Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/C4PumiBH5FuFwdI_o3gHL1R4O04.roa
File: C4PumiBH5FuFwdI_o3gHL1R4O04.roa (raw, json)
Hash identifier: KRkfBUHDbJldtibO58k3XP2OxrfZFUKjz2ZcuHy3tz8=
Subject key identifier: 0B:83:EE:9A:20:47:E4:5B:85:C1:D2:3F:A3:78:07:2F:54:78:3B:4E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01863672A3FF56465854ED2FBCE6AF3325E9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/C4PumiBH5FuFwdI_o3gHL1R4O04.roa
Signing time: Thu 09 Feb 2023 13:52:08 +0000
ROA not before: Thu 09 Feb 2023 13:52:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 5.105.26.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:72:a3:ff:56:46:58:54:ed:2f:bc:e6:af:33:25:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 9 13:52:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b83ee9a2047e45b85c1d23fa378072f54783b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:2c:b1:f8:d9:4c:64:09:11:24:aa:69:ec:
f8:6a:a0:77:0e:60:a0:51:0d:3e:9c:c0:f7:41:40:
29:7c:17:2d:ce:33:66:ac:dd:57:3e:b0:be:11:74:
23:8d:89:b3:c4:6d:00:0d:6d:f8:7d:1d:e1:0a:1f:
9c:8d:f2:2d:dc:11:4d:b7:b2:c8:1e:80:0c:00:6e:
d5:8a:a2:f2:56:bc:db:ad:73:a9:29:0e:ed:86:66:
c8:e5:65:c3:c6:73:88:2f:fd:83:cf:ab:b9:d6:73:
60:85:be:a8:35:eb:ab:34:c2:37:b0:fb:5e:23:59:
76:a7:6d:e9:6f:8f:38:09:9a:1c:b5:ee:dc:b9:05:
94:e8:82:63:90:22:a1:d9:dd:33:c4:25:6e:bd:86:
c8:b0:65:ba:39:e3:7f:74:38:47:b7:52:1a:93:21:
19:7c:de:e4:5d:41:00:07:09:01:de:cd:d7:79:c2:
fa:f8:d8:a3:38:c3:7d:ad:c4:cc:5c:2e:38:37:cf:
0c:2d:8e:58:fa:fa:e4:57:9b:a8:54:a0:0e:53:97:
ac:6d:30:43:f5:de:d2:81:7d:76:f1:b3:bc:80:07:
f6:28:52:3c:c4:5a:7d:0c:8a:38:67:db:5f:c8:7e:
01:35:e6:a7:0f:ed:8b:9a:5e:c1:c6:84:82:b7:72:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:83:EE:9A:20:47:E4:5B:85:C1:D2:3F:A3:78:07:2F:54:78:3B:4E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/C4PumiBH5FuFwdI_o3gHL1R4O04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.26.0/24
5.105.75.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:85:f2:90:60:ff:f3:29:34:a6:db:1e:9c:04:2f:1f:3b:29:
54:39:5e:9d:03:6f:16:bf:6d:39:5e:45:eb:52:09:18:6f:50:
92:a0:2f:ae:2d:fb:ae:13:2a:c0:6e:1f:3a:28:a4:83:96:09:
18:fc:0e:76:1d:07:39:bf:cb:13:9d:03:35:f2:1a:e7:71:ff:
be:26:9d:32:34:05:b4:4b:61:ef:66:a8:77:98:a2:b5:2d:f5:
f3:7e:f6:c9:11:9b:ab:0a:6a:bd:3d:c8:9b:a3:f6:b3:4a:31:
b6:e8:67:90:f3:12:2f:7c:47:14:56:7b:35:6a:41:e2:16:2d:
f5:b5:4e:94:c3:65:31:e9:a9:d3:22:7b:6b:ba:4f:12:13:f0:
ad:c7:0a:38:82:47:39:84:77:ba:35:af:49:33:56:cc:ae:65:
16:dd:34:3b:40:8f:dc:2a:93:8a:dd:36:be:30:55:23:2a:79:
5e:a2:a6:56:bf:8a:7c:e4:f6:bd:95:05:49:50:7f:68:50:af:
cc:9e:f7:35:54:b1:ba:a4:02:e4:65:f1:e1:b4:ec:c1:5a:d6:
49:7f:71:a6:88:8e:65:5e:4d:3b:c7:7d:ae:c0:98:f3:42:1a:
c8:9e:f5:d0:2b:77:85:f0:97:39:96:8d:68:5c:3f:74:42:ac:
35:14:d5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:44 2025 by rpki-client