e3:8a:fc:61:
3d:ec:2b:c7:b5:b0:ef:ef:0d:df:36:38:58:4c:8f:
e3:16:f5:fa:72:a5:62:d3:94:b8:f0:7e:91:7a:bf:
5e:86:67:59:f7:41:5d:3c:ad:ca:54:7a:d8:2d:19:
26:b2:c8:9c:ec:7e:36:ac:c0:06:2a:2d:e4:5e:fa:
f6:2b:f3:4b:81:af:cc:38:40:6b:2a:1b:ba:ac:fd:
d6:48:aa:07:db:cd:99:0b:3d:14:e6:cb:75:d8:42:
c8:b2:d9:3f:08:18:9c:3c:f9:31:0e:c6:f5:55:ac:
0d:0f:c9:72:08:eb:04:86:65:e9:a5:c2:55:0f:30:
59:bb:50:ba:a2:09:06:16:cf:ed:1c:a2:74:56:8b:
c7:10:e2:9a:07:1c:bc:cd:f9:d2:b7:77:0c:5f:f2:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:88:69:2E:98:87:11:CA:B1:92:18:64:99:53:FF:04:23:63:8D:75
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6IhpLpiHEcqxkhhkmVP_BCNjjXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.253.0/24
45.152.197.0/24
103.209.231.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e9:42:c4:e6:dc:b7:9f:91:94:6f:59:eb:17:02:eb:27:0a:
ae:ce:e8:77:7c:f6:4f:be:bc:58:1a:36:56:ee:fa:f4:06:ba:
c0:06:58:5c:b0:1f:02:1d:ea:1f:27:54:c5:0a:a3:78:b2:ad:
67:46:07:a4:dd:08:1e:53:bc:0c:be:b5:63:cc:3b:18:ae:5d:
5a:bf:bf:d2:e5:44:b0:fd:8f:dc:8c:8f:1a:4e:00:e2:1e:c7:
36:12:30:23:91:29:ec:89:7f:d5:b6:f6:3e:3f:b7:1a:77:2d:
aa:21:2b:47:66:80:1b:18:76:3a:ad:89:0e:2b:99:bb:f8:a7:
ef:ee:1b:9f:b7:6f:d6:d0:5e:d4:39:6e:fd:fe:8b:ca:9e:a9:
11:2d:f3:9e:2f:01:00:1e:81:b2:d0:ff:6e:b9:27:30:9c:93:
ac:4d:53:6b:08:c5:d3:e7:55:ba:c6:c2:e1:5c:44:6d:db:71:
ee:85:77:2d:a9:33:ef:4d:9f:39:5c:8a:bd:c5:15:72:0f:ab:
95:e6:80:ee:ee:27:74:40:43:d8:db:b6:a3:3e:31:01:32:66:
3f:b2:27:21:0f:41:4d:65:b4:ff:15:79:bc:32:30:d3:02:48:
c7:ba:2d:b2:72:52:8e:d8:40:bb:06:94:22:da:76:38:a3:6a:
88:83:26:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:08:35 2025 by rpki-client