Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0MVJ86DC1_1ctR7IsBJ3CQWUJhI.roa
File: 0MVJ86DC1_1ctR7IsBJ3CQWUJhI.roa (raw, json)
Hash identifier: Of/HucNUhJzNSvYBfNtUuJo+1dQ9Jll9UK+0klmhAkc=
Subject key identifier: D0:C5:49:F3:A0:C2:D7:FD:5C:B5:1E:C8:B0:12:77:09:05:94:26:12
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183CC90AC360B6B366A2D56BBD446104FF6
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0MVJ86DC1_1ctR7IsBJ3CQWUJhI.roa
Signing time: Wed 12 Oct 2022 14:19:36 +0000
ROA not before: Wed 12 Oct 2022 14:19:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.26.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cc:90:ac:36:0b:6b:36:6a:2d:56:bb:d4:46:10:4f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 12 14:19:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0c549f3a0c2d7fd5cb51ec8b012770905942612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:00:99:44:00:82:5c:21:e4:f4:fc:68:83:
06:1a:af:50:d1:48:7a:31:ce:a0:e6:17:ca:5b:75:
ac:ab:f4:d4:5f:e2:37:89:49:be:10:cf:97:45:14:
e6:3c:97:8c:20:2d:6d:51:b8:f5:76:3b:1e:c9:dc:
41:6c:5d:3a:0a:5c:c3:c5:35:69:e2:43:db:93:1c:
ea:98:77:81:af:e8:00:92:fd:4b:d8:cb:65:11:65:
44:cc:47:db:f1:57:01:05:bf:b6:ed:04:db:96:12:
e2:fd:21:6f:50:2b:b2:50:70:e0:44:23:d5:fd:05:
ef:12:e2:4f:a3:56:f1:7a:0a:8e:84:1f:22:e0:d3:
cf:6a:25:2c:91:d3:bb:12:ce:88:ad:0f:61:51:1b:
51:92:9f:a7:b7:60:88:38:92:1b:9b:0a:77:7f:b5:
71:e5:ba:b1:3c:3e:54:7d:d4:cb:0c:fb:71:4c:3a:
b2:f7:c1:36:b0:25:79:1c:08:9a:ba:40:cc:9a:e4:
d4:9b:59:3d:71:8b:3c:0a:93:53:ac:d7:3e:9d:61:
bd:96:16:86:c8:6c:35:c0:f6:9d:74:cb:56:4a:ef:
b2:3a:ce:02:a3:ee:e7:1c:6a:ac:ca:0b:5e:69:d9:
86:b5:62:eb:45:26:f9:a6:b9:23:4c:53:bc:b0:51:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C5:49:F3:A0:C2:D7:FD:5C:B5:1E:C8:B0:12:77:09:05:94:26:12
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0MVJ86DC1_1ctR7IsBJ3CQWUJhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.26.0/24
5.105.106.0/24
Signature Algorithm: sha256WithRSAEncryption
80:22:d4:8a:61:8d:01:8a:5c:df:dd:fc:0b:fa:f9:7b:ca:1a:
03:d1:35:52:c7:cd:f8:1b:33:2c:8d:12:f4:b0:7d:d5:25:b8:
b0:13:2d:e4:18:09:69:bf:df:cf:b9:90:c8:e4:72:4b:5f:d1:
0e:5e:fe:8e:f6:9d:4d:3b:94:9a:e2:98:e4:d9:5c:7c:09:4e:
65:89:e3:45:be:f2:28:20:37:92:27:24:66:a5:49:d1:af:9b:
94:d2:1a:f3:2f:50:a2:74:00:56:c6:57:5e:f8:3c:fe:1d:ca:
a1:01:1f:3f:f7:fd:ed:84:e8:c9:5b:f2:77:25:7b:26:a5:d5:
80:1d:36:a8:51:10:60:92:4b:d5:fa:a5:e1:f5:b0:c8:9d:65:
6c:0d:18:2c:d1:1d:52:85:49:c1:30:91:07:89:83:19:79:5b:
18:94:17:3a:4c:59:44:64:33:a6:4b:ff:c3:a8:95:ea:be:33:
ef:28:e7:c1:8c:2a:92:46:f8:2e:ad:85:25:f5:eb:79:2f:f0:
eb:94:76:87:2c:59:62:f5:a8:41:04:e3:63:04:9c:b7:9b:ec:
32:f9:e1:63:9e:a5:c5:57:22:84:1f:3f:fe:b0:c1:e9:6e:7d:
82:6c:3c:be:a6:f5:eb:de:33:f1:1e:92:a8:5b:36:a8:84:48:
f8:0c:9b:4f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYPMkKw2C2s2ai1Wu9RGEE/2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjIxMDEyMTQxOTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGM1NDlmM2EwYzJkN2ZkNWNiNTFlYzhiMDEyNzcwOTA1OTQyNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZkAmUQAglwh5PT8aIMGGq9Q0Uh6
Mc6g5hfKW3Wsq/TUX+I3iUm+EM+XRRTmPJeMIC1tUbj1djseydxBbF06ClzDxTVp
4kPbkxzqmHeBr+gAkv1L2MtlEWVEzEfb8VcBBb+27QTblhLi/SFvUCuyUHDgRCPV
/QXvEuJPo1bxegqOhB8i4NPPaiUskdO7Es6IrQ9hURtRkp+nt2CIOJIbmwp3f7Vx
5bqxPD5UfdTLDPtxTDqy98E2sCV5HAiaukDMmuTUm1k9cYs8CpNTrNc+nWG9lhaG
yGw1wPaddMtWSu+yOs4Co+7nHGqsygteadmGtWLrRSb5prkjTFO8sFHD3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNDFSfOgwtf9XLUeyLASdwkFlCYSMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvME1WSjg2REMxXzFjdFI3SXNCSjNDUVdVSmhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABWkaAwQA
BWlqMA0GCSqGSIb3DQEBCwUAA4IBAQCAItSKYY0Bilzf3fwL+vl7yhoD0TVSx834
GzMsjRL0sH3VJbiwEy3kGAlpv9/PuZDI5HJLX9EOXv6O9p1NO5Sa4pjk2Vx8CU5l
ieNFvvIoIDeSJyRmpUnRr5uU0hrzL1CidABWxlde+Dz+HcqhAR8/9/3thOjJW/J3
JXsmpdWAHTaoURBgkkvV+qXh9bDInWVsDRgs0R1ShUnBMJEHiYMZeVsYlBc6TFlE
ZDOmS//DqJXqvjPvKOfBjCqSRvgurYUl9et5L/DrlHaHLFli9ahBBONjBJy3m+wy
+eFjnqXFVyKEHz/+sMHpbn2CbDy+pvXr3jPxHpKoWzaohEj4DJtP
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org