Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NWEoObutcVvNZKMDGMJ0Wy0QSOs.roa
File: NWEoObutcVvNZKMDGMJ0Wy0QSOs.roa (raw, json)
Hash identifier: 8Dj6OQOGjJuBVqI9FcYhXfFtYWQhm3vURjl0Y1PSpfg=
Subject key identifier: 35:61:28:39:BB:AD:71:5B:CD:64:A3:03:18:C2:74:5B:2D:10:48:EB
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018554D289D23DE3AC8ECE0F4D71DB28FD02
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NWEoObutcVvNZKMDGMJ0Wy0QSOs.roa
Signing time: Tue 27 Dec 2022 18:22:41 +0000
ROA not before: Tue 27 Dec 2022 18:22:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7046
IP address blocks: 5.105.138.0/23 maxlen: 24
5.105.142.0/23 maxlen: 24
5.105.151.0/24 maxlen: 24
5.105.148.0/24 maxlen: 24
5.105.150.0/24 maxlen: 24
5.105.149.0/24 maxlen: 24
5.105.68.0/23 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.94.0/23 maxlen: 24
5.105.112.0/23 maxlen: 24
5.105.114.0/23 maxlen: 24
5.105.233.0/24 maxlen: 24
5.105.232.0/24 maxlen: 24
5.105.235.0/24 maxlen: 24
5.105.234.0/24 maxlen: 24
5.105.236.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:54:d2:89:d2:3d:e3:ac:8e:ce:0f:4d:71:db:28:fd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 27 18:22:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35612839bbad715bcd64a30318c2745b2d1048eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:84:f0:d4:65:03:5a:5b:3b:17:3c:2a:26:
ff:ae:a3:9d:cb:8f:0b:36:b5:8a:c4:0e:0f:d6:79:
b8:3a:70:cc:b2:58:b0:c9:ee:b3:a7:f5:c9:81:bc:
4b:26:51:f5:f1:90:bf:c3:da:c3:02:8e:ed:45:d1:
c2:42:ac:0c:b9:2a:f4:73:7a:f8:ef:88:39:39:51:
f3:e4:09:28:24:f6:2e:c3:f9:fc:17:83:10:a1:46:
c2:92:ca:89:ca:22:3b:7c:87:2e:d2:b6:7e:99:7f:
c0:7c:fc:21:93:88:76:79:fe:1a:bb:75:5a:f0:09:
cc:ab:8b:36:fb:15:55:0b:22:00:ca:59:fc:7c:98:
05:21:21:48:b8:ec:8d:d4:55:00:48:62:83:b7:d3:
04:99:f1:0b:20:c9:e5:fd:6b:b3:ee:d7:2b:c4:21:
53:34:81:a2:b4:7a:e3:89:b0:b9:9e:de:b5:01:17:
45:85:75:7b:88:69:bc:52:40:54:19:2b:4c:31:51:
8c:58:4b:33:43:57:f2:75:d9:af:bb:f3:3a:35:fa:
5e:18:f0:46:40:cf:31:1b:76:02:c7:91:e4:0c:cf:
98:a6:74:bb:c1:2c:c1:55:1c:63:91:4b:8e:3b:ab:
70:d7:e3:2a:96:f5:d9:55:0e:52:90:6d:fa:6a:6f:
87:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:61:28:39:BB:AD:71:5B:CD:64:A3:03:18:C2:74:5B:2D:10:48:EB
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NWEoObutcVvNZKMDGMJ0Wy0QSOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.68.0/23
5.105.86.0-5.105.89.255
5.105.94.0/23
5.105.112.0/22
5.105.138.0/23
5.105.142.0/23
5.105.148.0/22
5.105.174.0-5.105.178.255
5.105.180.0/22
5.105.232.0-5.105.236.255
Signature Algorithm: sha256WithRSAEncryption
3c:ef:79:15:1e:cb:a2:2c:2a:58:c4:1a:e8:9c:67:24:3e:62:
63:87:d7:8a:33:14:d2:7a:c7:12:d2:85:16:ed:6d:51:b2:e5:
f2:79:68:01:5f:3c:36:dd:34:0c:68:20:fe:fc:c1:e1:2f:85:
90:29:95:f1:47:15:a3:4a:15:93:71:f3:b7:ce:e9:87:f0:7b:
65:fc:96:a7:f4:1d:a5:00:a3:66:66:a7:c4:59:e5:b8:eb:c2:
6d:6d:6a:46:62:8c:08:12:13:31:b7:7f:79:81:b0:ab:a9:72:
1b:79:1e:f8:37:dc:a8:8d:90:e7:cd:5c:0c:da:ee:b2:83:cc:
98:e9:ba:ac:2d:92:49:33:d6:53:81:5a:0d:c6:01:81:51:d6:
89:a0:6e:23:87:fc:c5:f4:1d:40:30:da:91:49:d3:04:aa:e7:
8a:82:c8:43:ee:20:d4:e4:05:85:38:b5:56:51:42:15:12:84:
dd:f4:3a:21:e6:93:06:6c:83:aa:c7:9f:6d:38:4a:17:a9:71:
c5:75:88:22:4d:cb:33:13:b3:aa:e9:05:0b:6e:17:a2:3c:f0:
05:6d:08:fc:54:a4:5c:04:90:12:af:1c:3e:ce:42:11:40:d1:
72:59:7c:35:54:c0:d6:32:1d:e9:ac:37:4e:fe:cb:9b:eb:8c:
e0:c7:df:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org