Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/U1UqPNUI3U8Ids56bTJXDpVdZ_4.roa
File: U1UqPNUI3U8Ids56bTJXDpVdZ_4.roa (raw, json)
Hash identifier: kx7trqOvlggSiS9xcyxXhZQdR0EpOeY4xRwQ1BL17zU=
Subject key identifier: 53:55:2A:3C:D5:08:DD:4F:08:76:CE:7A:6D:32:57:0E:95:5D:67:FE
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183FB0770E46A66B26FE5ABE9797F5B4CC8
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/U1UqPNUI3U8Ids56bTJXDpVdZ_4.roa
Signing time: Fri 21 Oct 2022 14:51:52 +0000
ROA not before: Fri 21 Oct 2022 14:51:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 5.105.13.0/24 maxlen: 24
5.105.152.0/24 maxlen: 24
5.105.155.0/24 maxlen: 24
5.105.154.0/24 maxlen: 24
5.105.153.0/24 maxlen: 24
5.105.61.0/24 maxlen: 24
5.105.67.0/24 maxlen: 24
5.105.73.0/24 maxlen: 24
5.105.83.0/24 maxlen: 24
5.105.11.0/24 maxlen: 24
5.105.9.0/24 maxlen: 24
5.105.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fb:07:70:e4:6a:66:b2:6f:e5:ab:e9:79:7f:5b:4c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 21 14:51:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53552a3cd508dd4f0876ce7a6d32570e955d67fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:76:a6:4b:54:c4:fd:eb:a5:6f:b7:31:9e:
d0:b4:a9:81:90:31:61:b2:66:c6:82:a2:73:cb:6d:
97:c4:42:3b:ea:40:9c:9a:77:b2:4d:f4:32:39:55:
10:07:03:e9:27:14:81:c2:4f:7d:27:39:b6:86:cf:
ef:82:dd:9c:2c:fb:ea:e7:19:a7:68:48:10:cf:48:
dc:38:b2:a8:a2:a2:81:4b:4f:64:bc:75:ea:0c:0d:
de:35:64:a0:f6:f2:6f:19:43:a7:2b:65:db:10:c5:
1b:4f:fb:90:d4:8c:a3:d5:a9:98:2a:8c:df:0c:56:
06:d2:9b:fe:9e:90:dc:b2:29:6e:39:21:93:be:18:
52:88:ab:38:24:17:f9:6e:70:2f:a5:4f:08:72:41:
47:31:8e:5d:65:06:71:58:ec:4b:4b:f2:b2:5f:ef:
32:91:33:e4:74:7c:76:bc:65:1c:f1:e9:f7:61:6f:
ec:d6:ab:33:dc:38:cc:28:a2:e3:27:9c:fe:a0:60:
91:20:25:8e:35:ec:09:2d:2d:82:89:33:e4:6b:6a:
4c:58:2d:c5:50:10:f6:6f:b2:0c:b0:56:a0:54:c9:
46:b8:21:9b:50:58:17:ea:dd:00:30:44:90:c0:3b:
cb:6e:f1:40:f4:c0:be:a6:18:82:87:c0:f3:5c:21:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:55:2A:3C:D5:08:DD:4F:08:76:CE:7A:6D:32:57:0E:95:5D:67:FE
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/U1UqPNUI3U8Ids56bTJXDpVdZ_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.8.0/23
5.105.11.0/24
5.105.13.0/24
5.105.61.0/24
5.105.67.0/24
5.105.73.0/24
5.105.83.0/24
5.105.152.0/22
Signature Algorithm: sha256WithRSAEncryption
75:54:88:f7:b6:8a:cf:f9:c6:62:cc:b7:41:04:c0:6f:42:ae:
54:b0:fb:5a:27:c7:15:b2:a5:20:63:8f:89:8e:90:b3:4f:9a:
7e:ec:02:09:ba:93:a0:64:22:64:67:76:e7:4b:64:17:d9:2d:
8f:19:62:e5:c3:6c:f5:b5:1d:79:d6:f5:24:29:b8:44:9a:4e:
24:6b:d3:69:fb:27:69:b1:d4:cf:c0:74:d4:06:fc:20:39:a2:
5f:5e:a7:90:a0:ba:87:7f:46:06:eb:68:2a:08:e2:d2:d1:60:
5c:20:03:27:41:a8:ac:1b:3c:0a:0c:6f:25:09:90:f8:09:3a:
8f:0a:ad:78:ad:da:4d:fe:0e:96:ed:eb:ca:7d:48:d1:0f:f0:
e2:d6:41:8a:4d:f9:90:cd:6e:ff:77:46:4f:99:a6:10:65:98:
c3:5a:74:74:e3:ef:5f:b2:6f:f7:e6:b9:ca:c7:27:b4:20:28:
03:df:f4:db:ce:29:d5:92:8c:dc:e4:78:c3:e9:fa:08:39:af:
6c:d3:98:54:0f:20:75:59:ea:e9:ed:07:d8:81:7b:df:54:85:
5f:5c:d9:57:f6:dd:9b:55:02:de:fc:31:bf:e0:e6:37:35:61:
e6:9a:b1:4a:ea:bf:3e:35:8c:3e:2f:7b:8a:fd:43:ec:d9:9b:
7f:7f:b2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org