Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NKP40IeZLsAHu2_oC5jIGm5S8EQ.roa
File: NKP40IeZLsAHu2_oC5jIGm5S8EQ.roa (raw, json)
Hash identifier: JckaXnO9Xq/LfPOlDj7mUEY3p28KiqwUEo7RxOG2I04=
Subject key identifier: 34:A3:F8:D0:87:99:2E:C0:07:BB:6F:E8:0B:98:C8:1A:6E:52:F0:44
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018489E4313E65C4783C188E054C65ED2394
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NKP40IeZLsAHu2_oC5jIGm5S8EQ.roa
Signing time: Fri 18 Nov 2022 08:39:04 +0000
ROA not before: Fri 18 Nov 2022 08:39:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 5.105.16.0/24 maxlen: 24
5.105.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:89:e4:31:3e:65:c4:78:3c:18:8e:05:4c:65:ed:23:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 18 08:39:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34a3f8d087992ec007bb6fe80b98c81a6e52f044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:be:32:38:9e:d2:f7:56:4f:a8:74:a7:28:c5:
76:4a:2c:e0:d6:13:38:17:5b:cc:e7:14:5d:ba:cd:
55:52:e7:d3:72:ec:65:8d:fc:09:1d:e3:2b:5a:cd:
bd:a8:10:58:26:d6:31:ff:84:02:87:57:59:38:5c:
36:a6:f3:6e:8f:cb:d5:2e:da:53:85:4e:3c:a9:20:
4a:d1:78:5f:43:92:30:ea:54:ab:e7:d5:d9:f4:ff:
10:be:0a:f5:9c:f1:c8:a9:15:5a:6e:2d:d3:c9:1a:
76:df:91:f4:28:be:db:1f:62:33:7d:ff:f4:57:ff:
58:c5:50:39:c6:7f:6d:06:1b:de:44:a5:ed:16:26:
06:5c:9d:13:4d:1a:f1:c9:3e:aa:7d:97:2f:2c:6f:
8b:22:d4:f5:28:35:b3:43:b4:02:3a:41:ff:a1:72:
49:84:60:64:f1:77:7b:bb:b1:8c:2f:c4:97:e6:65:
86:bb:04:0a:b1:69:23:08:e0:d3:cb:ba:f9:09:5b:
ce:8e:34:e8:f8:55:db:63:e5:fb:71:6a:d0:09:b1:
63:d1:41:7c:37:7f:98:d2:b3:28:c7:ce:d5:28:50:
b7:25:f6:8a:f8:19:47:02:56:b7:8f:cf:52:00:47:
aa:75:4a:63:1e:59:5c:75:6d:29:42:53:93:1e:31:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A3:F8:D0:87:99:2E:C0:07:BB:6F:E8:0B:98:C8:1A:6E:52:F0:44
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NKP40IeZLsAHu2_oC5jIGm5S8EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.16.0/24
5.105.20.0/24
Signature Algorithm: sha256WithRSAEncryption
03:9d:76:a6:82:95:db:fb:9c:94:33:0f:39:97:e4:4d:04:55:
58:5a:9d:b8:23:65:c6:1a:9e:da:99:73:71:9e:d8:09:5f:1f:
c2:7e:4e:c5:03:f5:4e:d4:24:d7:65:82:91:34:01:4b:50:47:
d8:d3:65:31:7e:e3:ba:c4:cd:1d:cb:b5:3f:1d:2d:c4:fa:c1:
a0:91:91:d5:9e:12:0a:f3:00:75:44:4c:21:8d:87:6f:5b:5e:
68:2b:6c:7c:73:55:89:af:77:17:e0:a4:50:4f:16:33:7b:ce:
cc:77:34:fd:ef:57:da:89:03:48:a7:a0:04:7f:d9:7a:0d:16:
f2:1f:0a:bf:8d:d5:dd:49:9f:a2:06:3a:4b:27:71:86:5f:75:
c0:ea:3c:c3:70:c6:48:fc:63:b2:2b:90:ad:60:bd:9d:10:00:
41:7f:a1:77:7f:e9:b6:1e:47:a9:2a:9d:08:c7:9d:9f:30:97:
bc:44:f9:9a:7b:31:2a:67:27:ad:dd:c8:df:12:f5:27:6d:88:
a9:69:2b:34:45:e8:b6:5e:45:b6:55:6b:c4:44:00:8a:32:4e:
38:e8:17:46:94:37:94:6b:dc:ba:d9:95:4a:7d:af:ff:48:1e:
0b:38:5c:3c:da:7f:60:38:8c:7b:e5:2d:fa:65:f0:00:f5:3c:
f3:1e:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org