Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/977b9vkiIIVmpyP7pufT8SResnc.roa
File: 977b9vkiIIVmpyP7pufT8SResnc.roa (raw, json)
Hash identifier: yfY10IeCQ5Ot8AC2vKAc73cag+7hKOMkFiRZ/RPXqMc=
Subject key identifier: F7:BE:DB:F6:F9:22:20:85:66:A7:23:FB:A6:E7:D3:F1:24:5E:B2:77
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183F6EE3DCE21E678B9BE4C5AA39567290B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/977b9vkiIIVmpyP7pufT8SResnc.roa
Signing time: Thu 20 Oct 2022 19:45:51 +0000
ROA not before: Thu 20 Oct 2022 19:45:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5369
IP address blocks: 5.105.90.0/24 maxlen: 24
5.105.91.0/24 maxlen: 24
5.105.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:ee:3d:ce:21:e6:78:b9:be:4c:5a:a3:95:67:29:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 20 19:45:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7bedbf6f922208566a723fba6e7d3f1245eb277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a2:68:9b:97:22:c2:96:e4:df:d4:ef:bd:f9:
c9:97:b3:bb:67:dd:94:af:f4:65:bf:2d:17:74:fd:
d4:3b:cc:1e:03:a7:d3:c1:64:a5:0c:a8:ea:f6:39:
b7:c5:43:6b:71:45:86:a8:7a:fe:1c:96:ca:dc:86:
dd:67:50:4f:f3:b2:e5:7a:52:8b:36:65:b1:37:ae:
3a:dd:b3:11:aa:2c:07:0c:d6:cb:2b:fc:df:58:91:
ce:46:ff:ff:2c:81:66:20:e6:85:57:d4:cc:3f:21:
a8:85:f3:fe:38:71:4f:e9:e3:42:38:fa:d6:d7:4b:
0b:a0:b3:1b:46:ba:e5:e3:ce:2d:47:85:ef:25:18:
b0:f3:62:5c:8c:0c:b2:2e:e8:51:c2:46:fa:57:5c:
d0:39:ea:b6:92:27:23:1c:d3:c9:bf:bb:9a:45:ed:
a3:40:f4:61:da:b8:4b:48:7b:18:d2:80:9e:19:5c:
e6:11:cc:7e:71:12:cc:c6:f4:37:69:eb:3b:65:c4:
35:81:34:d3:e4:39:00:46:c7:c5:f0:1f:e8:bd:c6:
9d:3f:0a:4b:a7:80:89:30:ad:9b:bf:46:b8:f3:3f:
5a:59:7c:f6:78:9b:ed:ff:21:06:1b:89:72:72:d2:
85:1d:67:22:f4:8c:23:d1:5a:4f:53:61:cd:24:8b:
30:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BE:DB:F6:F9:22:20:85:66:A7:23:FB:A6:E7:D3:F1:24:5E:B2:77
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/977b9vkiIIVmpyP7pufT8SResnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.90.0-5.105.92.255
Signature Algorithm: sha256WithRSAEncryption
44:52:93:70:1b:1d:59:e9:dc:7d:32:59:9a:28:75:77:ec:f2:
33:c3:33:1b:db:06:0b:4d:57:98:a2:97:a2:3d:d0:79:c2:a2:
af:88:ad:11:de:c7:2d:49:f3:dc:a8:3f:70:a2:7f:bb:51:58:
cd:b6:3b:79:e7:44:e5:ce:f6:8c:73:21:38:f8:b5:a7:1f:60:
39:fd:b5:06:70:22:c3:56:31:5c:68:3e:9a:8e:26:18:65:fa:
63:ba:cd:22:2f:89:e4:df:f0:34:09:56:fd:ec:83:35:11:4a:
4b:51:dc:17:ed:47:88:a0:4b:51:b6:83:fa:fb:e5:52:c1:31:
dc:bc:12:b8:b0:67:a1:88:b7:3e:80:ac:32:15:45:06:c7:f1:
9f:02:4a:86:1e:a8:80:6f:ac:6d:62:5c:7e:16:fd:53:db:7d:
cb:1d:9d:24:35:84:f4:37:02:16:ed:3a:df:b5:16:6e:2d:c8:
33:5b:eb:d0:58:b8:00:79:8d:8d:d5:66:dc:06:9b:ac:0c:61:
b0:49:4d:8f:21:b0:81:46:db:90:f5:93:63:0e:92:85:b7:0c:
94:a6:b2:73:ec:f1:ee:94:cd:36:d8:65:5d:fe:49:f3:8f:8f:
73:65:44:d0:7b:79:f5:33:58:fa:db:31:b9:3f:5f:84:00:93:
b3:75:9c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org