Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7iJm4KxbFRQWSnDl6SM616l8pYs.roa
File: 7iJm4KxbFRQWSnDl6SM616l8pYs.roa (raw, json)
Hash identifier: PXL50WtZ+ltOGwWVJcaAA4X37Q4S9jp8eWT85ZZCQy0=
Subject key identifier: EE:22:66:E0:AC:5B:15:14:16:4A:70:E5:E9:23:3A:D7:A9:7C:A5:8B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0184C39D5E579DB8472CEB4EEBC5FF8787B1
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7iJm4KxbFRQWSnDl6SM616l8pYs.roa
Signing time: Tue 29 Nov 2022 13:39:41 +0000
ROA not before: Tue 29 Nov 2022 13:39:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207633
IP address blocks: 5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:9d:5e:57:9d:b8:47:2c:eb:4e:eb:c5:ff:87:87:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 29 13:39:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee2266e0ac5b1514164a70e5e9233ad7a97ca58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:67:11:9d:e4:23:ea:35:4f:21:e7:c5:4e:b5:
5b:e2:0d:16:62:50:77:f3:9c:67:ab:81:77:d6:22:
fd:99:72:64:3b:b0:a4:89:df:95:ab:33:7f:b0:8c:
36:ee:10:09:9b:af:30:cd:d0:04:66:39:b6:e5:41:
0a:8b:b6:2b:fa:5e:ed:9a:c8:d0:e2:54:db:ec:7b:
99:a5:7e:81:68:c3:91:dc:ab:18:b9:08:0a:c7:4b:
71:08:33:a4:1d:8a:16:d3:66:ee:78:54:05:19:a1:
1c:fb:69:41:b7:48:7e:04:20:90:cc:03:ec:cf:f8:
65:96:d0:61:8b:54:00:ed:86:ef:17:2b:07:36:48:
8b:25:18:d0:d7:06:d9:4b:18:5f:f4:b0:72:1f:22:
91:d6:78:8f:61:3c:b8:c5:ec:13:7a:d2:ee:21:4f:
cc:77:d3:ae:34:f8:45:42:12:0a:53:95:10:60:40:
f6:09:94:7b:26:85:3b:75:be:2b:67:66:a7:ab:68:
a6:8b:aa:cc:6e:73:f3:0e:3d:9e:36:96:d1:0e:94:
4f:ad:97:c5:dc:f7:7a:97:34:15:77:20:93:ee:1e:
8a:33:c1:e0:03:03:3f:62:fd:b9:f6:28:a7:be:30:
20:e5:55:25:21:8f:3a:63:f9:70:fb:59:36:d5:a6:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:22:66:E0:AC:5B:15:14:16:4A:70:E5:E9:23:3A:D7:A9:7C:A5:8B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7iJm4KxbFRQWSnDl6SM616l8pYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a0:31:67:fe:c4:98:f8:aa:cc:a6:95:37:de:e9:b7:4d:4d:
bd:f8:fd:61:f4:b9:ce:bd:ba:3a:b0:1a:78:13:cc:7a:eb:cf:
29:0f:47:fd:39:14:bf:ac:fc:ad:94:fb:f4:55:3d:eb:90:30:
14:19:20:53:6a:75:51:08:cf:2c:ab:20:5d:a8:1c:98:90:b9:
55:6b:e8:9c:9c:79:e5:1f:34:42:e3:91:fd:a7:f4:65:47:6b:
0b:c3:75:8a:1c:58:a4:df:9b:4b:7a:5e:9f:6c:3c:73:25:27:
9c:22:62:40:ad:4b:ad:f7:c9:05:2b:e6:91:7b:7c:9d:e3:47:
9a:6d:cb:73:e1:d9:9d:90:e0:5e:0d:43:63:7a:ec:a4:59:74:
97:d7:b1:3b:f1:f8:05:bc:ba:a0:17:41:62:84:73:4c:ca:b3:
e1:b9:ce:65:f8:e3:1e:1d:0b:94:40:89:95:7f:e5:a6:ee:59:
4d:c8:16:02:a4:e0:e4:d9:80:a3:f6:07:45:af:a2:3c:22:48:
6a:bc:21:71:04:34:b4:41:1a:f1:f9:63:d7:54:ac:89:e6:f1:
81:24:81:3c:24:e6:16:82:56:55:96:57:69:a6:98:b4:62:51:
2f:53:06:77:e4:ae:76:bc:2f:0e:68:25:23:c8:77:e6:60:6a:
46:6f:db:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:42 2025 by rpki-client