Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/O2xWAqd_ysKyRxW48gmDhkP_hM0.roa
File: O2xWAqd_ysKyRxW48gmDhkP_hM0.roa (raw, json)
Hash identifier: vxdhPGqzcLHjUqIhbADQEQEEEfDJBAsM1GroAGmNTUg=
Subject key identifier: 3B:6C:56:02:A7:7F:CA:C2:B2:47:15:B8:F2:09:83:86:43:FF:84:CD
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183323C40544CDA12A8675AEA0A5C8366FA
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/O2xWAqd_ysKyRxW48gmDhkP_hM0.roa
Signing time: Mon 12 Sep 2022 15:05:52 +0000
ROA not before: Mon 12 Sep 2022 15:05:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 5.105.25.0/24 maxlen: 24
5.105.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:32:3c:40:54:4c:da:12:a8:67:5a:ea:0a:5c:83:66:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 12 15:05:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b6c5602a77fcac2b24715b8f209838643ff84cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:82:06:69:1d:03:0a:27:4a:e1:cf:10:b7:
50:8e:df:f7:71:96:a0:93:8b:37:77:97:ee:e3:a1:
70:79:3e:1c:f7:26:fd:fd:8a:27:64:c6:6c:90:91:
33:57:f4:fb:0a:15:8a:f2:26:ea:a4:d9:6d:e2:6e:
8e:7f:b2:5c:2f:ee:8d:12:0e:e4:36:7c:33:9b:a8:
d0:49:e2:dc:71:0b:56:b1:fb:14:b7:ae:41:38:40:
f7:e2:8d:2e:9e:59:0e:9a:5b:d7:a9:81:47:1b:b3:
4d:33:15:d2:55:ca:7f:da:87:f4:d8:9e:f6:8a:ef:
d3:2e:49:8b:4b:2f:b1:13:96:b6:e1:f8:ad:23:d1:
f5:e0:95:30:30:b7:bf:89:44:ca:65:fd:20:28:93:
f6:e9:4b:52:c9:b6:89:39:8f:b6:f5:33:a8:91:ec:
30:51:14:af:5b:1f:70:f2:d5:68:7e:a4:dc:3e:30:
21:7b:e9:86:f1:82:06:d3:00:de:47:c5:ac:7d:d6:
21:16:fd:59:55:ff:ff:b7:23:58:03:78:96:d3:f3:
38:44:12:06:be:da:ee:09:44:3a:f7:78:6f:c1:a9:
65:e9:96:75:62:32:53:6a:f4:f7:c7:db:34:d8:95:
e0:d5:06:1c:99:4d:3a:99:0a:a3:91:6a:64:13:b6:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6C:56:02:A7:7F:CA:C2:B2:47:15:B8:F2:09:83:86:43:FF:84:CD
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/O2xWAqd_ysKyRxW48gmDhkP_hM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.25.0/24
5.105.99.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c6:d7:34:d2:30:6b:53:ec:86:dd:2c:ec:ff:fd:fb:e8:0c:
00:c2:0b:28:a4:30:d2:0d:3f:a0:9f:06:57:c5:02:a1:4d:99:
bd:9b:8b:bf:fc:2e:6e:67:db:20:01:11:c7:56:7d:13:0a:b1:
9f:bd:0e:5e:fc:d6:bc:6a:21:22:45:38:64:22:a7:e3:bb:a7:
d6:35:92:36:ec:2a:d5:5d:e9:73:c3:ea:0a:f0:2e:88:ab:48:
87:25:32:89:9c:f2:c6:b3:4b:d6:c1:9e:ae:39:5c:3a:9b:c1:
81:4d:c7:8d:32:32:08:b9:0c:57:0e:b5:7d:80:5c:9a:37:7e:
04:c1:b2:ff:c2:a9:dd:d6:4a:42:62:b3:fe:7c:9d:c1:2f:6b:
bf:49:56:7e:8a:b3:84:87:58:21:9c:7c:de:fd:e4:aa:19:6c:
53:66:b1:05:59:13:1d:50:44:5f:92:44:9f:e7:6d:93:39:0d:
36:2f:f2:cf:cf:ef:7a:17:3f:ee:b8:2e:a7:5e:48:3e:e5:49:
bd:d7:26:49:91:5b:f3:62:0d:3c:e0:d8:c7:a3:2d:7e:d7:90:
40:4f:dd:2c:a0:79:b9:50:60:e8:2e:9a:4d:20:d5:fc:f0:3a:
40:bd:05:c7:3d:ef:8a:b3:f6:5f:95:21:4e:7e:b1:18:56:64:
eb:b2:13:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org