Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4o-qL8NAG79h0oHfgfsEYwhGNwA.roa
File: 4o-qL8NAG79h0oHfgfsEYwhGNwA.roa (raw, json)
Hash identifier: Mqr5TP7VkXuqkkZBkxsyBy8lZ+E279EwpwdQCLP3VKI=
Subject key identifier: E2:8F:AA:2F:C3:40:1B:BF:61:D2:81:DF:81:FB:04:63:08:46:37:00
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01841D9F51DA88119C67171E08C2F3BA4D37
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4o-qL8NAG79h0oHfgfsEYwhGNwA.roa
Signing time: Fri 28 Oct 2022 08:04:51 +0000
ROA not before: Fri 28 Oct 2022 08:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.238.0/24 maxlen: 24
5.105.241.0/24 maxlen: 24
5.105.27.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.188.0/24 maxlen: 24
5.105.98.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:9f:51:da:88:11:9c:67:17:1e:08:c2:f3:ba:4d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 28 08:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e28faa2fc3401bbf61d281df81fb046308463700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:3d:a4:2c:65:1a:02:90:d2:5b:ce:e3:3e:
3a:74:ac:5a:c7:d7:39:cf:85:ea:5e:9e:2e:37:61:
56:00:1c:1e:df:4f:a0:75:54:25:03:ae:c6:02:29:
cc:57:fe:47:97:5f:b9:aa:93:c9:63:74:d2:4c:d2:
cb:71:2f:ae:9b:73:05:a7:bf:b5:92:52:c0:07:7d:
dc:f8:9e:c8:d5:68:18:09:57:d7:0e:64:31:6a:62:
34:3b:50:37:10:6b:5b:1d:b7:cf:b2:d9:96:4b:c2:
97:4d:c1:da:dc:39:45:6f:93:3e:c0:42:f3:59:c8:
69:ea:18:59:d7:3b:a0:80:43:e2:4a:e8:fa:83:9c:
2d:3e:20:ed:80:6d:1d:52:2d:94:6e:9f:fc:2a:7d:
35:84:8c:31:75:8f:df:5b:e3:d8:b3:0b:f0:32:d7:
8d:e7:8c:80:81:1b:b1:36:33:67:e9:cc:aa:ee:63:
8e:d6:8f:7b:4d:a4:c0:76:d5:74:2c:c6:6a:e1:b2:
af:99:c9:62:cb:28:37:06:67:05:3d:c3:e5:db:e0:
9c:1b:75:cc:74:b9:0c:59:f2:59:a7:9a:3a:3c:71:
f3:fc:2d:9b:a5:39:72:52:72:96:bd:e3:e2:a6:8d:
41:70:2f:d8:0f:b9:e4:0c:22:56:75:1d:04:e0:03:
70:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8F:AA:2F:C3:40:1B:BF:61:D2:81:DF:81:FB:04:63:08:46:37:00
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4o-qL8NAG79h0oHfgfsEYwhGNwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.27.0/24
5.105.98.0/24
5.105.124.0/24
5.105.188.0/24
5.105.204.0/24
5.105.238.0/24
5.105.241.0/24
5.105.252.0/23
Signature Algorithm: sha256WithRSAEncryption
26:d7:ea:91:fd:50:e7:ad:4d:a6:78:2d:38:23:9e:6f:0d:8b:
28:28:38:d3:4f:d0:0a:e3:6b:31:1a:10:47:96:aa:53:d4:a8:
c0:11:20:da:53:52:ef:41:72:2c:21:56:2d:25:83:93:8f:aa:
2d:b1:20:55:cb:df:98:1f:0a:65:17:42:d9:8a:e2:70:a2:29:
95:65:04:09:61:80:68:2c:9a:43:69:b4:12:2e:91:0f:d8:6a:
ab:e4:38:6b:9e:68:ba:9c:41:27:4e:04:9a:f3:72:66:56:e1:
58:09:b8:83:74:70:37:df:e3:00:24:0b:64:dc:b6:0f:42:cf:
c8:bf:a6:0d:9f:e2:7c:7b:cf:b7:18:44:0a:0a:62:ac:8e:58:
95:ac:c9:c0:91:d1:a4:f6:f3:71:3e:a3:cd:23:b0:f5:9f:06:
5b:0e:21:3f:1e:f4:37:85:b7:a7:89:9e:1f:5a:1d:d1:e4:ce:
bb:c7:1a:f0:5d:ea:5a:d3:18:ce:db:71:63:16:82:e7:ed:99:
01:fa:cc:80:e2:7e:88:95:25:c3:65:7b:91:de:41:67:73:f6:
26:8e:e3:2d:3c:cb:85:7d:46:90:b8:3e:49:cb:35:02:0d:67:
8a:bd:22:21:72:1c:d6:06:af:6a:dd:5f:b9:b5:4b:02:7d:f2:
93:a1:e8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org