Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9DqGKG12x45QJz7abrFbP-CWKHA.roa
File: 9DqGKG12x45QJz7abrFbP-CWKHA.roa (raw, json)
Hash identifier: eV0JbKDc4GOuOC+DWsQuYpGDkiAxzZaSJDFRxEcss/M=
Subject key identifier: F4:3A:86:28:6D:76:C7:8E:50:27:3E:DA:6E:B1:5B:3F:E0:96:28:70
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187800BFCE2E5E8F53B3D4910942CDE5835
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9DqGKG12x45QJz7abrFbP-CWKHA.roa
Signing time: Fri 14 Apr 2023 13:54:41 +0000
ROA not before: Fri 14 Apr 2023 13:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 5.105.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:0b:fc:e2:e5:e8:f5:3b:3d:49:10:94:2c:de:58:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 14 13:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f43a86286d76c78e50273eda6eb15b3fe0962870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8d:25:1d:2d:cf:57:49:65:b0:25:1d:24:6f:
13:14:4f:bb:16:37:8d:4f:97:7b:00:d5:6a:fb:6f:
01:4a:60:28:f9:8a:74:f5:95:77:ff:50:39:a0:a0:
d2:02:e0:e9:ce:9c:cd:26:2e:2e:32:26:22:58:b2:
23:27:a2:49:b7:9e:ae:7c:96:88:a9:20:3f:e8:f3:
07:e3:b8:3d:ee:33:7d:cc:94:b9:4b:5c:0c:81:8b:
7e:22:28:17:44:6f:ce:40:4e:b0:35:0c:80:d7:9f:
59:0d:48:f6:9a:33:56:e7:a0:fb:8a:73:11:4f:d8:
18:2c:7a:3b:07:e6:21:ff:6c:f1:31:6a:83:d0:5d:
13:ef:57:df:10:f1:06:d4:1f:99:89:51:b6:88:09:
c5:62:4e:67:5d:33:f3:3a:8a:6f:55:04:64:c1:2a:
04:f9:df:40:34:1a:98:06:09:4e:44:35:ed:59:fa:
68:80:a4:13:15:92:46:65:b3:b3:e7:eb:fb:49:f3:
28:58:49:77:7a:1e:62:1f:7e:be:fc:35:e8:b2:50:
57:08:6e:ab:df:4e:f9:26:5f:ec:c8:40:35:24:4c:
cf:e6:29:2b:f5:a1:58:0f:0a:fc:99:f5:b0:23:1f:
fa:f6:7d:88:34:a5:d9:eb:ff:02:20:48:bb:6f:be:
e3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:86:28:6D:76:C7:8E:50:27:3E:DA:6E:B1:5B:3F:E0:96:28:70
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9DqGKG12x45QJz7abrFbP-CWKHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.17.0/24
Signature Algorithm: sha256WithRSAEncryption
67:01:a8:03:6e:42:d0:78:fc:8c:30:50:d0:08:b4:24:ea:af:
fb:27:58:db:9b:d7:93:70:e2:f0:cf:38:ad:b1:82:a1:ad:10:
99:09:d7:a2:18:24:8d:33:57:4d:ef:ee:33:3f:c4:74:a1:00:
2a:c8:20:ef:24:6d:9e:9c:3c:c7:6c:5c:68:79:5e:32:94:d9:
1f:45:a7:e6:1f:72:54:59:96:46:ad:cd:3d:25:f4:75:9e:3b:
99:2d:03:e7:67:7d:30:c4:de:c6:8f:2a:c4:14:15:28:bd:c3:
ca:a3:a9:21:9d:fa:a5:11:c9:62:c9:0a:30:90:55:9c:b9:ad:
77:be:c6:6a:21:8c:14:c8:c8:bf:be:96:13:ba:a9:26:9f:64:
17:88:20:5c:f4:84:0e:15:ff:fc:e5:af:5b:3c:f0:93:2d:48:
37:98:a4:01:46:d4:ff:c2:3e:88:ca:52:d2:52:43:38:2e:2c:
a3:d3:d9:ce:72:92:4f:6f:52:7c:2f:fd:27:af:2a:c1:bf:f8:
9b:f6:0d:85:65:47:57:9f:b7:0a:22:3f:dd:f4:61:ef:19:3c:
eb:f7:8b:e5:21:f2:6d:be:2e:77:0f:e6:d6:a7:7d:77:26:90:
9c:18:d7:84:fb:7c:3c:dd:2d:f6:36:31:60:ab:86:fd:95:91:
06:59:7e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:12:52 2025 by rpki-client