Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Gzzv32dVgmAnzMe1YtYsf3xF9lE.roa
File: Gzzv32dVgmAnzMe1YtYsf3xF9lE.roa (raw, json)
Hash identifier: sXI0wDyUidRfn/cEzPOxRAHLS9ExLBboCDeqVAlF2vU=
Subject key identifier: 1B:3C:EF:DF:67:55:82:60:27:CC:C7:B5:62:D6:2C:7F:7C:45:F6:51
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01855FAFE6B1C3008A2E39BBCDE685C7B12E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Gzzv32dVgmAnzMe1YtYsf3xF9lE.roa
Signing time: Thu 29 Dec 2022 21:00:41 +0000
ROA not before: Thu 29 Dec 2022 21:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.227.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.44.0/22 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.46.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.55.0/24 maxlen: 24
5.105.54.0/24 maxlen: 24
5.105.53.0/24 maxlen: 24
5.105.52.0/24 maxlen: 24
5.105.52.0/22 maxlen: 24
5.105.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5f:af:e6:b1:c3:00:8a:2e:39:bb:cd:e6:85:c7:b1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 29 21:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b3cefdf6755826027ccc7b562d62c7f7c45f651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:b5:92:05:59:21:7a:b9:5a:0a:ef:62:52:
4f:00:82:88:3b:c6:fe:b4:5e:36:28:c9:ff:e7:05:
46:4b:3d:39:82:f9:d2:db:10:45:18:0b:20:d6:1e:
95:ef:f8:8d:06:66:e6:5c:63:c1:f1:7c:d3:7b:71:
5c:6c:01:9e:1c:a3:f8:ff:05:a8:34:57:eb:5c:b0:
d7:67:18:3d:57:f3:57:b9:3c:68:4c:78:26:20:7c:
a2:47:d7:1d:74:9f:53:3e:82:90:7e:54:5a:10:53:
54:42:79:7b:66:e4:52:32:06:82:03:2d:3e:c4:ee:
99:84:69:f5:82:fb:dc:12:bd:d8:bc:87:f1:4f:ae:
6e:b1:b5:5b:6e:61:84:a7:eb:a3:23:24:e9:00:d4:
60:05:78:b2:91:de:cd:6d:d7:16:19:27:d6:75:b9:
01:27:50:3c:1c:02:c5:44:ba:45:0b:7c:f0:b7:c4:
ac:eb:b9:87:82:3f:7c:85:48:9b:c5:f5:72:ef:1c:
a4:00:7c:58:3b:49:72:ab:ed:fb:3f:fe:3f:3c:f5:
43:16:4d:59:3e:24:5e:46:69:5f:f7:c3:c1:ac:a4:
20:03:63:48:72:17:30:d5:ae:45:b0:58:b7:a5:68:
1b:58:e5:27:60:96:94:9c:b6:a9:ee:4c:8c:62:89:
50:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3C:EF:DF:67:55:82:60:27:CC:C7:B5:62:D6:2C:7F:7C:45:F6:51
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Gzzv32dVgmAnzMe1YtYsf3xF9lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.44.0/22
5.105.52.0/22
5.105.219.0/24
5.105.227.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:5f:d0:ee:e5:a1:3d:bc:72:82:8a:d2:81:c6:1a:10:b6:67:
29:b3:11:ed:1d:03:85:24:a9:66:be:fa:b8:fd:66:8e:c7:a6:
fd:b8:15:b7:50:ff:a4:5e:92:71:d2:eb:15:84:ca:7a:a4:f0:
4b:67:ce:f1:25:c4:f2:ee:17:3c:d7:98:9d:4e:ad:1e:37:e5:
90:37:dc:61:b8:a4:a2:59:25:54:cf:0c:0b:8d:91:eb:c7:ff:
4d:bc:a9:af:21:14:11:7a:1f:86:c0:40:1c:a5:eb:f0:94:6b:
38:22:6a:1c:31:c0:a4:8a:20:0f:24:87:ed:f9:03:68:2e:76:
dc:ef:8b:61:52:d5:1d:cd:6a:52:a9:5c:d2:b5:d4:5f:d9:f5:
2d:02:08:be:6e:85:40:aa:dd:eb:9c:3b:07:41:f1:2b:4b:d5:
09:be:7a:e6:30:53:90:7c:59:e1:1f:de:82:16:f6:0a:d4:37:
c1:90:92:50:9a:b0:ff:ef:39:bd:86:d9:b7:c6:dc:4d:44:90:
fa:e5:2a:a7:02:f1:c2:f6:e8:c0:ae:ae:91:59:52:d7:2d:4f:
86:f9:dd:43:0b:71:72:66:b1:b5:05:cd:8f:34:66:2b:8e:68:
2f:dd:01:8c:98:b5:c3:67:a8:71:a6:15:1b:ad:e9:c7:02:29:
7b:31:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org