Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VJG_PLuGfBY_XK_uq-i-VM4gdEc.roa
File: VJG_PLuGfBY_XK_uq-i-VM4gdEc.roa (raw, json)
Hash identifier: 4Tm/Z9A6OIZ3RMK5VdHNzJwqg9zMwd59/EilJOUPT68=
Subject key identifier: 54:91:BF:3C:BB:86:7C:16:3F:5C:AF:EE:AB:E8:BE:54:CE:20:74:47
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01845BE9DEA6B45BD29FAC85F7737C2EE493
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VJG_PLuGfBY_XK_uq-i-VM4gdEc.roa
Signing time: Wed 09 Nov 2022 10:22:44 +0000
ROA not before: Wed 09 Nov 2022 10:22:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210388
IP address blocks: 5.105.18.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:e9:de:a6:b4:5b:d2:9f:ac:85:f7:73:7c:2e:e4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 9 10:22:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5491bf3cbb867c163f5cafeeabe8be54ce207447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4d:ef:b4:53:81:27:30:77:36:fc:75:51:69:
cf:c5:d0:a4:67:91:d4:9f:a1:e4:89:01:fa:1f:0f:
ec:92:fc:72:50:1e:55:ba:0a:31:64:53:d4:60:2e:
18:0b:ad:5f:68:99:29:29:2b:4e:cf:d5:ab:b7:60:
ff:83:23:8e:14:43:ae:0e:1d:32:87:12:21:88:24:
51:34:6e:8b:8a:83:34:8b:18:70:c5:1f:4a:85:06:
4e:e3:ed:77:6c:be:de:de:be:74:88:7d:28:76:1a:
ee:5d:9a:14:6b:5d:72:37:95:0b:ca:f2:3a:18:e2:
b4:3c:3c:12:46:92:0b:6b:99:46:7f:4a:3a:49:37:
4d:43:d1:53:01:cd:92:38:8d:95:cc:79:bb:9a:e9:
df:bc:e4:a7:e4:8b:35:99:ae:06:96:77:22:ab:fd:
7c:64:3a:73:d9:28:fe:eb:80:71:49:6a:ed:ef:c4:
46:eb:3c:1b:69:5c:16:de:69:b0:b5:f0:0b:1b:fd:
55:3f:7a:86:e8:37:88:99:90:44:de:d2:da:36:05:
02:ba:bd:17:61:72:a4:80:c5:f0:26:5c:56:27:36:
bb:5b:94:09:ee:bc:f9:08:c3:aa:63:58:b1:71:cb:
1d:b5:86:7a:a8:ee:20:de:6d:1f:93:80:6c:72:90:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:91:BF:3C:BB:86:7C:16:3F:5C:AF:EE:AB:E8:BE:54:CE:20:74:47
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VJG_PLuGfBY_XK_uq-i-VM4gdEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.18.0/23
5.105.49.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:b5:a1:7e:b6:f4:1d:b2:85:39:fa:4d:3e:bb:92:64:6b:95:
51:06:52:ab:bd:13:54:0f:da:43:7d:23:bf:42:46:4d:5a:fa:
e9:64:6d:8f:c3:45:da:8c:0a:26:12:70:a0:20:ae:62:8a:35:
3f:fc:c3:5a:85:f4:d3:7e:f6:e2:ca:b5:aa:84:d6:41:2c:d0:
cc:f2:d9:ab:05:96:e6:36:1d:89:c5:77:69:93:f7:00:d4:75:
81:b3:73:06:06:78:ae:0f:43:f3:1e:8e:05:00:b0:3a:ef:6d:
7b:67:ac:62:1d:3a:fa:c1:ca:2f:1c:2c:82:bd:1a:e8:9d:e5:
7e:fc:5e:86:1b:1e:d2:50:5c:e2:1c:7d:e6:89:49:c8:9b:69:
ce:4a:4b:0f:4a:7d:3a:ee:46:01:52:74:20:42:a5:62:ec:e2:
fc:fd:15:93:da:04:bf:93:bb:3f:79:cd:9d:25:74:7a:aa:6c:
dc:19:d6:94:f1:5d:7c:4c:e5:1a:7e:06:5b:31:a9:c5:2e:a7:
6d:1a:39:dc:90:28:c0:50:52:a8:3c:9f:cf:4c:ba:24:70:8a:
f9:14:75:2b:27:5c:f4:f2:52:89:e4:fc:d1:1f:a0:31:0a:f4:
13:0e:8c:b5:af:3d:c6:18:52:c1:1c:9c:6e:ab:d6:47:06:0a:
ab:91:8b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org