Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Lpq1uQbf4YEZ_Sr4e7gZE6ejJKc.roa
File: Lpq1uQbf4YEZ_Sr4e7gZE6ejJKc.roa (raw, json)
Hash identifier: ehe6fwfnrUrR3dYme2UbtxB7NROAZsAypDV+ji9rT2g=
Subject key identifier: 2E:9A:B5:B9:06:DF:E1:81:19:FD:2A:F8:7B:B8:19:13:A7:A3:24:A7
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183F6F069FAFC1708FDD0C3B7AADB1970BE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Lpq1uQbf4YEZ_Sr4e7gZE6ejJKc.roa
Signing time: Thu 20 Oct 2022 19:48:14 +0000
ROA not before: Thu 20 Oct 2022 19:48:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5083
IP address blocks: 5.105.133.0/24 maxlen: 24
5.105.140.0/24 maxlen: 24
5.105.70.0/24 maxlen: 24
5.105.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:f0:69:fa:fc:17:08:fd:d0:c3:b7:aa:db:19:70:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 20 19:48:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e9ab5b906dfe18119fd2af87bb81913a7a324a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2b:cc:ed:e5:9a:26:65:45:53:9f:ec:cb:2f:
ac:23:cf:56:cc:2b:96:e3:7a:f2:08:15:8c:a7:0b:
2a:5d:55:14:45:00:1d:65:de:32:48:9c:12:8e:9e:
ee:5f:73:73:ee:17:66:d3:d1:42:27:de:f7:fd:6e:
e6:f8:44:38:08:f9:9e:c3:d5:08:47:b5:4e:ca:48:
3f:e4:35:d7:3e:f5:42:ae:54:b3:a1:a8:e5:78:b2:
c3:c4:e7:2d:9d:9e:ee:b4:48:3d:b0:ac:3d:e1:a0:
55:7f:65:19:9f:87:2d:00:41:9d:54:bc:86:98:9e:
91:19:ec:74:62:2b:92:d7:07:c3:f3:8d:f0:ca:69:
0c:fc:c9:1d:ad:00:f7:8a:b6:e1:51:30:8c:6b:d1:
18:d8:4e:df:68:dc:37:5c:ae:af:fa:52:65:37:a2:
5a:db:bb:8e:2a:35:4f:ed:8d:24:8d:3b:ed:08:21:
e8:db:5e:fa:51:b4:33:ae:dd:4b:da:4a:5e:c2:f9:
5d:c1:e9:41:09:e6:7e:00:b9:ce:cb:b6:81:26:a9:
d4:11:4b:ca:4d:58:18:fa:30:af:9a:a4:b0:9f:e3:
85:a5:bf:01:b6:c2:41:dc:0a:ff:fd:70:bb:1f:50:
8a:4f:37:52:98:4f:ad:19:32:98:4b:20:90:33:c6:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9A:B5:B9:06:DF:E1:81:19:FD:2A:F8:7B:B8:19:13:A7:A3:24:A7
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Lpq1uQbf4YEZ_Sr4e7gZE6ejJKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.70.0/24
5.105.78.0/24
5.105.133.0/24
5.105.140.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b6:9e:2d:50:64:a8:5c:85:13:df:cc:59:32:95:69:10:40:
ea:1c:be:08:1f:c9:91:7c:1d:80:4a:0c:a3:e9:46:82:92:7a:
cd:e6:14:0c:ea:62:ed:f6:57:c0:03:8c:b3:97:19:f7:7e:b7:
a5:2d:8b:48:ca:50:a4:27:4e:5d:4e:75:d6:f6:b0:17:a1:65:
b7:4c:1d:82:d3:93:b5:90:50:7a:5d:89:8e:e6:8b:ce:ce:f4:
b9:61:f9:41:68:37:b5:a3:c5:50:ec:7a:b8:4f:70:ac:25:15:
47:c4:44:5b:97:7b:bd:64:bf:5c:b7:c0:5a:92:1f:50:18:0d:
95:2a:c9:dd:e4:48:90:e1:c1:97:24:83:27:f3:5e:2f:9f:d9:
43:2a:6b:92:56:13:8c:3a:a7:ee:19:7f:d8:c9:83:8b:0b:a6:
71:cd:e0:14:bc:91:49:8b:f9:e1:9f:78:bd:f7:87:d4:21:64:
96:63:59:10:e4:46:be:44:d6:5c:3a:01:47:18:90:5a:28:9c:
ce:55:b3:e8:49:f2:86:42:79:65:3c:af:b0:e2:91:bb:51:76:
f4:9a:09:a5:c7:e1:08:74:c5:4c:80:51:f1:d1:e1:88:ca:5d:
cc:52:4a:db:42:0f:3b:f6:d0:6c:06:a3:29:6b:d1:23:e8:8e:
22:bf:13:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org