Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/FRKf9voQCioTgbl5P8GusVvmKQQ.roa
File: FRKf9voQCioTgbl5P8GusVvmKQQ.roa (raw, json)
Hash identifier: 9ga6A/DUTvtmsnzQrDchdd0ngozmwCnDAzYnbNEqyps=
Subject key identifier: 15:12:9F:F6:FA:10:0A:2A:13:81:B9:79:3F:C1:AE:B1:5B:E6:29:04
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01899B9EDF0D12EC1D64A23DE4FC3AAF5228
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/FRKf9voQCioTgbl5P8GusVvmKQQ.roa
Signing time: Fri 28 Jul 2023 08:30:27 +0000
ROA not before: Fri 28 Jul 2023 08:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 5.105.138.0/24 maxlen: 24
5.105.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:9e:df:0d:12:ec:1d:64:a2:3d:e4:fc:3a:af:52:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 28 08:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15129ff6fa100a2a1381b9793fc1aeb15be62904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:33:e5:4e:50:16:6b:dd:1b:fc:b4:91:70:
c9:1d:ff:e3:8c:a2:13:e1:0a:99:d0:24:e7:52:6a:
39:5d:7c:ab:12:c5:49:4d:26:95:cf:22:c6:89:34:
09:b2:d7:d7:a4:a1:29:d1:ad:ee:28:9b:f9:e4:9d:
95:c9:ba:46:80:e1:7f:eb:6e:28:c5:c9:0b:68:d9:
c5:3e:44:aa:32:19:c8:da:5b:f1:1a:a6:e7:20:f7:
16:b1:63:7a:6c:d5:d1:f9:14:9f:a1:c2:8e:f1:ff:
2a:92:e2:bb:05:97:b7:2c:35:20:79:7d:18:1b:72:
16:70:75:48:3b:f5:d8:c2:d7:ca:88:73:5a:7d:a7:
7c:cd:02:1b:9a:52:30:6a:d0:e9:dd:e5:3a:ef:3a:
c5:19:e1:1d:8a:8b:d4:e6:45:f4:5a:e7:51:3d:b7:
d8:7b:0a:2b:7f:96:53:23:44:f4:bb:01:5d:f6:40:
4e:26:e3:28:30:44:34:b6:34:ce:cb:90:31:5f:67:
dc:64:8c:a6:ae:02:bd:52:96:da:8b:05:76:2f:59:
b0:b7:67:cf:8f:2a:ee:8d:19:69:18:79:12:46:e1:
95:44:bc:4c:cc:ee:17:61:d5:85:5b:f1:a3:a4:8e:
b1:4b:a3:e1:de:85:b8:49:d0:a4:42:e2:3e:f2:ee:
02:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:12:9F:F6:FA:10:0A:2A:13:81:B9:79:3F:C1:AE:B1:5B:E6:29:04
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/FRKf9voQCioTgbl5P8GusVvmKQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.107.0/24
5.105.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ff:b6:c5:b3:ec:2a:8c:6c:c3:4a:df:fd:7e:b2:f3:a9:64:
64:de:e8:83:4e:83:f4:40:31:97:5d:07:56:bb:d5:d4:38:9d:
23:4b:81:f7:79:0e:c2:0a:db:6a:85:65:9d:c2:28:bb:98:c1:
83:85:ac:6f:bb:56:96:90:3c:7b:5b:70:35:f7:e2:e1:a2:da:
80:77:54:a1:73:5e:3c:c7:42:0a:b7:c8:15:0c:01:fa:64:93:
ac:8d:11:4d:42:9c:de:ca:d8:45:87:dc:95:5e:4a:95:02:4e:
c2:0a:1d:da:e3:48:6e:af:c1:5d:ca:ee:f1:2a:7b:8d:e8:2e:
4d:9d:44:db:4c:a8:63:4b:10:d4:e1:04:ef:32:ac:8c:95:f0:
73:90:6e:12:dd:d3:49:91:ba:68:10:84:6e:ae:77:92:3f:64:
30:07:e3:9d:ad:18:8b:0a:29:0a:25:43:ee:88:74:99:50:95:
79:ce:ca:33:a7:a5:b9:54:04:6e:bc:02:07:42:7e:3f:a2:91:
70:7d:0e:34:51:80:df:3e:d9:72:c9:d3:9d:88:80:8c:f4:18:
bb:ea:ea:a3:c0:3e:5e:54:7f:cc:fd:ed:57:81:dc:ac:0d:40:
b4:ba:a9:45:ae:eb:78:37:4f:ed:72:d8:5a:f7:ac:64:f8:69:
a3:03:72:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:41 2025 by rpki-client