Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7BtSsYcMaGwialhkTJcmxfSGDXI.roa
File: 7BtSsYcMaGwialhkTJcmxfSGDXI.roa (raw, json)
Hash identifier: maqe+gUJw8bnKPRj6BQnzRvr6ZSuKMMmI+a7WLiJ8sg=
Subject key identifier: EC:1B:52:B1:87:0C:68:6C:22:6A:58:64:4C:97:26:C5:F4:86:0D:72
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187938E2F1B59D755C339A3FC71D157F0E4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7BtSsYcMaGwialhkTJcmxfSGDXI.roa
Signing time: Tue 18 Apr 2023 08:49:41 +0000
ROA not before: Tue 18 Apr 2023 08:49:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 5.105.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:8e:2f:1b:59:d7:55:c3:39:a3:fc:71:d1:57:f0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 18 08:49:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec1b52b1870c686c226a58644c9726c5f4860d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:e9:05:2b:f0:e4:fa:e4:75:99:1d:1b:a0:
34:da:ea:94:93:9e:ed:7a:12:df:5c:9d:71:12:8f:
d5:ea:7f:01:56:58:ba:d9:cf:99:bf:a3:0f:0a:e3:
2b:df:db:27:34:06:eb:bf:1d:f0:91:79:82:f8:45:
6b:cf:d3:93:41:c2:82:f9:a6:27:71:aa:f3:c2:a9:
b1:3d:d9:6d:64:9f:c7:07:bc:49:a4:ae:cd:be:8c:
6e:75:07:90:1a:d0:05:90:4c:7d:1b:e9:b0:6f:6a:
96:df:1c:86:a8:40:6a:a6:03:08:55:06:3f:99:e6:
3b:55:1a:68:d1:62:a8:1a:fe:37:b4:4a:6e:6c:b9:
50:6e:d1:92:56:a7:c8:cb:12:c0:78:8b:5c:fb:17:
00:65:b1:c3:b7:38:33:72:34:5f:04:55:f6:a4:2d:
76:c4:f8:ff:c2:1a:5a:e0:f7:10:fa:8d:9e:65:af:
41:91:08:bb:ee:b1:2e:46:47:d8:07:ea:76:af:99:
d2:59:bf:9e:06:cf:04:ca:c8:2c:7a:da:c3:5c:9e:
70:10:2e:59:db:d3:94:77:0a:2b:5e:c5:d8:2e:31:
c6:16:37:c6:14:86:33:55:31:5d:18:90:02:d4:1e:
d6:8a:31:4f:1c:5e:f3:af:e8:c5:90:af:d3:cf:43:
4e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1B:52:B1:87:0C:68:6C:22:6A:58:64:4C:97:26:C5:F4:86:0D:72
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7BtSsYcMaGwialhkTJcmxfSGDXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.29.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c6:9d:14:9d:0b:f3:7a:10:bd:9a:0d:b1:1e:3b:f5:ae:1b:
66:5a:e1:67:fc:56:85:0c:3c:24:8f:e2:6f:c3:11:56:6f:6c:
bd:8a:bf:42:fd:90:24:19:e6:d1:4b:59:52:99:05:af:45:d1:
bf:80:aa:34:4f:cf:eb:d7:bf:5e:f0:07:fe:4c:bf:03:52:ca:
d4:d7:de:c6:be:6d:84:18:ba:25:d5:f9:9c:6b:0f:5a:3d:44:
21:9a:43:e0:39:7f:48:0d:bc:f5:21:b3:7c:0e:18:65:ca:dd:
30:f4:14:cd:8d:55:13:a4:18:3a:9e:5f:71:c5:fa:d7:79:98:
3a:ae:5b:4d:b4:dd:11:62:d1:79:41:29:0d:f7:62:56:e1:f5:
07:8c:70:c5:30:d0:18:e3:0b:55:4f:01:f4:d3:16:70:e9:ce:
f8:b0:5d:4a:a4:83:17:33:13:f6:81:0a:10:0d:d0:b9:be:89:
88:48:18:b9:75:77:f2:92:db:3f:90:e3:3c:ff:fe:2c:78:95:
4c:98:5f:fb:6d:2f:fc:e2:bf:1a:22:40:89:74:03:04:bd:f1:
d6:d0:29:d4:cc:29:9a:1e:f4:ec:d9:8f:73:05:77:c7:ce:ef:
f5:df:e7:61:1a:da:f8:83:e0:cb:09:b5:47:b9:d9:be:68:91:
ac:15:b4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:55 2025 by rpki-client