Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Jcw7xHiMy7_5J_qaIlKJO7jg-40.roa
File: Jcw7xHiMy7_5J_qaIlKJO7jg-40.roa (raw, json)
Hash identifier: Ulrr+bHvbR9RY+U1ofQWuUlrsWkp1zXvpylagLMenGs=
Subject key identifier: 25:CC:3B:C4:78:8C:CB:BF:F9:27:FA:9A:22:52:89:3B:B8:E0:FB:8D
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01840A2EE827A91B6F56087026C1CA7C8BE5
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Jcw7xHiMy7_5J_qaIlKJO7jg-40.roa
Signing time: Mon 24 Oct 2022 13:29:17 +0000
ROA not before: Mon 24 Oct 2022 13:29:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399471
IP address blocks: 5.105.22.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.35.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.46.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.55.0/24 maxlen: 24
5.105.54.0/24 maxlen: 24
5.105.53.0/24 maxlen: 24
5.105.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0a:2e:e8:27:a9:1b:6f:56:08:70:26:c1:ca:7c:8b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 24 13:29:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25cc3bc4788ccbbff927fa9a2252893bb8e0fb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:b9:38:3a:e6:54:a2:d8:97:fd:73:74:ef:
8d:28:d4:3f:f7:8f:78:48:35:e6:31:32:4c:f0:b7:
b6:e5:d1:f5:89:9f:12:e7:2a:b9:94:a4:7b:a5:50:
78:2d:d0:dd:54:ef:8e:c5:8f:1a:ef:e1:89:90:ac:
e1:aa:c3:27:af:cf:27:73:74:e0:9e:55:9f:fb:72:
a9:62:c0:f7:51:53:7d:11:53:a5:b3:7a:60:21:4c:
4c:01:55:06:de:9d:04:b5:b2:a4:e9:2a:78:f9:63:
cf:16:49:cc:24:9d:54:7e:a9:e2:1e:51:1c:4b:8c:
c2:74:4b:4a:5e:36:7f:70:f9:88:cc:72:30:34:f8:
3f:7f:e0:b9:ff:cf:f9:61:c4:6a:9b:db:7d:8a:d5:
7c:57:42:c8:dc:1a:33:0b:98:13:2c:74:42:6a:0c:
f6:93:5b:e9:c4:aa:ea:e5:73:a5:e4:03:c0:93:8f:
70:ef:28:aa:59:f2:8d:3d:3a:a1:c4:2b:15:a2:4e:
b9:83:8f:45:aa:db:16:9e:38:e4:f4:37:20:da:1c:
42:4d:e2:04:98:f2:bb:ac:33:19:05:e7:de:8b:25:
8f:4b:63:ab:46:cb:cd:ab:b4:d3:da:32:ad:60:26:
d8:1d:65:9d:81:5c:f7:56:28:aa:31:f2:0e:ee:99:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CC:3B:C4:78:8C:CB:BF:F9:27:FA:9A:22:52:89:3B:B8:E0:FB:8D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Jcw7xHiMy7_5J_qaIlKJO7jg-40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.21.0-5.105.22.255
5.105.34.0-5.105.37.255
5.105.44.0/22
5.105.52.0/22
Signature Algorithm: sha256WithRSAEncryption
12:8f:6d:a5:db:2b:5f:39:af:7b:8a:0e:65:d2:b7:d1:84:9d:
f3:c5:0c:77:f4:fc:b7:69:96:d9:af:e4:69:4d:34:ff:0a:ab:
f6:5c:7d:a6:35:00:f7:b2:35:3b:a3:68:64:a3:44:cf:e3:ab:
d1:f5:4a:b0:d0:70:1b:87:e1:47:12:9a:97:ec:a4:9c:6d:93:
43:a3:14:de:85:55:a7:0d:94:a1:fe:f1:a0:18:72:e6:14:7b:
cc:0f:68:46:85:7c:4a:3e:29:cc:9e:04:89:50:e5:25:65:d4:
b8:5d:01:08:a1:e9:d2:d8:7c:7f:15:7f:33:4f:2e:59:56:99:
56:b8:71:98:c0:b1:0b:ef:f3:5b:9b:b1:7b:df:49:48:a7:6b:
cc:6c:d5:d1:59:91:34:82:9d:25:de:e2:dc:f2:e8:dc:47:37:
3d:f0:ca:17:3e:32:33:c8:a7:da:17:0a:66:5b:76:ff:0d:f8:
fa:e6:84:28:96:9d:79:9c:d0:ec:bc:ad:99:c2:b3:de:71:10:
b5:80:e2:45:c5:83:87:7c:0d:fa:5e:74:83:3e:b4:f8:37:ae:
b6:5d:0c:dd:35:a7:37:4f:73:10:61:79:51:2f:b6:59:95:6b:
86:53:89:71:20:86:ac:ff:42:3c:ea:5e:dd:53:49:47:e2:de:
24:97:74:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org