Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7ZJ3pOkNbjKjDO1gaOTs_XU2ivE.roa
File: 7ZJ3pOkNbjKjDO1gaOTs_XU2ivE.roa (raw, json)
Hash identifier: zDBh2goP0zNaa6AibcDjDjH4HlI6J6OFuhG0ymqAj9U=
Subject key identifier: ED:92:77:A4:E9:0D:6E:32:A3:0C:ED:60:68:E4:EC:FD:75:36:8A:F1
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01833AF7885898B20B1229FAC79646844BE0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7ZJ3pOkNbjKjDO1gaOTs_XU2ivE.roa
Signing time: Wed 14 Sep 2022 07:47:24 +0000
ROA not before: Wed 14 Sep 2022 07:47:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 5.105.238.0/24 maxlen: 24
5.105.241.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3a:f7:88:58:98:b2:0b:12:29:fa:c7:96:46:84:4b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 14 07:47:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed9277a4e90d6e32a30ced6068e4ecfd75368af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:1d:e2:08:ae:84:35:6d:47:07:0e:78:c8:
11:02:f2:45:9e:38:6c:6d:a7:a9:d7:8a:f7:00:49:
d9:2c:8c:35:da:e9:c3:e6:ed:8d:04:32:54:f1:20:
3b:89:0f:8b:e9:e8:ec:18:ea:af:e2:6b:d1:e5:00:
18:4e:96:80:bf:20:2c:19:e0:28:f8:84:68:8f:d6:
d7:4e:6d:03:e7:a3:0c:bd:9c:33:8c:a6:a1:d1:49:
36:6f:01:e9:f6:b3:06:a3:3b:66:31:54:83:4b:34:
f7:fb:f5:56:b8:fd:ba:13:88:79:78:52:eb:c5:f0:
d9:97:f1:96:9d:27:8b:60:a0:2d:27:0d:7c:c1:92:
d5:12:87:89:c1:36:4e:1c:58:a6:c7:71:29:0b:f4:
90:74:b4:0e:8d:ed:29:1b:82:23:6b:71:a1:6a:4e:
6a:eb:d4:5b:93:5c:77:eb:15:1c:fc:76:c7:44:5a:
bc:39:a5:99:52:65:36:15:ca:b9:7c:9e:a6:1c:44:
bf:d4:dd:e2:79:c9:c6:8b:4d:73:5c:c7:dc:24:4f:
9b:00:a2:b4:88:e0:a7:d9:c7:25:9f:d5:bc:31:f1:
97:a0:0b:e1:4a:41:6e:8e:bb:1f:ff:88:53:59:ad:
47:65:2b:a7:ac:fd:53:cd:15:e7:1a:fa:21:9a:6e:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:92:77:A4:E9:0D:6E:32:A3:0C:ED:60:68:E4:EC:FD:75:36:8A:F1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7ZJ3pOkNbjKjDO1gaOTs_XU2ivE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.238.0/24
5.105.241.0/24
5.105.252.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:bf:99:46:ad:89:31:30:77:e2:47:95:21:8d:6c:cf:a7:17:
e1:71:81:0b:76:c2:f6:73:5e:1e:9d:1d:12:7b:9a:94:64:a2:
ed:a2:bc:4b:0e:7c:23:14:92:38:0e:56:d6:50:7b:79:cf:7c:
d9:36:29:8b:3b:46:a4:80:5e:86:14:7e:ff:8d:12:dd:71:c7:
88:9f:2a:97:84:9b:a4:44:c8:49:0f:da:c4:11:be:60:0e:13:
21:ce:09:45:52:c5:5c:44:e0:74:15:1b:17:f8:6b:2a:e2:6d:
20:88:99:d1:ed:8a:9b:94:77:6f:b9:f4:73:a0:15:e5:2a:b9:
2d:6b:fc:78:85:99:c0:d6:fc:11:ea:4c:0b:20:22:8a:ad:fd:
fc:ac:ae:5a:3c:bb:a7:4d:eb:12:e4:9e:79:31:ca:a6:70:50:
96:a5:50:3c:84:3a:43:7f:52:f2:b1:ae:ff:fe:18:89:37:ed:
15:3c:bf:ea:b5:71:0f:8d:57:11:74:52:79:a6:20:de:e2:ff:
33:ce:96:32:d3:bb:7f:d4:2b:cf:72:14:2c:2b:8e:74:94:9c:
c1:fe:95:7e:7b:56:2f:79:b1:bf:9c:13:da:33:e0:59:b6:9c:
ca:ed:98:ff:ce:d8:d4:7f:a6:99:04:4b:67:82:70:24:31:00:
c9:0b:8d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org