Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JmGM-vqOqse6mgL62WUNE61Vn8U.roa
File: JmGM-vqOqse6mgL62WUNE61Vn8U.roa (raw, json)
Hash identifier: 4GDwSiogaOIut/gVMFUtwE+gL5XXsF4f5NShea2G2fI=
Subject key identifier: 26:61:8C:FA:FA:8E:AA:C7:BA:9A:02:FA:D9:65:0D:13:AD:55:9F:C5
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018373EF5678331B2BDD4450DABFC4223D96
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JmGM-vqOqse6mgL62WUNE61Vn8U.roa
Signing time: Sun 25 Sep 2022 09:16:48 +0000
ROA not before: Sun 25 Sep 2022 09:16:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 5.105.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:73:ef:56:78:33:1b:2b:dd:44:50:da:bf:c4:22:3d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 25 09:16:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26618cfafa8eaac7ba9a02fad9650d13ad559fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:47:0f:00:2b:0a:44:a4:3b:ed:a4:df:2a:84:
77:c3:39:ba:52:3d:57:63:6a:b5:6c:3a:cd:89:a7:
21:ac:70:23:e1:40:67:58:a2:a7:73:17:af:cb:ad:
f3:8c:33:3f:e4:d8:96:cc:9a:52:46:f5:54:ad:ae:
15:72:c1:3c:3d:94:7c:71:c9:b7:2f:ee:55:dd:1e:
8c:c5:36:f5:aa:f4:57:b8:7c:d8:3b:d6:e3:64:f6:
3d:cb:15:eb:bd:99:35:ae:82:42:a5:f3:29:01:e2:
77:15:0c:90:1f:0e:43:1b:88:81:ba:1f:8e:5b:32:
14:5a:c8:91:16:ad:97:3a:94:a0:38:0e:c7:2e:e9:
ec:75:cb:83:2b:b9:c6:d6:66:8a:d2:29:a0:5a:fd:
6b:a4:17:d0:35:47:71:3e:9c:82:39:f4:af:77:69:
e7:e6:b5:99:a4:c9:ce:23:f7:7a:ea:a1:27:73:b0:
ab:92:2e:98:36:7e:7a:82:e0:37:a6:90:6d:ac:f4:
3d:c3:13:0b:a4:25:49:15:77:4a:0b:62:b5:48:7a:
5e:5e:06:bf:53:70:e7:c5:97:e9:bb:21:61:38:f4:
a4:95:fe:cc:e2:ac:5f:50:b9:cf:32:cf:79:d7:06:
7e:47:48:85:2d:4d:3f:4d:83:e5:41:94:49:87:91:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:61:8C:FA:FA:8E:AA:C7:BA:9A:02:FA:D9:65:0D:13:AD:55:9F:C5
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JmGM-vqOqse6mgL62WUNE61Vn8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.6.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:40:fc:aa:cb:a8:85:c4:63:9c:af:f4:18:b9:fc:ff:9f:c8:
21:e0:07:89:f7:1f:2c:02:42:0f:0a:03:70:35:a7:97:b9:10:
8c:76:9a:eb:ac:5d:7a:bd:ea:e9:fb:8a:09:2f:03:28:3a:b7:
0e:65:67:fe:34:9d:db:86:ac:0d:f3:1b:db:73:15:6c:98:9f:
f6:b5:6d:4f:14:74:80:b7:3c:73:5d:c2:9c:dd:f9:4a:d0:e0:
7f:64:da:68:33:02:89:1d:0c:79:72:eb:c6:b3:cf:98:bd:75:
3b:d8:ec:75:6a:33:fe:2a:c2:ce:71:3c:fe:51:96:36:ab:42:
0b:ce:4a:b5:ae:e9:98:69:e0:9c:de:0c:51:cd:5b:88:4d:1a:
5c:27:fe:7f:55:09:99:44:cb:e1:51:fd:a0:df:5f:37:f2:c1:
41:ba:e9:58:d1:68:99:28:77:f5:42:1f:85:a5:8c:eb:7a:ee:
a5:9a:59:a3:8d:10:ed:23:76:80:52:f7:de:83:43:73:b7:c6:
47:49:ec:a5:2b:f8:ad:c0:22:a3:1b:3c:14:9c:d6:05:33:ae:
10:17:62:85:8e:6c:36:10:ef:3f:34:a3:b5:83:d7:3a:6d:b5:
4e:3a:9e:a5:df:18:20:38:53:34:d4:43:68:7c:3e:a5:06:00:
ef:11:50:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org