Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/DbJcwtH3JG4k_oBxwGmik7lnjc0.roa
File: DbJcwtH3JG4k_oBxwGmik7lnjc0.roa (raw, json)
Hash identifier: uDx5GwHcv0BI2tn7ggCT/WMnmCLlOD25JAOn31VMLi0=
Subject key identifier: 0D:B2:5C:C2:D1:F7:24:6E:24:FE:80:71:C0:69:A2:93:B9:67:8D:CD
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01867A8FEACF1E5F9C84BB43155E44CBDF73
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/DbJcwtH3JG4k_oBxwGmik7lnjc0.roa
Signing time: Wed 22 Feb 2023 19:18:17 +0000
ROA not before: Wed 22 Feb 2023 19:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 5.105.26.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:8f:ea:cf:1e:5f:9c:84:bb:43:15:5e:44:cb:df:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 22 19:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0db25cc2d1f7246e24fe8071c069a293b9678dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:36:7a:aa:20:f8:09:04:4a:bf:7e:83:20:
1b:dc:b8:60:0a:26:67:18:97:63:6d:19:15:f8:a1:
cb:89:a2:ea:12:46:e6:1e:fc:37:29:27:2d:34:82:
8e:6d:c7:46:35:cc:d0:67:69:34:d0:2a:56:27:eb:
bd:e4:5f:bd:fb:df:e5:ce:69:c6:df:f0:a0:3b:64:
66:04:89:5c:53:d7:37:18:68:fc:65:59:6d:17:3b:
d7:3a:ac:84:29:ae:5e:cf:c0:62:17:0b:ca:7b:c8:
8b:60:4c:4e:48:c8:1c:2e:e8:a5:b2:76:88:40:c4:
82:53:9d:c5:3f:ab:5a:9f:59:95:0b:42:65:d1:c5:
09:cf:56:1b:3f:62:2b:23:30:3d:8f:d5:3f:3b:4e:
7a:08:fd:38:98:48:ac:52:d4:cb:44:bf:3f:81:41:
ba:1e:f7:91:e4:d8:e9:d6:11:74:49:f3:09:11:3e:
d5:1c:49:e3:37:59:73:19:33:30:fd:dc:b9:9d:44:
d0:30:a2:4b:14:e5:69:71:a5:77:3b:da:bc:f2:87:
18:ab:75:81:65:4f:48:d4:6d:63:47:7f:70:82:50:
08:52:6b:16:05:c4:24:c7:03:a1:e4:b5:39:6d:98:
b7:02:c7:2e:76:25:27:e4:ca:4f:e3:28:34:22:15:
1a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B2:5C:C2:D1:F7:24:6E:24:FE:80:71:C0:69:A2:93:B9:67:8D:CD
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/DbJcwtH3JG4k_oBxwGmik7lnjc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.26.0/24
5.105.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a4:eb:2a:ac:7e:27:3a:c0:65:e5:d0:f5:ae:00:1e:9e:96:
e6:63:15:a7:06:92:e9:8c:19:c2:31:d2:be:82:89:40:9a:b5:
fa:63:c9:1f:45:a3:57:9e:5f:a8:99:91:20:a3:ea:71:c3:d7:
51:42:e6:64:c2:69:96:90:bd:28:46:f0:f7:d4:4d:7f:fa:d8:
fc:d3:9c:e3:22:33:e8:54:86:d9:22:a3:df:b0:b7:1d:8b:e8:
8e:f7:db:77:17:9f:f4:9d:d0:6a:01:10:c9:84:a0:99:be:f1:
70:b2:3f:60:5a:d7:8f:f4:87:e2:20:71:ac:a2:99:17:0c:9d:
d5:b0:a8:c5:6d:58:c6:89:5c:81:9e:fe:af:da:e6:60:20:4b:
8a:d5:0f:d7:54:3a:5a:3d:8d:62:7c:dc:e0:c3:6e:cd:58:0b:
c3:13:68:e5:03:56:44:a9:6b:da:ec:96:c3:1c:15:bb:d9:86:
47:ff:75:b4:13:34:48:47:3a:0a:61:0a:f2:13:bd:ac:55:3f:
52:ac:65:65:a1:3f:ba:6d:e2:7c:aa:8d:0a:84:e1:36:7c:32:
3e:10:b0:0c:6f:b6:12:01:fe:91:94:b3:ac:c2:f4:01:53:bc:
db:cc:f4:c1:a3:a2:1d:12:b7:9e:39:18:a1:ff:0b:b5:9a:e7:
50:c8:23:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:51 2025 by rpki-client