Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5WXZlwta-s7eVwRDtJGKkfS6knA.roa
File: 5WXZlwta-s7eVwRDtJGKkfS6knA.roa (raw, json)
Hash identifier: 3V4aPzsSxiAOLw7YlfUT7JHBiY5cOci9V3tHToIPaaU=
Subject key identifier: E5:65:D9:97:0B:5A:FA:CE:DE:57:04:43:B4:91:8A:91:F4:BA:92:70
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0184F77D635B274B7C1EABD62116ECC695BF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5WXZlwta-s7eVwRDtJGKkfS6knA.roa
Signing time: Fri 09 Dec 2022 15:25:00 +0000
ROA not before: Fri 09 Dec 2022 15:25:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 5.105.29.0/24 maxlen: 24
85.255.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f7:7d:63:5b:27:4b:7c:1e:ab:d6:21:16:ec:c6:95:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 9 15:25:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e565d9970b5afacede570443b4918a91f4ba9270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:34:fb:b0:d9:3e:68:ef:75:d1:cb:a3:ff:
42:45:cb:c5:15:a6:4f:d6:e6:a8:4e:9f:42:7e:0c:
fa:8c:bc:c5:5f:6d:b4:64:8a:b3:3a:cd:f2:b2:2e:
5d:74:26:6e:fa:f6:83:bb:25:cb:64:a8:f4:bf:74:
33:b5:c0:ba:c8:0d:b2:a7:06:c3:83:66:b2:38:e4:
b5:10:d9:53:f2:f1:7c:bb:0b:4b:19:18:e3:7f:b3:
82:9e:50:68:ab:c9:87:e8:9c:a8:5d:2d:87:22:bf:
b3:a8:14:67:16:40:28:ac:a8:51:58:82:b1:aa:9c:
e4:95:f3:74:f9:36:59:9b:4d:c4:bb:20:d1:d1:ea:
0e:1f:51:d7:6b:15:35:92:59:75:d6:e0:43:e4:99:
9a:c7:cc:51:4d:64:4f:90:28:62:6c:3c:db:9f:47:
73:88:13:02:cc:4d:9e:19:47:af:19:59:e9:74:6d:
d6:e6:a2:51:98:fe:2b:42:b9:b8:f2:af:2e:a7:b8:
c6:ad:36:fd:e3:b5:d4:b1:83:f3:7b:21:53:3d:e5:
5e:17:fd:13:62:06:ff:2f:5d:fc:90:01:03:8f:da:
5f:51:26:58:7d:7d:9d:99:c2:e0:04:7d:c9:c5:db:
09:49:7f:37:db:36:1d:a7:32:89:e5:b2:e9:3c:b6:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:65:D9:97:0B:5A:FA:CE:DE:57:04:43:B4:91:8A:91:F4:BA:92:70
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5WXZlwta-s7eVwRDtJGKkfS6knA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.29.0/24
85.255.176.0/21
Signature Algorithm: sha256WithRSAEncryption
11:64:62:f7:07:b6:54:92:0b:42:0d:1f:59:27:ff:f6:93:e1:
90:24:7c:ca:bb:b6:7e:c7:a8:69:98:f8:f0:5a:7f:34:9c:c0:
86:d4:0d:39:e7:b4:3f:33:f2:98:f1:41:84:3c:99:16:c8:07:
ca:bc:88:40:46:91:41:b4:c1:5d:d8:95:fa:b7:75:29:21:cb:
3f:b5:b5:03:28:7d:22:67:7d:74:74:16:07:ae:3b:5d:0f:ee:
75:de:64:45:45:61:a8:d7:dd:24:9f:e2:b6:b5:b9:47:b3:b3:
aa:f8:8b:14:54:48:7b:67:7a:ee:8d:3d:76:d1:8e:62:d5:46:
9b:33:11:60:51:9f:9b:de:df:f5:6b:93:05:e7:97:6a:3c:bb:
38:b4:0a:9d:e1:4f:06:31:44:17:09:85:ef:a1:f0:fe:0c:84:
d1:49:ce:9a:41:01:e6:4a:d5:2a:ef:7e:48:cb:f3:46:95:a6:
cf:94:93:79:61:11:76:5f:8e:45:48:26:43:7e:4f:2b:f9:be:
f7:5c:3e:1a:df:bb:c8:de:d2:c6:f2:1b:19:93:51:66:dc:51:
c6:02:f5:e6:e2:87:27:af:bc:16:72:b3:03:30:59:0d:01:11:
7e:2f:01:b1:96:99:a0:7f:e8:47:97:5a:3a:9a:c0:0c:79:c4:
c9:f8:e8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org