Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0mStueyVNw8VAwWo_bYwNumcdco.roa
File: 0mStueyVNw8VAwWo_bYwNumcdco.roa (raw, json)
Hash identifier: XT3pXdq76c9fFRkm51dx6dnHQpR+YOIZtLBDKFtQx+8=
Subject key identifier: D2:64:AD:B9:EC:95:37:0F:15:03:05:A8:FD:B6:30:36:E9:9C:75:CA
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186116BA433683A5084A4A1B3E26972424D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0mStueyVNw8VAwWo_bYwNumcdco.roa
Signing time: Thu 02 Feb 2023 09:18:32 +0000
ROA not before: Thu 02 Feb 2023 09:18:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201949
IP address blocks: 5.105.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:6b:a4:33:68:3a:50:84:a4:a1:b3:e2:69:72:42:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 2 09:18:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d264adb9ec95370f150305a8fdb63036e99c75ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:84:c3:58:df:6c:89:f6:6a:5e:00:67:0f:
e7:ff:46:53:ba:78:2d:bb:b3:8d:a1:6e:75:c0:0b:
fa:5c:79:24:58:72:51:12:7f:65:99:4c:1f:6e:3f:
95:d5:20:7d:59:cf:a8:e4:bb:73:e1:de:35:6d:52:
e4:c1:81:05:bb:b5:17:9d:57:90:2b:c9:00:85:21:
10:6c:fa:b2:3f:b2:cc:b7:46:1b:b8:93:ec:3a:d0:
8f:2b:72:76:b9:78:51:34:61:1e:55:78:7f:ff:a1:
a5:84:65:c7:2a:64:99:f9:ff:46:06:b1:91:20:68:
de:f7:62:6d:ca:b3:4e:db:66:f0:7c:b3:f3:71:08:
7d:27:af:05:be:d2:19:a1:f8:f8:f0:ff:7a:90:a6:
ce:d6:ec:d6:bb:64:37:7d:b8:28:d7:7e:aa:56:1d:
38:8b:11:87:53:a6:ec:ec:64:1c:d2:bc:04:f5:9f:
f5:be:ae:2e:cf:c7:85:65:e7:e7:f1:d1:76:a7:a6:
70:a2:50:23:9c:08:42:70:7d:b5:7b:23:2b:e7:60:
3f:f1:ea:58:d7:68:1a:9c:85:20:f7:3e:b1:d8:e1:
48:81:f2:69:6a:dc:fa:90:1d:03:4a:ef:22:7e:fc:
01:db:57:7f:89:57:32:71:3d:3c:e9:40:d3:fb:43:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:64:AD:B9:EC:95:37:0F:15:03:05:A8:FD:B6:30:36:E9:9C:75:CA
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/0mStueyVNw8VAwWo_bYwNumcdco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.50.0/24
Signature Algorithm: sha256WithRSAEncryption
82:13:72:93:8c:71:fc:c4:ca:ef:a0:0b:08:d8:41:0b:b1:1a:
1f:b4:be:0a:38:83:b7:b7:37:7e:5d:b8:71:6a:b3:13:12:05:
0c:a8:e1:dc:0e:92:aa:d1:9c:8b:9b:b4:cb:f4:e3:c1:b5:34:
f1:32:ec:2c:ea:63:45:ec:71:67:6f:6f:a9:ab:29:38:6a:18:
52:45:6a:8e:e1:26:5f:63:b4:36:3a:ea:ae:48:2d:98:2c:4a:
53:15:26:a2:4f:c2:da:82:9b:60:76:a3:24:4c:44:5f:d7:55:
8e:29:d5:22:84:5c:3e:69:ca:16:d9:9b:76:ef:5a:0e:53:d0:
fe:19:fc:8e:54:18:9b:37:eb:ae:9b:ab:a6:6b:11:df:d4:24:
18:93:d0:ab:14:dc:bf:e9:b4:67:46:1e:8c:a0:1e:a9:db:fd:
23:6b:c8:33:9d:43:5d:45:fc:3b:67:30:5c:20:83:58:ef:ae:
67:0c:5b:70:fe:ea:ef:9f:9a:7c:4e:36:33:28:ea:80:a1:b7:
86:43:87:32:8d:3b:c6:64:a8:2e:95:c3:d8:88:eb:2e:5e:b1:
84:d9:74:cc:45:78:22:d4:17:84:9f:e5:38:c3:ff:02:aa:2f:
51:a2:3c:60:54:fd:76:97:bc:10:b7:8c:5b:0d:51:e8:71:98:
2e:69:55:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:59 2025 by rpki-client