Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4yMe5WXkJ3CJ-TpfDEMm0V9uCUs.roa
File: 4yMe5WXkJ3CJ-TpfDEMm0V9uCUs.roa (raw, json)
Hash identifier: EnKsCPRFxVnoG12OdAi6Ey4aY+ZSss6+kb2RwPtgzHQ=
Subject key identifier: E3:23:1E:E5:65:E4:27:70:89:F9:3A:5F:0C:43:26:D1:5F:6E:09:4B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0184477355CC15C3CDCCD4CCA46309BC3032
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4yMe5WXkJ3CJ-TpfDEMm0V9uCUs.roa
Signing time: Sat 05 Nov 2022 11:00:51 +0000
ROA not before: Sat 05 Nov 2022 11:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204615
IP address blocks: 5.105.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:47:73:55:cc:15:c3:cd:cc:d4:cc:a4:63:09:bc:30:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 5 11:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3231ee565e4277089f93a5f0c4326d15f6e094b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:16:1b:25:ae:16:d6:65:f7:16:dd:1d:60:
cb:2d:12:46:f6:f9:e3:75:55:7b:89:69:3f:be:3c:
df:7e:17:65:0b:8d:9b:51:4f:46:1a:c1:8c:39:29:
79:39:ad:0a:05:f4:28:d0:7b:82:71:3c:b9:79:84:
23:24:ac:48:33:4b:73:b5:44:c1:01:81:5e:35:61:
30:33:8b:5a:85:d3:e9:82:ee:ea:2b:a1:5c:cd:a6:
a9:0f:8f:68:17:f2:c9:93:21:e1:77:98:9a:7a:5d:
c6:17:ed:58:96:b3:db:4f:83:00:64:df:41:cb:b8:
bb:d5:21:a6:61:3c:39:e8:e3:d0:d0:f9:30:ae:f0:
83:5c:ea:78:83:3e:7b:6e:bc:94:f3:f8:7d:af:3d:
35:7e:9e:89:bd:de:33:78:2d:ad:41:5b:fd:94:77:
fa:34:f9:7f:3f:64:17:7f:f4:80:fe:e5:8f:ff:fc:
a4:bb:05:26:4f:a2:06:14:17:ae:14:ad:45:aa:53:
a6:a0:31:11:aa:77:93:38:f9:e1:b4:bd:35:15:f2:
78:28:32:fe:6e:38:85:b0:a5:70:ed:5b:a3:d1:ac:
64:e5:ab:36:1f:c4:27:49:28:e1:37:a4:b3:59:54:
c7:f3:e9:8a:64:ae:06:fb:44:42:0a:5f:1c:84:ce:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:23:1E:E5:65:E4:27:70:89:F9:3A:5F:0C:43:26:D1:5F:6E:09:4B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4yMe5WXkJ3CJ-TpfDEMm0V9uCUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.50.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:8f:dc:df:90:f5:24:54:3e:c0:b2:a2:e4:2c:72:bc:70:b9:
73:00:d2:a3:75:93:b6:27:c0:b3:fc:0c:04:c6:97:b4:1a:c0:
e4:1c:4f:d2:ae:37:9c:a9:95:6d:eb:7c:b6:b7:61:aa:f2:25:
12:f3:44:dc:4b:ee:21:2e:4a:98:01:f7:94:c4:a2:e7:0b:8b:
ca:d1:27:5a:d1:9b:c2:92:3c:ef:c7:0d:22:b1:c0:18:dd:26:
9a:0b:d4:73:d1:c1:5c:28:72:74:0d:23:ca:7f:54:95:d5:eb:
6d:7c:46:88:1f:eb:73:1d:37:b0:3a:71:ec:90:f4:98:a0:e9:
c6:16:3b:6d:4e:82:6b:12:77:6f:8c:f0:ea:cb:08:3e:eb:9d:
f1:1c:5f:1a:c5:33:2c:a0:65:c0:9f:3c:94:7a:74:fd:ce:cb:
b2:f3:bf:14:28:c4:07:c5:fd:c7:e3:8b:97:37:b2:74:09:11:
e4:b3:3f:eb:b3:fe:98:38:2b:fd:a5:83:19:e2:e9:c2:7d:5c:
ed:64:3e:d0:d1:9f:47:77:24:4d:7d:14:75:30:cd:de:c0:8c:
53:4d:f8:60:27:a7:7b:bc:1e:d4:53:60:cc:16:0b:16:fe:4c:
2c:77:5d:f3:5a:41:44:52:7e:87:b9:dd:31:23:a7:7c:18:f0:
b6:c6:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org