Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7t0yvPCtByqg3kh7GPAnZPWqwaI.roa
File: 7t0yvPCtByqg3kh7GPAnZPWqwaI.roa (raw, json)
Hash identifier: ScRfipKS/N8IfeRz8JY//5XmS5PjXDl2kqhxmAaRHpg=
Subject key identifier: EE:DD:32:BC:F0:AD:07:2A:A0:DE:48:7B:18:F0:27:64:F5:AA:C1:A2
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183400DE59645F82DE14B9E1166AC0144FD
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7t0yvPCtByqg3kh7GPAnZPWqwaI.roa
Signing time: Thu 15 Sep 2022 07:29:56 +0000
ROA not before: Thu 15 Sep 2022 07:29:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 5.105.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:0d:e5:96:45:f8:2d:e1:4b:9e:11:66:ac:01:44:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 15 07:29:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eedd32bcf0ad072aa0de487b18f02764f5aac1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:b1:30:9f:cb:f9:4c:59:88:05:05:52:17:
5d:d5:a6:39:ff:d6:1f:1a:78:76:92:ad:08:54:f2:
f3:56:42:f5:dd:5e:87:27:71:7e:7f:ae:c0:69:c1:
6e:da:c6:2c:95:bb:ce:41:2a:f7:71:5a:81:d4:78:
47:3d:4b:9e:3b:63:fa:8d:9b:29:9e:77:bb:65:38:
a7:1a:b9:8e:0f:84:c5:cd:ee:51:a0:e6:11:38:0d:
08:57:50:bf:98:c5:8b:d6:06:d4:16:90:d2:1c:47:
66:a8:2b:b8:21:6c:d8:da:72:68:80:2b:9f:0d:dc:
30:12:8c:f9:ac:6c:6f:dc:ba:ae:94:ef:5a:dc:2d:
8f:53:25:ea:06:03:88:bd:75:b3:1d:ad:0a:cf:2f:
2a:76:51:fe:9e:af:ee:f3:76:1c:35:7b:42:19:ae:
70:2b:36:3c:59:14:27:dc:c4:f6:40:eb:93:dd:44:
44:f7:4f:ea:60:27:24:0f:71:88:80:2c:63:41:52:
b2:61:0b:ce:8d:be:ac:c8:ca:48:7b:10:9b:2d:09:
c3:47:cb:c3:a1:33:17:0e:a3:1c:9f:01:9a:6f:d1:
ef:4f:02:5e:3a:0b:47:32:0d:bb:60:cd:2a:80:28:
60:84:84:31:38:17:62:4c:9f:57:fb:a4:5f:89:c0:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DD:32:BC:F0:AD:07:2A:A0:DE:48:7B:18:F0:27:64:F5:AA:C1:A2
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7t0yvPCtByqg3kh7GPAnZPWqwaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:3d:fb:3d:05:49:ca:eb:88:73:7f:4a:e1:4f:a6:5b:fe:29:
66:d6:1c:bb:11:06:44:0d:f1:d4:b6:c6:a3:03:ee:20:d3:01:
dd:7c:8a:e4:1a:d7:ee:80:ee:31:22:2f:c5:55:86:7b:24:2e:
5b:48:6b:d9:01:86:f3:f3:e0:98:5e:e5:88:f1:fb:c8:5c:02:
e3:a3:a7:bf:87:d2:f4:8a:54:df:86:a0:da:9d:75:b9:7d:ab:
ca:9d:12:ff:a0:20:7d:5b:db:35:80:7d:87:09:e8:b1:14:36:
29:88:77:31:d2:c3:b7:2f:80:de:a2:73:ef:8d:26:4f:07:0a:
37:73:a8:1e:93:7c:21:a3:22:25:3f:ac:54:ea:da:83:fc:73:
00:48:f9:16:a9:ff:f6:35:d4:ca:11:d5:34:3c:c8:18:f1:d6:
a2:88:9b:af:64:0a:63:8c:82:cd:37:13:0e:7a:76:e3:9d:85:
4d:99:b7:fc:b5:cd:8b:a1:6c:cc:76:a7:da:39:d9:3b:26:0d:
53:48:4a:a1:46:22:9d:4a:a0:c3:bc:e9:6a:0b:73:fa:88:54:
18:73:05:85:95:4e:ad:ef:46:80:f2:d2:6e:fe:ba:a9:db:5b:
c5:7f:02:22:b2:7c:23:2f:10:1b:af:25:3d:6b:b8:79:db:44:
16:3a:51:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org