Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8Z4Rj00hg1W2JJfrZgoi0YIr2zY.roa
File: 8Z4Rj00hg1W2JJfrZgoi0YIr2zY.roa (raw, json)
Hash identifier: vuva/3zb6hHf2lVmqM28/16Gbl9kjO3PKdja2xEN27w=
Subject key identifier: F1:9E:11:8F:4D:21:83:55:B6:24:97:EB:66:0A:22:D1:82:2B:DB:36
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185348C59CCAF3B115E41B5043DAD2006C2
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8Z4Rj00hg1W2JJfrZgoi0YIr2zY.roa
Signing time: Wed 21 Dec 2022 11:58:11 +0000
ROA not before: Wed 21 Dec 2022 11:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400536
IP address blocks: 5.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:8c:59:cc:af:3b:11:5e:41:b5:04:3d:ad:20:06:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 21 11:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f19e118f4d218355b62497eb660a22d1822bdb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:5c:d3:7c:35:54:23:dc:ba:28:c1:6e:89:
f5:e8:84:15:11:87:31:aa:20:39:01:89:53:db:34:
8a:be:73:4c:cc:2a:f8:a8:7e:e5:72:51:0b:50:df:
b0:a6:36:1b:29:ac:56:9d:c5:4c:7b:c9:ee:60:2b:
2e:a3:c6:26:ec:d0:8e:8e:80:6f:8e:79:87:43:79:
bb:b4:95:74:0f:06:7e:2a:99:08:32:88:04:a7:5b:
b3:da:b7:74:ea:cf:3c:05:bc:e9:3c:1b:ff:ec:cb:
42:95:eb:c9:c4:65:05:76:4c:df:33:ad:ca:99:3e:
c4:5d:ed:e3:ac:dd:19:16:5f:6f:5d:4c:e6:a4:ef:
d9:77:f3:3e:c6:07:17:37:3b:01:59:65:42:25:c6:
32:c5:4c:f3:e6:c5:56:58:80:4b:92:ef:ed:48:10:
c7:08:34:5c:72:dd:e5:38:2d:b0:18:44:a0:32:cf:
46:04:c1:a5:69:dd:18:87:6c:a9:6d:a9:d6:50:ee:
20:56:8f:5f:df:8c:f9:03:80:3a:26:5c:c6:d7:af:
3d:04:58:40:a7:91:bd:fb:9f:5b:e7:2b:05:5c:b1:
6b:bf:37:29:f4:62:a5:8e:07:1a:70:8b:27:c3:25:
0e:37:7f:6c:c0:a2:0c:0b:32:b4:b6:a9:b3:25:b2:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9E:11:8F:4D:21:83:55:B6:24:97:EB:66:0A:22:D1:82:2B:DB:36
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8Z4Rj00hg1W2JJfrZgoi0YIr2zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.4.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b8:ea:32:0b:cd:c5:e0:60:91:10:d5:1e:a1:af:e6:a1:ac:
3c:46:72:e2:1a:d9:94:e6:63:37:d5:b8:03:fb:ad:a7:77:b3:
47:01:71:b5:c5:db:80:0e:8b:58:dc:99:44:e1:1a:a0:a6:70:
82:f5:cb:4e:80:55:cb:a9:d3:ea:51:e0:08:34:d1:fd:e2:ca:
2c:6c:9f:49:69:a2:59:6d:0e:23:a8:0d:d2:8c:f5:f5:75:c4:
2b:80:35:e2:46:61:8f:da:21:8b:c4:e1:10:fd:12:a1:70:bb:
0d:19:d9:8b:e4:85:8a:f2:43:62:64:aa:a2:a6:42:c5:fc:9e:
2a:d4:01:aa:e1:2c:5f:d1:6b:c0:1b:0e:4f:04:3f:9d:23:42:
b2:1d:80:f9:09:41:fc:b4:28:c5:2a:48:4d:3b:d9:ba:61:80:
e4:52:de:fa:b5:a5:b0:d2:6c:28:ce:98:a5:14:09:59:e8:48:
15:2b:71:43:1f:ab:68:55:c7:75:30:6d:68:df:92:5a:43:11:
fd:a9:d7:bb:53:c6:cb:ea:83:48:a5:54:dd:5d:fb:2e:4f:32:
56:49:0d:e6:23:0f:a8:20:f3:c5:79:57:cc:ee:d6:86:4c:a5:
d2:bf:4d:e3:e9:c1:7c:58:5e:2c:96:ff:97:c4:28:96:9e:44:
21:04:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org