Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Ojvo7kUWevOWPca3rHwIzONsXSo.roa
File: Ojvo7kUWevOWPca3rHwIzONsXSo.roa (raw, json)
Hash identifier: lWyS5JRs8ZlzY5K/GDiSCaW6bWWSCTCUepi4BbHdPiI=
Subject key identifier: 3A:3B:E8:EE:45:16:7A:F3:96:3D:C6:B7:AC:7C:08:CC:E3:6C:5D:2A
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018506A4FCDA9B6F7D1815B8DE2CB12ACC95
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Ojvo7kUWevOWPca3rHwIzONsXSo.roa
Signing time: Mon 12 Dec 2022 14:02:33 +0000
ROA not before: Mon 12 Dec 2022 14:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:a4:fc:da:9b:6f:7d:18:15:b8:de:2c:b1:2a:cc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 12 14:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a3be8ee45167af3963dc6b7ac7c08cce36c5d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e3:f6:c4:29:12:05:b1:eb:cd:39:91:a4:9f:
5c:98:94:58:c4:39:ce:2c:a0:e3:bb:47:f5:83:f0:
cf:e1:92:2c:73:a0:95:5b:16:4c:ff:4a:12:ef:35:
7b:c5:85:10:57:f9:94:7e:ed:c2:b8:89:90:05:a2:
3f:6c:7f:96:0d:b0:93:42:15:fc:b5:dc:2b:6d:e1:
80:c7:ca:14:e2:51:05:c4:ff:02:e3:54:0d:ee:a2:
d3:60:22:b5:5d:fc:59:b1:46:4a:64:2f:f6:0f:5a:
ed:86:1e:0d:15:62:36:bc:40:da:eb:4f:17:a2:32:
19:5c:57:7f:ec:a3:b3:23:01:68:5b:37:29:40:4e:
c2:80:76:64:59:c7:dc:1c:77:37:47:d3:38:ad:20:
c9:37:26:2e:1f:52:0a:66:e2:f0:48:15:81:dd:0c:
9b:16:60:eb:9d:63:64:80:1d:b0:b2:d5:28:f4:43:
24:e5:87:d3:eb:77:5f:2f:5a:62:8c:e6:4a:d1:e8:
65:b7:f2:a9:d4:65:96:48:7d:41:d1:ff:dc:4a:f0:
c4:e2:fa:e6:6f:27:3e:f1:6c:59:16:80:35:3a:3e:
af:8f:48:c9:ee:e1:86:cf:ea:f6:f3:e1:74:ee:4f:
0f:9a:0b:0c:58:7e:34:7c:21:17:f2:55:46:9f:43:
0f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3B:E8:EE:45:16:7A:F3:96:3D:C6:B7:AC:7C:08:CC:E3:6C:5D:2A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Ojvo7kUWevOWPca3rHwIzONsXSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.137.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:6c:61:50:42:b4:d7:b0:11:33:68:86:75:75:52:d7:d7:05:
37:50:e5:0c:32:44:dd:fc:fc:65:fb:b6:31:28:9f:0b:c0:10:
e7:9a:dc:d4:68:8c:e6:3e:ef:21:96:29:95:34:2e:f7:e9:28:
2c:fe:f4:41:c5:ab:a0:05:18:66:80:f5:d4:19:25:f1:91:c3:
65:8d:2b:89:ba:75:76:d0:a1:c3:e5:25:2c:69:1f:8d:e0:c2:
a8:0f:3f:a3:bd:5e:65:99:9f:ab:6a:cc:0a:b7:a2:4d:60:4e:
6b:44:d8:68:80:79:3b:a0:de:29:9c:64:a2:7f:c8:3f:e9:c1:
91:1a:cf:bb:fe:f2:e9:10:cf:ea:19:0e:a7:70:cb:d7:2c:37:
4e:44:39:d9:a7:67:47:eb:05:77:99:6f:57:3f:92:9b:10:21:
07:4e:cc:bc:ae:51:47:41:9a:cb:1e:ed:32:24:e1:0d:e6:a1:
96:a8:cc:7f:46:68:74:85:1f:6d:44:7b:fb:8c:43:1a:84:d3:
86:9c:1f:be:5a:cb:9b:35:32:f0:1e:b3:4c:16:54:97:c9:78:
fa:7b:a1:99:21:0d:50:76:a2:c0:4d:27:c3:ca:f5:a9:f0:98:
94:bc:79:f9:f6:1d:0f:0e:cd:a5:ab:6e:0a:d5:bd:1b:46:47:
98:10:20:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org