Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NBxJ7Z3RilOFqGWbs_v9kqGlaTI.roa
File: NBxJ7Z3RilOFqGWbs_v9kqGlaTI.roa (raw, json)
Hash identifier: R9z30mNYt2qi0IgwpUvvPFKBZA9oqIQYJFFTvLzfFBo=
Subject key identifier: 34:1C:49:ED:9D:D1:8A:53:85:A8:65:9B:B3:FB:FD:92:A1:A5:69:32
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018401499BC78B8990C075A9B492C648E74E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NBxJ7Z3RilOFqGWbs_v9kqGlaTI.roa
Signing time: Sat 22 Oct 2022 20:01:52 +0000
ROA not before: Sat 22 Oct 2022 20:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.255.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:01:49:9b:c7:8b:89:90:c0:75:a9:b4:92:c6:48:e7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 22 20:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=341c49ed9dd18a5385a8659bb3fbfd92a1a56932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:77:82:85:2a:6b:91:76:ac:aa:33:d2:a5:
17:c0:37:c6:83:aa:bc:d6:53:84:ca:73:3b:52:14:
ef:09:4d:b9:59:df:ae:80:2c:d1:8d:53:7b:4a:a9:
23:b8:b7:fb:df:bf:bd:f7:45:30:62:b5:e1:55:8a:
38:99:c6:ca:11:b6:69:93:e4:b6:8a:75:f5:8f:09:
e4:91:ce:ed:e0:7c:55:8b:7c:0b:d2:9a:c4:5f:fa:
a7:05:7c:ae:14:d6:15:6c:37:20:d7:42:74:c5:6a:
49:24:bf:5a:49:48:c9:1f:b8:67:4f:57:66:53:1d:
ad:c0:3b:9f:48:18:b5:9b:50:a5:11:47:27:80:63:
ae:57:0a:69:0b:8c:7e:61:d6:83:8d:1a:b7:f4:ea:
5a:67:ea:86:93:be:5d:69:3d:20:74:63:22:ad:de:
c2:d6:68:5e:f0:05:31:7b:0d:5b:0d:3e:a1:50:ab:
8e:97:9b:4e:ff:cb:bd:58:36:3c:c8:4f:80:02:6b:
17:bf:91:b8:e9:66:1d:29:66:0f:46:2b:83:aa:59:
e5:9a:1f:c2:7d:98:70:08:21:25:d0:2b:21:40:72:
31:01:75:e9:df:af:fa:50:03:14:57:ed:52:23:67:
1c:c5:89:57:88:51:cd:a1:58:33:0a:c9:3c:d5:91:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1C:49:ED:9D:D1:8A:53:85:A8:65:9B:B3:FB:FD:92:A1:A5:69:32
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NBxJ7Z3RilOFqGWbs_v9kqGlaTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.79.0/24
5.105.95.0/24
5.105.118.0/24
5.105.122.0/24
5.105.228.0/24
5.105.255.0/24
Signature Algorithm: sha256WithRSAEncryption
04:49:39:9e:30:1d:ac:f8:44:2e:2e:cc:32:28:2a:86:30:81:
f2:73:46:cb:bb:a2:8e:9a:ef:d6:42:b6:ab:b4:ea:70:70:1c:
1a:48:fb:08:43:db:e8:8c:b2:fb:5e:a1:2a:93:92:fc:ec:99:
f0:26:cc:14:f6:aa:91:43:0d:46:d7:6f:e8:3c:8c:78:da:8f:
2d:ec:1d:e0:bf:2b:ae:b2:81:65:49:14:a6:07:39:6e:f5:bb:
fa:f5:66:c4:99:ef:81:fb:79:d5:c1:8f:f9:d4:e9:78:30:04:
e8:82:4d:7b:7e:73:3a:88:a0:eb:54:4e:10:5f:79:ff:7f:d3:
1f:a3:d6:5a:ec:0b:be:73:05:db:33:21:50:9e:f7:b7:21:cd:
ab:81:ee:3d:d5:b6:c1:1f:98:5f:5e:4d:cc:de:9f:d4:7b:65:
fe:dc:b3:cb:11:02:58:41:93:50:81:07:46:b8:9f:03:f6:5d:
f3:03:42:79:06:a2:b7:60:5c:63:87:a3:df:af:82:75:e6:78:
e5:f7:9e:a2:13:c5:43:30:3d:c2:2e:5c:13:8a:68:8a:23:0e:
76:17:67:39:75:12:c4:69:d4:2b:38:86:f4:7b:ff:6f:27:b3:
aa:48:66:a0:6a:04:e1:e9:05:96:79:1c:55:58:69:a2:20:cf:
12:be:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org