Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Sc7XPlCmPKnbNeQRNCO9uhOIai0.roa
File: Sc7XPlCmPKnbNeQRNCO9uhOIai0.roa (raw, json)
Hash identifier: jCxDXH3NC5xdPx0Fix+vJWTQhj3sm7z6OuvGP3dLksE=
Subject key identifier: 49:CE:D7:3E:50:A6:3C:A9:DB:35:E4:11:34:23:BD:BA:13:88:6A:2D
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0184E77B7E1BC5F0CB88857EF6DECC93AAC8
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Sc7XPlCmPKnbNeQRNCO9uhOIai0.roa
Signing time: Tue 06 Dec 2022 12:49:00 +0000
ROA not before: Tue 06 Dec 2022 12:49:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 5.105.104.0/24 maxlen: 24
5.105.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:7b:7e:1b:c5:f0:cb:88:85:7e:f6:de:cc:93:aa:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 6 12:49:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49ced73e50a63ca9db35e4113423bdba13886a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:2f:f0:94:cd:08:bf:95:14:4b:fe:5d:e6:
60:d4:f0:e0:48:d1:23:11:6b:11:77:26:1a:e5:ae:
17:1f:6c:ac:65:ad:0e:57:50:96:d1:6f:5b:c7:86:
cb:04:f4:52:58:3d:88:96:98:ca:ab:50:e2:16:77:
1c:0e:37:ce:d2:13:e1:fa:33:60:fe:dd:03:67:cc:
51:36:ce:5c:9e:48:70:2c:9c:5e:7b:98:eb:e4:d1:
f6:3b:c1:52:b9:e0:5e:e6:9c:93:a8:71:d4:a0:d1:
fb:8a:77:37:2f:d2:07:90:4e:79:6d:4e:43:3b:52:
36:56:5c:a8:e7:c8:9f:5a:29:8e:25:27:a8:1c:7e:
eb:3b:44:37:04:10:41:b0:09:9f:41:bc:83:0d:c2:
cb:5b:1e:3f:7f:d7:59:8b:b5:b8:e4:81:ac:00:99:
5e:d8:0c:21:65:d8:85:ea:03:d3:c4:0c:85:00:6c:
49:68:e4:b4:c3:9f:46:e3:c7:6e:b9:a1:6c:c9:cb:
37:9a:38:89:69:9e:a9:2d:36:38:7b:e9:91:57:f3:
ef:c8:55:bd:e5:f2:74:76:84:89:e4:32:85:3a:18:
9f:b6:f0:b3:5f:0e:87:10:74:da:dc:67:27:87:1c:
be:37:1c:dd:ee:6b:12:5e:88:ad:7d:f8:0f:85:86:
1c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CE:D7:3E:50:A6:3C:A9:DB:35:E4:11:34:23:BD:BA:13:88:6A:2D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Sc7XPlCmPKnbNeQRNCO9uhOIai0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.100.0/24
5.105.104.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:cb:96:d1:55:f1:99:b7:dc:e7:3b:3e:71:f4:95:c7:e1:d5:
26:b4:e5:85:9c:41:e2:d5:2e:b9:83:16:12:37:37:ea:75:b2:
cc:e9:99:db:e2:f7:cf:f0:4f:fa:9e:62:4a:82:e5:7e:e8:d5:
f8:5d:a9:b6:72:6f:11:c4:a8:05:25:9d:4b:5b:e0:69:54:3a:
a7:f0:0f:5f:f5:da:8c:e7:04:2a:e6:6a:ab:e8:a9:78:a2:a5:
8e:08:77:fa:0c:b5:77:c9:68:8c:61:b8:e7:84:6f:84:58:b0:
d8:8d:7e:05:0f:7b:db:30:9a:21:96:9e:d4:e7:d2:24:82:a7:
40:c1:e3:84:3e:37:11:15:a8:81:1c:5e:6a:e7:4b:0e:fd:7e:
78:14:52:e6:b5:8e:96:19:15:79:38:f9:87:25:d9:06:fc:8d:
cf:80:18:25:63:64:92:2e:c8:06:66:85:3f:6e:5a:b6:e1:b4:
2f:65:c9:77:5d:b3:1a:f9:a7:10:a1:65:cf:50:02:4f:93:84:
34:a0:1c:ef:40:df:b4:47:6e:d5:fe:60:8e:1f:93:c9:5d:8f:
a2:3d:3c:86:26:c8:99:01:98:71:3e:d4:86:de:c4:4f:5b:33:
f7:44:39:de:f0:96:e1:aa:36:9e:2e:b1:f8:2e:d9:f6:b6:fd:
d9:ab:3b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org