Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ELCaWREngddgOsZTvb1SmcPreHE.roa
File: ELCaWREngddgOsZTvb1SmcPreHE.roa (raw, json)
Hash identifier: YJu4ePfPWgxFhWL+oIFx+Vgvp+CnbaGqFDZagVMhK7o=
Subject key identifier: 10:B0:9A:59:11:27:81:D7:60:3A:C6:53:BD:BD:52:99:C3:EB:78:71
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01872C3F4DC045DA82E8ACD3DE74D7BA1D4D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ELCaWREngddgOsZTvb1SmcPreHE.roa
Signing time: Wed 29 Mar 2023 07:22:38 +0000
ROA not before: Wed 29 Mar 2023 07:22:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 5.105.242.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:3f:4d:c0:45:da:82:e8:ac:d3:de:74:d7:ba:1d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 29 07:22:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10b09a59112781d7603ac653bdbd5299c3eb7871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:54:68:66:a6:c7:48:9a:b3:95:9f:e4:a5:
15:0d:8e:42:5c:63:8a:6d:06:15:08:6a:a9:fc:4c:
9e:f4:f9:a9:e2:28:bd:c5:84:b8:4b:96:7d:76:73:
57:a5:89:08:ac:eb:ba:89:dc:49:d2:e1:40:52:23:
16:fd:6a:37:45:69:bf:84:a7:4e:ce:8e:89:08:bb:
7d:8c:b5:23:65:bd:bb:bf:49:9f:99:32:7a:1b:05:
7f:2f:38:47:39:e1:11:03:fe:0e:d2:ca:3d:be:ed:
4b:37:c5:57:3f:c2:53:7e:c6:74:22:8b:f4:12:41:
33:77:d0:18:63:c7:f7:72:97:10:3f:dc:b6:68:15:
0d:f9:cd:39:d4:50:49:3e:9d:49:03:b8:61:8f:5e:
fb:a3:1d:e8:5e:45:d7:86:ea:49:2f:9d:2e:cc:2c:
21:d8:4e:e5:72:7e:fc:94:5f:8f:f0:78:e8:cc:66:
9b:d6:a1:1b:61:e1:6c:09:04:89:5d:5f:b3:9a:20:
58:0d:f8:ac:fb:da:35:f3:69:50:db:ee:5e:71:a2:
ee:99:a1:89:80:94:8b:f2:9c:1a:9f:0d:df:70:26:
6a:ca:16:b3:62:c5:5e:da:7b:4b:25:57:7c:41:c7:
69:d4:83:14:13:af:b7:cf:c8:ae:99:2d:e6:d6:6a:
fa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B0:9A:59:11:27:81:D7:60:3A:C6:53:BD:BD:52:99:C3:EB:78:71
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ELCaWREngddgOsZTvb1SmcPreHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.169.0/24
5.105.242.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0f:97:eb:80:be:a0:23:4b:d2:d6:9f:d5:b2:41:9d:01:d5:
59:ae:3d:09:7e:8d:16:d1:15:27:d4:f0:eb:89:de:ce:65:7f:
48:c8:ea:dc:ce:43:9b:92:e4:37:2b:2c:24:ef:10:a0:d0:18:
66:c8:45:b5:e2:c3:b0:f1:f1:64:89:af:4d:2c:c0:10:60:0a:
f2:01:42:1c:2f:c1:ea:4a:cc:fd:79:10:14:fd:db:6d:0d:d6:
cf:0a:52:4d:21:fe:ba:96:60:4a:a2:3e:b8:13:90:af:04:d4:
bc:bd:df:43:e4:dc:84:27:f5:da:be:80:37:a9:14:6a:05:3e:
77:46:72:8e:43:b2:49:a7:af:20:67:85:98:37:01:01:4a:84:
d5:e4:b0:5e:55:e3:31:12:d1:03:c3:95:b7:12:a7:c8:48:9c:
32:3b:91:e8:58:4e:aa:91:30:50:b3:55:6c:9c:96:08:b8:d8:
bb:19:82:78:0b:f5:48:38:b5:64:84:3c:b1:01:f6:a8:20:28:
04:80:51:4c:83:3f:52:38:76:74:93:91:70:05:c6:81:42:20:
0c:82:9e:fc:68:40:c6:85:f3:99:3d:c7:36:b8:f4:fa:d3:6e:
fa:c7:b2:c4:1b:cb:59:5d:6e:a4:f7:ed:00:1c:58:32:6b:c4:
0d:bc:f4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:27 2025 by rpki-client