Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2_yGV6WXtI5jPvhWro80N2mhK3Y.roa
File: 2_yGV6WXtI5jPvhWro80N2mhK3Y.roa (raw, json)
Hash identifier: 1e1eIC73DERwkLTlnw+G/rA4DmrsnC+qUbJ3yw/zVmg=
Subject key identifier: DB:FC:86:57:A5:97:B4:8E:63:3E:F8:56:AE:8F:34:37:69:A1:2B:76
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183130AE1C2CC71B6F7690A6489B96B3BC4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2_yGV6WXtI5jPvhWro80N2mhK3Y.roa
Signing time: Tue 06 Sep 2022 13:43:43 +0000
ROA not before: Tue 06 Sep 2022 13:43:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136923
IP address blocks: 5.105.123.0/24 maxlen: 24
5.105.48.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:13:0a:e1:c2:cc:71:b6:f7:69:0a:64:89:b9:6b:3b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 6 13:43:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbfc8657a597b48e633ef856ae8f343769a12b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a3:89:01:f0:53:84:11:5e:e6:53:8e:77:e2:
f8:9d:cc:75:01:96:61:f9:9c:ad:fc:eb:25:af:b8:
1f:fe:28:74:a6:15:fb:35:05:35:fa:0f:c9:b7:02:
f1:4a:e2:c0:07:81:4f:43:8a:c1:04:cb:a5:9f:3f:
99:78:a6:08:25:32:5c:ff:f2:7e:2c:34:19:fa:04:
00:6d:cc:a5:ac:24:76:ac:20:bc:ac:50:13:15:ec:
1d:fd:5e:e8:19:5a:35:a3:db:c3:db:2a:c6:9d:82:
f1:a0:17:ec:b5:ac:e6:f2:13:c9:89:1c:97:9b:fb:
6c:60:25:20:d7:b6:c2:37:4a:6b:20:6f:1d:7b:f5:
18:df:72:5b:aa:31:2c:b2:d0:e9:e1:fd:80:4a:4e:
dd:07:06:76:f1:16:65:d8:d2:b8:17:1f:15:66:13:
e7:e5:d3:f0:5c:e4:64:46:79:62:10:31:11:bb:29:
16:15:23:ff:9a:99:1c:65:8d:a3:ba:88:db:25:d3:
f8:d5:bb:94:bf:ff:4d:e6:36:1b:1b:cd:a1:94:c9:
1d:54:af:27:95:10:9e:72:f2:67:76:49:b1:f8:64:
26:10:bc:1f:be:d3:ef:69:c4:52:21:69:34:db:8a:
1d:dd:86:e9:6c:c6:18:b5:42:2a:2f:ff:d7:2b:c5:
b2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FC:86:57:A5:97:B4:8E:63:3E:F8:56:AE:8F:34:37:69:A1:2B:76
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/2_yGV6WXtI5jPvhWro80N2mhK3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.48.0/24
5.105.57.0/24
5.105.75.0/24
5.105.89.0/24
5.105.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:47:31:a1:66:d1:9d:42:e5:a3:16:f7:64:50:11:8f:80:fa:
c3:b3:f7:2a:8b:ee:7f:f4:64:7c:85:92:73:bd:7a:e2:88:01:
85:7b:ff:81:62:f0:15:fa:cc:1d:c5:8c:ac:53:89:42:c5:a0:
5e:40:f7:c8:41:f5:8c:f8:4d:e6:4f:53:f6:93:8b:46:b3:a4:
c2:30:23:31:f5:2b:16:86:3a:f5:8f:66:cb:8b:b2:6a:1d:fa:
cf:a8:c0:4d:8b:10:c6:7e:10:d0:c1:0f:0b:bc:07:a2:2b:1e:
69:52:45:af:91:a6:ae:06:7d:a6:b1:83:06:e5:2e:ec:71:68:
4b:bf:08:f9:58:90:92:35:59:c0:fc:17:2f:64:1f:92:7f:6c:
f5:bd:17:d4:4e:87:45:79:c9:a6:e7:ed:6a:ba:02:85:2f:0f:
d8:ae:37:73:21:e2:16:82:81:2a:a9:2e:4e:5d:74:58:e2:b9:
2f:9a:7f:75:c2:6c:f6:bc:77:50:66:a2:eb:3f:e3:ad:f0:43:
b2:d7:ad:ea:b8:d8:d4:3a:62:25:86:29:dc:28:9d:a9:c2:a4:
d6:b6:32:f0:e4:d8:31:48:76:23:d1:94:8c:6d:d4:a0:b6:49:
c4:d2:d6:14:e4:f4:28:01:27:6e:d3:f8:38:30:6c:ce:97:e2:
42:bd:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org