Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-e-aHzEEue_NNRsPLNKnx07dj0c.roa
File: 1-e-aHzEEue_NNRsPLNKnx07dj0c.roa (raw, json)
Hash identifier: 1GGHNGSfhysfjJmQ4rnJmcIrIEy9hPlF3dTcDxkHZUI=
Subject key identifier: F9:EF:9A:1F:31:04:B9:EF:CD:35:1B:0F:2C:D2:A7:C7:4E:DD:8F:47
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01899B9B35421D453CA3EBA9299CA0A004C6
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-e-aHzEEue_NNRsPLNKnx07dj0c.roa
Signing time: Fri 28 Jul 2023 08:26:27 +0000
ROA not before: Fri 28 Jul 2023 08:26:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211256
IP address blocks: 5.105.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:9b:35:42:1d:45:3c:a3:eb:a9:29:9c:a0:a0:04:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 28 08:26:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9ef9a1f3104b9efcd351b0f2cd2a7c74edd8f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:41:90:46:82:08:2c:fa:ab:5e:35:4c:6f:
a5:99:35:a5:7f:11:49:a1:53:cd:86:4d:63:d3:b3:
6f:2b:7b:70:f5:9c:4b:87:d3:49:52:7d:c1:7c:dd:
91:18:c0:14:c1:0f:32:dd:b7:83:4c:38:ec:53:7f:
79:d2:81:68:b4:e1:a5:e1:8b:1d:ba:28:8c:bc:64:
46:65:7b:aa:23:2d:ba:26:5e:7f:8c:2e:a7:c8:d0:
36:48:9e:e5:33:7e:7c:40:26:7f:1f:00:88:c4:dd:
50:83:b1:9e:9b:4a:9e:0e:d9:5f:95:82:35:e6:8a:
3a:5b:4b:9c:b9:56:0e:83:ca:49:d4:8d:d6:13:54:
42:13:cf:51:22:b5:32:61:0a:03:65:55:da:13:58:
6b:14:61:fe:6d:4a:27:89:5e:ee:35:0d:2f:aa:25:
e7:cc:c3:3e:2c:97:52:de:e6:c4:d2:a8:fd:dd:cb:
c8:5d:3c:01:2e:4a:ec:ce:1b:67:60:c7:b3:7c:a5:
c0:f2:07:1a:76:5d:02:f7:1b:c5:62:8f:fc:59:b5:
0c:a4:bc:29:96:56:f6:ac:aa:31:ec:fc:50:45:c4:
2a:62:3e:3c:09:68:18:e5:e2:a7:c7:cc:47:4a:75:
ce:f1:a8:18:41:8c:88:74:cc:f2:ea:35:5d:e4:02:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EF:9A:1F:31:04:B9:EF:CD:35:1B:0F:2C:D2:A7:C7:4E:DD:8F:47
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-e-aHzEEue_NNRsPLNKnx07dj0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.57.0/24
Signature Algorithm: sha256WithRSAEncryption
13:fd:78:74:3a:cf:8a:88:c5:a4:bb:01:17:f4:50:f8:b4:61:
7c:d4:db:0f:93:f1:e6:38:ed:61:75:93:14:da:c6:c5:3e:bf:
74:e1:0d:ed:c2:ba:d2:44:4e:f8:1c:45:cc:17:18:ed:a4:eb:
fe:c3:68:60:24:f6:c5:6f:a3:49:b7:66:40:f1:05:74:77:07:
a0:35:f8:9c:8d:8c:a4:5d:a1:f1:e4:ed:91:a0:5c:74:4a:f5:
07:44:47:0a:82:ca:a1:35:52:7c:f2:4c:cf:d8:d8:13:8e:18:
cc:fa:56:c3:0d:2b:32:b9:ba:7f:dc:bc:2f:08:28:a1:d6:3d:
1e:fa:6f:fc:e0:ca:68:f4:77:35:c3:54:3e:8f:6c:dc:eb:13:
2e:6a:4f:6b:8f:a6:27:7f:31:69:23:ae:52:4a:55:2a:ff:78:
19:83:5d:ab:ac:ee:f0:36:8c:3d:d9:5b:aa:03:42:ca:15:74:
97:68:86:c6:ca:b4:f9:28:56:3c:52:5b:f1:8f:7b:16:6f:96:
ea:c6:58:5a:08:13:c0:19:0c:a2:44:b1:c3:b4:83:73:0b:5d:
f1:73:86:21:05:98:3f:f2:e9:70:c9:e0:02:f9:84:85:4f:76:
e3:d5:02:03:75:f5:83:72:fa:f1:85:38:d6:cd:96:ec:dd:2d:
20:3e:b9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:42 2025 by rpki-client