Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/PRL8whNMmSSaBlYDtBWeMCzzmH8.roa
File: PRL8whNMmSSaBlYDtBWeMCzzmH8.roa (raw, json)
Hash identifier: +AnDMCEnITfpeXpcIjTs4JUUtLycaW6JTnJNLK8zle4=
Subject key identifier: 3D:12:FC:C2:13:4C:99:24:9A:06:56:03:B4:15:9E:30:2C:F3:98:7F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5B599FA54D444F589A31D667FC1ED
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/PRL8whNMmSSaBlYDtBWeMCzzmH8.roa
Signing time: Sun 01 Jan 2023 05:54:54 +0000
ROA not before: Sun 01 Jan 2023 05:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 5.105.211.0/24 maxlen: 24
5.105.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b5:99:fa:54:d4:44:f5:89:a3:1d:66:7f:c1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d12fcc2134c99249a065603b4159e302cf3987f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:87:e1:80:a9:ab:fa:5d:85:83:f6:da:87:
b2:87:4a:e7:e1:09:39:15:1c:78:0a:50:a6:73:28:
2f:3d:fa:39:1e:86:cd:4d:34:a5:ad:3e:b2:6b:47:
71:ee:87:04:03:9d:0b:b7:cc:53:2d:40:b3:74:db:
db:e7:6c:3c:21:54:67:15:47:5f:39:b5:d1:f0:60:
4a:ba:b7:51:f4:51:45:ea:e7:44:11:e3:03:73:66:
ec:6d:51:25:23:92:ed:af:8a:15:35:53:36:4e:61:
c3:61:a5:8f:9e:bf:c4:85:93:7a:32:df:b9:52:bd:
8e:90:35:e3:9c:2b:eb:e9:cf:20:69:13:07:57:39:
82:64:ab:b7:12:f2:2b:eb:af:89:1a:45:6a:7f:88:
3d:59:dd:43:36:ce:6e:17:b4:13:86:15:76:bb:77:
79:79:4a:90:58:15:7b:ec:4e:3f:98:0c:44:a6:95:
db:f3:ff:f7:79:3c:b3:85:c9:04:17:aa:a8:80:b9:
64:3c:04:ae:df:16:9d:5a:7b:9e:e0:cf:c8:47:8b:
9c:9d:72:2d:96:5a:fe:a3:c8:ef:39:74:92:b7:97:
b9:f7:ec:53:5d:23:e7:e5:d1:72:7c:ed:53:68:9c:
32:7d:16:f0:ae:16:4a:3e:13:ce:0c:7d:11:04:3e:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:12:FC:C2:13:4C:99:24:9A:06:56:03:B4:15:9E:30:2C:F3:98:7F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/PRL8whNMmSSaBlYDtBWeMCzzmH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.116.0/24
5.105.211.0/24
Signature Algorithm: sha256WithRSAEncryption
22:4f:07:55:9c:f8:dd:d5:9b:f0:cd:53:af:a1:e1:5c:4b:5a:
21:42:87:44:76:21:f2:5b:26:06:d4:8b:bc:89:5c:76:eb:47:
9b:18:79:57:83:86:6c:dd:c8:d8:df:e8:95:bb:f4:41:18:56:
34:ee:39:09:16:98:f1:7e:52:ee:52:60:ff:04:42:4f:ef:32:
91:60:45:cb:46:35:82:38:64:c8:5d:87:3d:5d:0f:e7:55:c5:
29:09:fc:d5:1c:ac:8a:72:ea:83:bb:11:ec:ed:8f:90:f3:ce:
1c:5e:03:ad:58:06:ac:bb:8d:ed:8c:10:51:92:ce:be:a7:34:
8e:71:9b:7c:3d:4b:4d:57:76:a7:85:eb:61:38:d0:75:60:45:
65:ad:3e:f7:18:fc:93:48:bc:c6:47:f5:37:d0:f0:a8:68:dc:
f5:b6:a3:b2:7d:da:0d:42:f5:22:34:56:b2:1a:6e:4b:8a:80:
5e:0c:75:4a:92:f2:82:7d:5b:6e:f2:cd:51:58:fd:71:05:69:
98:05:a3:a6:e6:f9:26:2e:83:c7:98:fc:db:ae:a4:39:b9:23:
ee:93:fe:b6:a9:20:ae:cc:32:1b:43:4c:72:e2:5c:ce:d6:05:
2e:6e:89:68:eb:a5:20:50:d4:70:e6:fa:3f:fd:32:94:39:b5:
84:c9:eb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:55 2025 by rpki-client