Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4pmsnvvlerun-UFiI8yBoBfNayU.roa
File: 4pmsnvvlerun-UFiI8yBoBfNayU.roa (raw, json)
Hash identifier: K7YX9SgFMr7qeJxCchGurPe3a6chRigf3hX76tUbKc8=
Subject key identifier: E2:99:AC:9E:FB:E5:7A:BB:A7:F9:41:62:23:CC:81:A0:17:CD:6B:25
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0182EA53F167C0737F59FAF76388812FA117
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4pmsnvvlerun-UFiI8yBoBfNayU.roa
Signing time: Mon 29 Aug 2022 15:59:05 +0000
ROA not before: Mon 29 Aug 2022 15:59:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 5.105.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ea:53:f1:67:c0:73:7f:59:fa:f7:63:88:81:2f:a1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 29 15:59:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e299ac9efbe57abba7f9416223cc81a017cd6b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:79:27:e6:db:19:72:90:94:12:de:db:35:a2:
53:ac:ad:b3:be:e0:a5:61:4c:b3:39:9d:26:0e:00:
ce:33:2d:d0:d2:d6:06:31:8c:d0:5b:93:ea:51:b4:
d2:f0:21:13:87:3d:b7:85:57:9b:e0:a4:60:ee:45:
b5:d6:37:8a:87:2c:fc:40:49:fa:6f:f8:e0:09:10:
5e:2b:d3:2b:4d:25:c7:c5:be:51:c2:66:12:01:36:
3d:ed:a4:e8:dc:25:ed:e9:04:bf:b1:17:c9:58:b5:
5d:78:5b:dd:a4:59:fb:84:af:ef:31:31:31:cc:86:
4a:18:0d:c9:e8:fa:dd:70:74:c1:ca:31:86:35:a7:
7a:d0:3f:05:72:4e:79:42:d6:31:d8:08:cc:de:29:
05:cd:4c:2e:c3:20:1a:4b:8b:42:21:ab:96:a0:b8:
7a:01:bf:7d:9a:8e:6f:7b:2f:a1:2c:81:d1:72:10:
7f:6e:43:1f:d8:30:16:56:4e:fe:17:b1:f8:58:83:
b5:4e:aa:86:bb:b8:39:3b:70:9d:13:b3:ec:b3:e0:
d4:4b:b6:0d:a0:cd:e1:e7:71:33:84:a2:8d:6d:ba:
24:c4:f8:b1:e8:6d:de:7a:00:4d:88:7c:bf:91:bc:
ec:15:4e:72:cb:93:ac:e9:24:05:c3:16:ab:2c:6a:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:99:AC:9E:FB:E5:7A:BB:A7:F9:41:62:23:CC:81:A0:17:CD:6B:25
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4pmsnvvlerun-UFiI8yBoBfNayU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.99.0/24
Signature Algorithm: sha256WithRSAEncryption
57:6b:76:77:4d:01:f4:73:63:05:fc:99:c9:2d:3b:8d:84:4f:
5d:24:1d:5e:26:eb:9e:33:2a:93:5b:bf:ba:92:c2:6e:ed:9b:
84:26:da:be:06:02:f4:0d:5d:82:e8:86:cf:1d:bc:81:4f:d9:
b0:1a:3b:f8:59:36:b1:2c:3c:0d:69:de:f2:5f:2d:08:8f:3e:
4e:8c:50:41:dd:f9:8b:da:e6:79:79:de:75:df:80:66:ea:a9:
ac:cb:24:9a:ac:b7:8d:ed:56:05:bf:cc:1c:bb:4f:76:d6:28:
82:cc:8c:a4:48:18:60:51:5c:01:31:52:d7:9d:bd:cd:d4:c2:
ca:42:bb:a0:1d:09:1a:39:a4:3b:cf:e1:86:e9:ba:42:48:06:
6d:24:f5:1e:75:fb:49:b4:15:3f:c8:8d:39:67:8d:8c:46:51:
82:a1:04:74:8c:79:51:07:44:8a:9f:a7:64:1e:5c:d2:99:0c:
01:9c:fe:73:0e:b1:32:f6:e4:ad:46:45:c7:a0:f4:b9:a1:40:
24:88:01:5e:3a:7b:2c:1b:a9:b6:c2:af:6b:40:9a:62:eb:0b:
5e:1b:b0:a1:a9:39:2b:c6:80:ed:a4:48:19:dd:1a:2f:13:56:
b0:b1:11:1d:79:f3:db:ba:b8:db:a1:32:d8:d5:5a:11:1c:1a:
29:71:50:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org