Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8tQpHlVbf_cI05H43C3yBgb2A38.roa
File: 8tQpHlVbf_cI05H43C3yBgb2A38.roa (raw, json)
Hash identifier: 8vhdyyNtqK7AotJ/2oLRlmELNzO2FPBxfCU4o2IBuqE=
Subject key identifier: F2:D4:29:1E:55:5B:7F:F7:08:D3:91:F8:DC:2D:F2:06:06:F6:03:7F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018419C28C268BEEAFE2736FB794E67D872C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8tQpHlVbf_cI05H43C3yBgb2A38.roa
Signing time: Thu 27 Oct 2022 14:04:51 +0000
ROA not before: Thu 27 Oct 2022 14:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:c2:8c:26:8b:ee:af:e2:73:6f:b7:94:e6:7d:87:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 27 14:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2d4291e555b7ff708d391f8dc2df20606f6037f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:de:69:d6:24:ca:83:1a:87:b3:a1:ac:1a:
64:f0:ed:c1:b2:44:f0:f5:0e:3f:25:ea:0a:08:12:
17:ac:24:d6:2b:cf:9b:f8:b0:49:ee:e4:a2:da:91:
b5:b6:3a:0e:ea:10:20:29:10:e7:3a:d7:3e:1c:05:
ab:49:01:ab:dd:98:e3:25:04:4e:b4:ce:08:63:e6:
41:15:1e:20:e3:61:88:4c:0b:a8:f4:b0:1d:3a:9c:
06:ac:98:47:62:00:46:d6:0e:3e:15:0f:30:d6:e5:
96:f5:96:7f:72:73:2a:d3:3a:f3:07:7e:bf:6a:25:
ef:c8:ec:d3:f8:89:c4:9a:22:46:f4:c6:98:4a:b8:
93:11:dc:72:fb:3f:38:5c:5c:e6:0d:47:70:af:25:
cc:44:23:e1:6a:2c:f2:6c:d3:05:1e:5d:1e:6b:b1:
07:d0:b5:62:3b:f4:51:42:02:60:b2:5d:42:61:1c:
a5:15:5d:fa:df:36:5e:de:d7:f5:e6:9c:9b:b0:9c:
e0:c4:9c:a2:59:2f:4a:33:be:97:84:59:22:ce:1e:
2c:bf:2d:da:c9:c5:20:05:d7:46:94:2e:02:4c:2e:
39:58:46:8e:e6:92:56:5e:ae:16:db:df:93:bd:14:
be:e7:af:28:02:dd:ff:69:f0:27:9c:33:af:7c:97:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D4:29:1E:55:5B:7F:F7:08:D3:91:F8:DC:2D:F2:06:06:F6:03:7F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8tQpHlVbf_cI05H43C3yBgb2A38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.51.0/24
5.105.66.0/24
5.105.79.0/24
5.105.95.0/24
5.105.118.0/24
5.105.122.0/24
5.105.169.0/24
5.105.228.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:a5:10:6e:40:0a:df:22:63:56:59:52:b6:32:cd:1e:ae:29:
56:83:b1:da:7b:b3:1f:da:8c:85:65:58:25:1e:6b:f6:16:5c:
e5:dd:53:79:ef:8e:3e:91:a2:eb:d0:5c:39:be:eb:50:a6:cb:
fa:4a:a3:06:61:1e:4a:b4:95:94:a6:2a:15:18:d6:6b:9c:d9:
1c:d7:7b:a9:64:72:e8:c0:d0:53:b0:c0:35:0e:f3:47:49:a2:
08:2c:19:fc:0e:1d:f3:86:6e:cc:35:03:83:c7:88:db:c4:c9:
11:c6:cf:7e:6f:35:03:c0:07:e1:66:cc:da:f8:c2:46:3e:15:
0d:18:fa:e0:59:6a:80:5a:a7:bc:f7:86:0c:d0:0a:5f:68:ea:
5e:fe:d5:4e:7a:03:5d:fb:59:61:9a:03:3e:0b:2c:4f:21:41:
c1:d0:46:71:19:47:75:c4:2f:8c:39:49:d7:94:28:e4:27:d4:
25:ae:56:33:3a:c5:a6:78:70:ac:f1:c8:18:4f:28:63:b0:14:
46:d3:70:2c:72:d7:3f:fd:d3:28:5e:0c:67:6d:42:fc:42:dc:
f0:26:05:ce:75:22:05:51:dc:58:2b:c0:af:a7:a3:87:78:03:
b2:7e:d2:f9:37:9b:45:bb:14:59:29:ad:37:32:9b:29:8c:02:
99:12:26:6a
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYQZwowmi+6v4nNvt5TmfYcsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjIxMDI3MTQwNDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmQ0MjkxZTU1NWI3ZmY3MDhkMzkxZjhkYzJkZjIwNjA2ZjYwMzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TTeadYkyoMah7OhrBpk8O3BskTw
9Q4/JeoKCBIXrCTWK8+b+LBJ7uSi2pG1tjoO6hAgKRDnOtc+HAWrSQGr3ZjjJQRO
tM4IY+ZBFR4g42GITAuo9LAdOpwGrJhHYgBG1g4+FQ8w1uWW9ZZ/cnMq0zrzB36/
aiXvyOzT+InEmiJG9MaYSriTEdxy+z84XFzmDUdwryXMRCPhaizybNMFHl0ea7EH
0LViO/RRQgJgsl1CYRylFV363zZe3tf15pybsJzgxJyiWS9KM76XhFkizh4svy3a
ycUgBddGlC4CTC45WEaO5pJWXq4W29+TvRS+568oAt3/afAnnDOvfJeDSwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFPLUKR5VW3/3CNOR+Nwt8gYG9gN/MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvOHRRcEhsVmJmX2NJMDVINDNDM3lCZ2IyQTM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQABWkzAwQA
BWlCAwQABWlPAwQABWlfAwQABWl2AwQABWl6AwQABWmpAwQABWnkMA0GCSqGSIb3
DQEBCwUAA4IBAQCypRBuQArfImNWWVK2Ms0erilWg7Hae7Mf2oyFZVglHmv2Flzl
3VN5744+kaLr0Fw5vutQpsv6SqMGYR5KtJWUpioVGNZrnNkc13upZHLowNBTsMA1
DvNHSaIILBn8Dh3zhm7MNQODx4jbxMkRxs9+bzUDwAfhZsza+MJGPhUNGPrgWWqA
Wqe894YM0ApfaOpe/tVOegNd+1lhmgM+CyxPIUHB0EZxGUd1xC+MOUnXlCjkJ9Ql
rlYzOsWmeHCs8cgYTyhjsBRG03Asctc//dMoXgxnbUL8QtzwJgXOdSIFUdxYK8Cv
p6OHeAOyftL5N5tFuxRZKa03MpspjAKZEiZq
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org