Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/O4Pic9iZ9Y4h_WXC9j5Gqt89KiA.roa
File: O4Pic9iZ9Y4h_WXC9j5Gqt89KiA.roa (raw, json)
Hash identifier: gHR2zsgJAVixGOZJQZVbD+DG+i4Hohs4cfheu94MXFk=
Subject key identifier: 3B:83:E2:73:D8:99:F5:8E:21:FD:65:C2:F6:3E:46:AA:DF:3D:2A:20
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185297A7A045771DDDDCE59F7F16A4B4421
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/O4Pic9iZ9Y4h_WXC9j5Gqt89KiA.roa
Signing time: Mon 19 Dec 2022 08:22:50 +0000
ROA not before: Mon 19 Dec 2022 08:22:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399471
IP address blocks: 5.105.22.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.35.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.46.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.55.0/24 maxlen: 24
5.105.54.0/24 maxlen: 24
5.105.53.0/24 maxlen: 24
5.105.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:7a:7a:04:57:71:dd:dd:ce:59:f7:f1:6a:4b:44:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 19 08:22:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b83e273d899f58e21fd65c2f63e46aadf3d2a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:33:f7:10:bf:f8:b2:32:b0:83:9e:c7:c3:
76:1a:ed:d4:d9:fc:34:ba:65:b6:b3:51:bf:4d:e0:
d3:dd:57:29:72:5e:91:e9:8f:f7:17:8a:19:50:96:
8a:8c:88:9e:91:53:d9:10:dc:b4:1e:ac:cc:9b:f4:
cf:ef:46:1b:be:d0:f4:b2:fc:c5:6a:93:47:20:50:
0f:19:3d:f1:4e:76:e1:14:0e:a8:bc:a3:35:e3:29:
af:00:01:dd:41:6c:38:4f:5d:7f:1f:b0:ce:28:43:
3c:75:fc:65:03:44:d4:bb:cd:43:1d:6b:89:a8:04:
74:f2:97:76:27:74:8e:d2:18:90:c5:0d:7d:8b:74:
48:9a:ce:c0:18:a3:f9:d7:8f:3f:a0:2c:51:6f:16:
8e:7a:35:14:7b:75:66:16:de:ba:55:82:32:73:92:
14:4c:6b:92:02:bc:1c:74:32:77:a8:ca:d9:01:33:
8e:bd:c2:0c:b3:f6:20:79:2c:d0:57:c6:24:e0:20:
8b:57:6a:11:57:80:86:59:91:f0:a6:cb:87:a1:6d:
8d:8d:ed:21:70:49:d5:aa:89:ce:6d:20:52:32:29:
21:38:f6:66:40:9b:a5:ab:48:b7:3c:eb:75:42:b6:
23:89:bf:92:a2:ac:85:97:ec:97:66:80:f7:2a:7e:
c4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:83:E2:73:D8:99:F5:8E:21:FD:65:C2:F6:3E:46:AA:DF:3D:2A:20
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/O4Pic9iZ9Y4h_WXC9j5Gqt89KiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.18.0/24
5.105.21.0-5.105.22.255
5.105.34.0-5.105.37.255
5.105.44.0/22
5.105.52.0/22
Signature Algorithm: sha256WithRSAEncryption
94:66:c5:1a:a9:f1:aa:b4:0a:a8:aa:ba:ca:06:ef:0b:02:da:
44:15:0d:b4:a8:42:dc:71:9f:33:eb:7b:11:15:6a:da:b0:8e:
64:66:b1:5b:f3:3b:ff:95:a8:59:7a:f7:a9:aa:25:c8:c8:61:
d7:2b:54:a1:4f:a1:9c:e0:6a:e8:54:53:80:99:2e:2c:e6:21:
16:fd:45:82:a2:34:7a:2d:20:9b:2a:66:cb:19:b9:81:0c:83:
b7:6e:f6:b0:d5:de:c8:dd:1d:7c:dc:c3:d4:a5:de:3f:c0:d2:
4f:25:0f:e5:fb:5a:80:d5:ea:ea:cb:13:c1:fd:6b:53:a1:f4:
39:e1:8f:07:68:0c:43:49:34:e6:54:74:fe:db:e3:62:b2:d2:
19:95:40:56:02:f3:7c:be:d1:e3:00:ba:00:71:6b:b0:43:de:
ea:78:9f:eb:eb:ae:8d:0c:e6:be:5f:e0:9c:a2:6a:9e:67:a6:
48:8d:c7:50:8f:7e:ef:a8:3f:7d:2c:7e:9c:e3:a3:88:a7:5c:
bb:e4:66:73:1b:60:07:32:b8:90:38:b3:8f:4b:a2:18:5d:a0:
4f:df:1d:b4:e4:4d:b2:42:b5:29:17:e0:91:87:52:ec:da:b0:
5b:77:e4:f8:84:82:ec:1a:06:a8:25:15:72:8d:5f:3e:e1:02:
3c:bc:22:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org