Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/V-rEwICMrDi3i58CcYRqz2_g0jM.roa
File: V-rEwICMrDi3i58CcYRqz2_g0jM.roa (raw, json)
Hash identifier: IY5GdQBccQzjbNlkH8sLBQsTsDt5iTxy5PHnb0/Q4w0=
Subject key identifier: 57:EA:C4:C0:80:8C:AC:38:B7:8B:9F:02:71:84:6A:CF:6F:E0:D2:33
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01853928761D71075FAFEAACD03011CC9C37
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/V-rEwICMrDi3i58CcYRqz2_g0jM.roa
Signing time: Thu 22 Dec 2022 09:27:11 +0000
ROA not before: Thu 22 Dec 2022 09:27:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.227.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.46.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.55.0/24 maxlen: 24
5.105.54.0/24 maxlen: 24
5.105.53.0/24 maxlen: 24
5.105.52.0/24 maxlen: 24
5.105.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:28:76:1d:71:07:5f:af:ea:ac:d0:30:11:cc:9c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 22 09:27:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57eac4c0808cac38b78b9f0271846acf6fe0d233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:b6:98:0a:19:99:89:4b:d6:bb:5e:84:6d:
3f:b5:d3:e8:3f:27:4a:55:9b:71:e5:37:b8:c7:a6:
83:d4:d1:6d:0f:e4:97:34:e4:21:94:a0:d9:c9:2e:
48:fa:a9:e0:e7:21:e3:e6:77:af:21:d5:4c:07:da:
22:ec:3b:76:50:85:c7:3d:0b:95:30:83:a1:70:c5:
58:92:00:65:4d:0a:9a:1b:ef:b6:98:d7:5b:5c:9a:
37:75:9f:de:19:7b:2d:4e:c9:4a:7c:1f:3f:95:87:
1c:16:1f:a3:a3:bd:64:26:fb:4b:1f:59:90:01:96:
4b:1e:30:90:a4:5b:35:41:00:e5:cc:26:be:8c:3a:
ab:02:aa:4c:45:5e:fc:d8:b4:71:3c:21:9c:b4:79:
55:ac:ee:6e:7a:cb:4f:31:f6:35:b9:5a:62:13:73:
84:aa:b2:01:22:57:0a:0f:a7:c4:ab:ba:09:47:8a:
c6:81:54:b4:40:f7:76:d2:4a:3f:48:a5:77:71:e0:
2a:59:9d:0b:05:78:da:89:41:6d:eb:b6:81:a7:4b:
a2:31:fc:cc:6a:38:a5:5c:f2:c3:20:7a:ac:a1:c8:
a8:cb:27:6d:fe:47:13:c1:6c:91:8d:90:c1:cf:61:
5a:93:a2:63:d2:97:73:b3:23:1a:f9:80:e5:ac:44:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EA:C4:C0:80:8C:AC:38:B7:8B:9F:02:71:84:6A:CF:6F:E0:D2:33
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/V-rEwICMrDi3i58CcYRqz2_g0jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.44.0/22
5.105.52.0/22
5.105.219.0/24
5.105.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:23:1d:fd:b5:ea:1a:98:a4:4a:15:16:0d:08:1c:44:42:cc:
4e:c8:29:b4:1b:35:85:14:0d:ab:10:bd:56:e1:b3:8d:ef:50:
30:4d:0d:14:69:19:2f:bf:6d:a0:cf:92:9b:5e:28:61:ff:a2:
85:c8:f7:47:cf:07:3e:bd:f5:96:bc:33:cb:f0:aa:77:c7:7d:
20:e3:0e:9c:25:de:6d:be:2b:32:05:ba:94:51:97:c5:29:fe:
a8:70:59:c6:5a:10:75:c8:81:a5:6a:e0:52:3c:9b:fb:17:64:
f9:a5:bb:aa:c0:0a:49:ff:f2:4f:53:65:8e:d2:98:30:d0:a4:
84:16:9b:a3:89:9b:f6:6b:fb:ad:96:33:31:b1:1c:96:ef:b5:
53:3f:1a:73:ae:64:8c:09:37:ad:53:18:dd:15:05:6a:d6:f9:
ba:02:c8:d0:a0:e8:6a:cb:8f:fa:0f:6a:ad:ca:90:5f:a4:a3:
9c:fe:23:58:ea:76:a5:d0:31:5e:9f:d2:ec:a7:72:0b:70:ba:
22:e5:27:7e:99:46:24:ba:04:9e:0e:72:13:2b:21:92:15:b1:
42:3e:4c:43:71:02:29:2d:b4:36:aa:7a:4c:e2:f4:10:3a:7e:
4c:cd:90:e2:db:57:95:5e:3f:05:05:44:17:da:b6:87:16:0b:
2b:e7:d0:4f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYU5KHYdcQdfr+qs0DARzJw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjIxMjIyMDkyNzExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2VhYzRjMDgwOGNhYzM4Yjc4YjlmMDI3MTg0NmFjZjZmZTBkMjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBO2mAoZmYlL1rtehG0/tdPoPydK
VZtx5Te4x6aD1NFtD+SXNOQhlKDZyS5I+qng5yHj5nevIdVMB9oi7Dt2UIXHPQuV
MIOhcMVYkgBlTQqaG++2mNdbXJo3dZ/eGXstTslKfB8/lYccFh+jo71kJvtLH1mQ
AZZLHjCQpFs1QQDlzCa+jDqrAqpMRV782LRxPCGctHlVrO5uestPMfY1uVpiE3OE
qrIBIlcKD6fEq7oJR4rGgVS0QPd20ko/SKV3ceAqWZ0LBXjaiUFt67aBp0uiMfzM
ajilXPLDIHqsocioyydt/kcTwWyRjZDBz2Fak6Jj0pdzsyMa+YDlrESujwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFfqxMCAjKw4t4ufAnGEas9v4NIzMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvVi1yRXdJQ01yRGkzaTU4Q2NZUnF6Ml9nMGpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCBWksAwQC
BWk0AwQABWnbAwQABWnjMA0GCSqGSIb3DQEBCwUAA4IBAQCeIx39teoamKRKFRYN
CBxEQsxOyCm0GzWFFA2rEL1W4bON71AwTQ0UaRkvv22gz5KbXihh/6KFyPdHzwc+
vfWWvDPL8Kp3x30g4w6cJd5tvisyBbqUUZfFKf6ocFnGWhB1yIGlauBSPJv7F2T5
pbuqwApJ//JPU2WO0pgw0KSEFpujiZv2a/utljMxsRyW77VTPxpzrmSMCTetUxjd
FQVq1vm6AsjQoOhqy4/6D2qtypBfpKOc/iNY6nal0DFen9Lsp3ILcLoi5Sd+mUYk
ugSeDnITKyGSFbFCPkxDcQIpLbQ2qnpM4vQQOn5MzZDi21eVXj8FBUQX2raHFgsr
59BP
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org