Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-7SThnhoPr0hFEb3IF0PEn1F2-A.roa
File: 1-7SThnhoPr0hFEb3IF0PEn1F2-A.roa (raw, json)
Hash identifier: 6/w2XYMoF7RtJ41FMRo7z+6QQj45Zo6/D8xrHKknf5M=
Subject key identifier: FB:B4:93:86:78:68:3E:BD:21:14:46:F7:20:5D:0F:12:7D:45:DB:E0
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0184C7721AFF83D3627AB6D78A5D196CF33E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-7SThnhoPr0hFEb3IF0PEn1F2-A.roa
Signing time: Wed 30 Nov 2022 07:30:54 +0000
ROA not before: Wed 30 Nov 2022 07:30:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 5.105.104.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:72:1a:ff:83:d3:62:7a:b6:d7:8a:5d:19:6c:f3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 30 07:30:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbb4938678683ebd211446f7205d0f127d45dbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:da:c0:ac:2a:57:83:94:5a:b4:df:8b:41:
df:9c:ef:94:d1:d5:52:7c:bf:7a:8f:65:2d:31:1f:
e3:de:1a:4e:5e:62:56:ec:7b:f7:60:d3:d8:f2:23:
fa:45:59:b8:3d:a9:2f:3c:5a:cf:dd:24:25:17:d7:
7b:f7:2b:c9:6c:81:f4:b1:60:f2:99:5e:fe:97:c4:
37:01:05:84:b5:cf:7e:f7:e6:d1:fb:8a:48:9c:69:
a3:1a:7e:82:0f:b7:04:f1:69:24:cc:02:8c:1c:b2:
50:44:11:c4:fd:b0:53:ea:79:a2:df:e6:16:86:97:
36:56:07:c5:86:fd:35:6c:a4:c6:ae:bc:d5:52:3b:
39:7c:79:25:7e:f4:35:60:74:28:e5:23:db:d7:af:
5f:e0:aa:68:a6:30:81:ec:23:79:14:93:a6:cf:ae:
71:82:03:6e:c9:23:9a:90:62:9d:34:2e:20:6a:34:
6a:71:91:e3:8f:bd:86:7e:f1:e6:27:08:2d:96:80:
9b:b6:5c:5f:d1:d1:4b:e5:5c:9f:59:2e:4d:85:17:
14:54:c5:9a:12:6b:cf:f6:f3:c8:61:d0:50:ab:a2:
6e:95:d6:d3:43:66:8f:2c:be:5c:81:1c:8a:3f:74:
9c:1a:30:e4:3b:c5:b2:93:2c:67:07:a7:c7:4c:e8:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B4:93:86:78:68:3E:BD:21:14:46:F7:20:5D:0F:12:7D:45:DB:E0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-7SThnhoPr0hFEb3IF0PEn1F2-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.100.0/24
5.105.103.0-5.105.104.255
Signature Algorithm: sha256WithRSAEncryption
0d:1c:d0:b9:ad:c5:9a:99:a0:7b:85:af:66:d6:7e:ef:f7:b7:
0a:24:19:40:51:7d:be:a0:1b:2c:12:6b:02:b9:30:79:1c:03:
f7:a4:20:42:ba:f8:81:96:97:e1:22:50:de:aa:0a:4b:a9:39:
dc:3a:bf:a8:49:3b:62:fc:b5:ce:1f:3b:36:85:28:eb:82:39:
17:69:8d:3f:13:64:2e:05:73:e7:55:51:a0:91:4e:aa:a6:26:
a0:1c:5d:65:b3:95:b0:66:7a:0a:5d:8b:a6:3e:89:87:03:a0:
9b:af:77:c4:cf:75:59:94:f3:41:9d:7f:93:47:ef:2c:1f:23:
08:7c:67:ad:2c:3b:0e:fd:ce:e5:21:84:c8:20:7e:d4:26:31:
32:3a:a1:61:d2:08:ef:e5:ac:77:5b:0f:4a:dc:04:a9:8f:11:
cb:03:2a:cb:66:5b:2d:b4:b5:04:55:c9:c9:bf:ca:b5:db:0c:
9c:26:a9:c5:fb:28:a9:be:cb:14:54:44:f2:ba:24:e7:a1:1c:
95:3e:14:16:f5:76:9c:59:a4:4d:ff:65:eb:b7:63:37:69:5f:
a5:1a:43:eb:d3:9d:46:40:40:c3:5f:e9:24:d4:d4:69:98:63:
c5:00:05:f5:40:13:af:51:16:ab:3b:d6:ed:98:31:5b:01:18:
90:bd:8c:a7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYTHchr/g9NierbXil0ZbPM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjIxMTMwMDczMDU0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmI0OTM4Njc4NjgzZWJkMjExNDQ2ZjcyMDVkMGYxMjdkNDVkYmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZjawKwqV4OUWrTfi0HfnO+U0dVS
fL96j2UtMR/j3hpOXmJW7Hv3YNPY8iP6RVm4PakvPFrP3SQlF9d79yvJbIH0sWDy
mV7+l8Q3AQWEtc9+9+bR+4pInGmjGn6CD7cE8WkkzAKMHLJQRBHE/bBT6nmi3+YW
hpc2VgfFhv01bKTGrrzVUjs5fHklfvQ1YHQo5SPb169f4KpopjCB7CN5FJOmz65x
ggNuySOakGKdNC4gajRqcZHjj72GfvHmJwgtloCbtlxf0dFL5VyfWS5NhRcUVMWa
EmvP9vPIYdBQq6JuldbTQ2aPLL5cgRyKP3ScGjDkO8WykyxnB6fHTOjmewIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPu0k4Z4aD69IRRG9yBdDxJ9RdvgMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvMS03U1RobmhvUHIwaEZFYjNJRjBQRW4xRjItQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDUvOGZjNzQ2LWZjMDgtNDIxMS1iYTNiLTg5MzkwNmZiNzg1
OC8xLzNmaTBVbFRsUncwZFRNNXZ0OV9VME5nN1hWay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAAVpZDAM
AwQABWlnAwQABWloMA0GCSqGSIb3DQEBCwUAA4IBAQANHNC5rcWamaB7ha9m1n7v
97cKJBlAUX2+oBssEmsCuTB5HAP3pCBCuviBlpfhIlDeqgpLqTncOr+oSTti/LXO
Hzs2hSjrgjkXaY0/E2QuBXPnVVGgkU6qpiagHF1ls5WwZnoKXYumPomHA6Cbr3fE
z3VZlPNBnX+TR+8sHyMIfGetLDsO/c7lIYTIIH7UJjEyOqFh0gjv5ax3Ww9K3ASp
jxHLAyrLZlsttLUEVcnJv8q12wycJqnF+yipvssUVETyuiTnoRyVPhQW9XacWaRN
/2Xrt2M3aV+lGkPr051GQEDDX+kk1NRpmGPFAAX1QBOvURarO9btmDFbARiQvYyn
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org