Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VdjRoiTTT5I862ll2hl3XilvXlc.roa
File: VdjRoiTTT5I862ll2hl3XilvXlc.roa (raw, json)
Hash identifier: mGQoSoJgGM4qjnq3wblG8HWFF8QApgST0BZHXryBnVQ=
Subject key identifier: 55:D8:D1:A2:24:D3:4F:92:3C:EB:69:65:DA:19:77:5E:29:6F:5E:57
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018414CB1FCD6EEA8BC8E7DD78BA0AE4951B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VdjRoiTTT5I862ll2hl3XilvXlc.roa
Signing time: Wed 26 Oct 2022 14:56:06 +0000
ROA not before: Wed 26 Oct 2022 14:56:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 5.105.119.0/24 maxlen: 24
5.105.121.0/24 maxlen: 24
5.105.91.0/24 maxlen: 24
5.105.90.0/24 maxlen: 24
5.105.92.0/24 maxlen: 24
5.105.93.0/24 maxlen: 24
5.105.211.0/24 maxlen: 24
5.105.223.0/24 maxlen: 24
5.105.222.0/24 maxlen: 24
5.105.116.0/24 maxlen: 24
5.105.224.0/24 maxlen: 24
5.105.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:cb:1f:cd:6e:ea:8b:c8:e7:dd:78:ba:0a:e4:95:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 26 14:56:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55d8d1a224d34f923ceb6965da19775e296f5e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:bd:9d:56:61:1c:f3:b1:37:c5:e8:e5:a9:
a6:19:4b:08:11:30:2a:40:ea:82:d1:74:1c:c4:03:
ff:cd:fb:ea:ca:7d:90:ad:72:c3:ca:af:31:75:3d:
3c:ee:82:c7:c1:04:0f:8f:ee:7e:b8:52:e1:ca:ce:
69:4c:11:50:db:7c:ed:96:bc:f9:c2:77:3b:3b:48:
3a:00:19:02:11:d1:9a:19:42:ec:4e:3e:a1:49:da:
12:fc:d9:b0:84:69:bb:58:84:23:e6:03:ae:7e:a8:
5d:ce:08:1b:a7:42:07:a8:ce:90:00:52:72:d4:4d:
e3:b6:9b:7f:2e:02:e3:d3:c1:61:c7:ae:91:67:8a:
39:a6:80:ec:0b:bd:54:ba:1c:cb:ef:78:b8:c4:c9:
45:fc:44:30:3e:31:2b:80:e8:04:98:d9:4d:48:4a:
1e:9a:9b:67:fe:23:3d:3e:50:10:d1:b2:31:ba:6d:
68:c0:fa:d5:0c:c1:5e:ba:af:ac:d7:eb:1e:60:80:
71:e6:1b:37:73:9e:6a:ad:2f:57:c9:75:f6:b8:08:
93:bd:8d:86:32:fa:47:fb:fa:da:fa:84:26:e5:18:
1a:15:88:de:45:09:de:2f:c7:e8:53:3b:6c:14:3d:
8d:0b:f5:6f:43:a2:93:94:32:aa:9b:4d:f4:a6:bb:
a2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D8:D1:A2:24:D3:4F:92:3C:EB:69:65:DA:19:77:5E:29:6F:5E:57
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VdjRoiTTT5I862ll2hl3XilvXlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.90.0-5.105.93.255
5.105.116.0/24
5.105.119.0/24
5.105.121.0/24
5.105.211.0/24
5.105.222.0-5.105.225.255
Signature Algorithm: sha256WithRSAEncryption
b0:f9:aa:93:07:c3:ee:e8:4f:be:96:c9:8a:6c:ce:56:d6:2e:
df:ce:88:a6:ee:51:b9:b6:fd:be:1c:f9:f8:b4:2a:b1:d3:91:
04:60:09:66:d1:77:c6:e5:2a:ed:2f:75:6b:03:8c:8e:ba:cf:
82:f2:f6:7e:99:6b:5f:1a:28:d8:5a:2f:27:cf:97:7a:54:e8:
39:d0:eb:8f:bc:cb:be:11:67:03:f3:94:15:64:64:c6:15:3d:
24:93:50:f1:6f:53:2b:e1:60:86:c3:a3:42:8c:5a:8e:a4:95:
d9:09:45:71:9a:48:69:4f:7e:ed:99:ef:52:98:4a:d4:7b:f0:
1e:56:56:14:ff:54:cc:ef:45:35:d1:67:d1:b0:9c:65:26:7c:
fd:dd:2c:14:38:be:84:5e:85:0e:ae:e9:df:89:4b:36:69:7c:
82:e9:fa:c0:65:16:b5:32:85:9d:98:fa:83:4f:e8:33:75:8b:
e7:40:84:77:aa:30:93:e7:c9:e0:37:da:de:09:e2:1c:51:63:
d0:9c:b8:3f:6a:52:74:aa:f1:df:06:c9:1c:12:cb:f9:65:a9:
79:de:4c:8a:09:de:7e:e9:6f:7f:3c:73:89:91:ea:09:c7:f1:
49:96:b8:1d:60:1e:e8:ae:18:41:6d:0d:0f:7c:ed:c9:b5:c5:
77:75:e0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org