Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/TaCKwDs-icEluH276DP59KztBmM.roa
File: TaCKwDs-icEluH276DP59KztBmM.roa (raw, json)
Hash identifier: B39zj1+URAM88xVo26VNilV+Bf4eukf2GUYzE2Dmn04=
Subject key identifier: 4D:A0:8A:C0:3B:3E:89:C1:25:B8:7D:BB:E8:33:F9:F4:AC:ED:06:63
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0184529299B86B6A42BACDFFBDC65CF4D965
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/TaCKwDs-icEluH276DP59KztBmM.roa
Signing time: Mon 07 Nov 2022 14:50:49 +0000
ROA not before: Mon 07 Nov 2022 14:50:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 5.105.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:92:99:b8:6b:6a:42:ba:cd:ff:bd:c6:5c:f4:d9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 7 14:50:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4da08ac03b3e89c125b87dbbe833f9f4aced0663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:30:cf:52:dc:cc:3e:a2:96:d8:0a:59:13:
aa:51:7d:7e:93:09:97:80:e6:13:85:b5:3f:cd:bf:
e1:2a:d1:c2:8d:95:3c:fc:d4:de:68:96:04:fb:00:
77:dc:92:d2:cc:77:7a:8e:44:be:83:0e:f4:b1:c9:
03:50:a8:05:bd:88:0a:08:b1:6a:a9:58:de:c0:24:
03:2b:dd:e3:b5:1a:d4:ec:d5:8a:30:9f:97:c4:6e:
7e:5c:b6:33:77:5e:0a:a4:e6:30:61:e3:5b:ad:7c:
50:16:bf:a9:86:ff:1d:18:be:04:43:b8:74:5e:c3:
e7:e9:76:fa:ec:fa:ce:14:f3:f5:c6:09:5f:d5:4a:
b5:92:37:66:10:52:6f:32:70:7a:f5:78:49:cb:48:
88:39:cb:18:46:f0:eb:f0:44:e7:93:31:51:4b:d8:
2e:6d:58:27:0d:4e:c3:84:c2:aa:43:a4:ba:26:81:
f7:01:b1:d0:6d:84:32:d6:67:81:50:3b:e6:1b:f1:
ea:cb:41:9b:75:75:f8:2a:85:03:dc:ca:e0:1e:38:
d9:d4:6c:27:bc:4a:2b:90:74:6b:d6:4d:c2:d6:ab:
1b:c5:35:8b:c8:b5:0b:6d:15:b0:2f:9e:5a:12:f7:
c9:97:a4:33:c2:0f:70:9c:26:2e:59:9f:88:f9:68:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A0:8A:C0:3B:3E:89:C1:25:B8:7D:BB:E8:33:F9:F4:AC:ED:06:63
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/TaCKwDs-icEluH276DP59KztBmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.29.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:91:2c:56:65:b5:61:20:82:61:95:07:0b:f8:13:39:68:74:
ed:b9:40:60:70:42:0a:8a:68:3b:8b:74:8e:ff:38:fe:b7:7a:
eb:ae:41:11:d6:1c:00:2c:20:5b:c7:4d:c6:5f:45:ab:4c:a4:
ff:39:11:8a:88:4b:ed:cc:b5:06:32:7a:47:09:de:dc:47:82:
b2:23:d3:6d:67:6a:9b:1a:94:3e:b0:e1:d0:7a:d9:41:b3:da:
de:0b:3d:e2:48:4c:e2:9b:0a:51:80:c9:e1:f4:7c:f1:08:08:
69:d4:9a:19:ec:07:b4:02:3c:b7:fd:7e:9e:20:27:68:11:2a:
a4:0d:93:79:2f:52:a5:51:17:78:00:70:5a:8b:81:0a:42:47:
c1:7d:bd:b8:0b:da:2a:17:10:36:b3:5d:32:45:75:e8:d8:02:
ef:18:6c:c6:7e:6f:10:68:0e:29:a2:e6:d5:5e:f1:35:45:17:
87:35:65:2d:cf:a6:f5:86:86:88:98:6e:2f:ea:09:74:46:e6:
71:09:35:47:a2:72:2e:59:ec:d5:78:16:1b:e8:80:a0:d2:e4:
33:ef:5c:86:d0:e8:e0:18:ec:ac:94:5c:98:1b:d1:1c:89:b4:
a7:c9:51:41:63:db:6e:3a:77:d6:b9:a4:cd:4b:00:9c:96:f7:
4c:23:0a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org