Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/W6tbkok5l70Fj5ABtShZ1uEhBPE.roa
File: W6tbkok5l70Fj5ABtShZ1uEhBPE.roa (raw, json)
Hash identifier: wR+v/KcPrEP9Bk2bMniUx+L1vlCl1doFxmBxsjTLx2I=
Subject key identifier: 5B:AB:5B:92:89:39:97:BD:05:8F:90:01:B5:28:59:D6:E1:21:04:F1
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0182B185E38603FA8F07BA4ABF7050DF7DD5
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/W6tbkok5l70Fj5ABtShZ1uEhBPE.roa
Signing time: Thu 18 Aug 2022 15:15:17 +0000
ROA not before: Thu 18 Aug 2022 15:15:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207633
IP address blocks: 5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b1:85:e3:86:03:fa:8f:07:ba:4a:bf:70:50:df:7d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 18 15:15:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bab5b92893997bd058f9001b52859d6e12104f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:4a:ee:3b:84:66:db:fe:7d:93:93:3b:f7:
0b:e5:b5:0d:7d:f4:36:57:cd:8b:46:d0:a1:64:68:
c4:bb:55:03:b6:bf:82:45:ad:69:e3:ba:09:5d:9d:
9f:e7:c8:f8:8d:ee:25:cc:d4:49:34:3d:12:61:fe:
f1:48:0b:6d:aa:a6:85:f1:4a:5c:72:37:2d:1b:1b:
cb:90:5e:1e:ca:e3:91:70:49:aa:7f:2a:48:8b:9c:
0a:1a:54:3f:75:bb:52:0e:3f:02:83:6b:03:9e:40:
68:6f:fc:11:65:ed:37:75:9e:dd:ce:e6:48:de:9d:
1a:e3:e2:fa:08:d4:66:2b:59:06:e1:d3:e5:60:20:
12:f3:ad:d0:8d:fc:d1:69:13:43:d8:03:79:96:b0:
88:05:a4:24:07:02:9a:bb:c5:c6:f8:49:20:09:06:
76:35:58:80:5c:ad:44:c1:92:3d:d5:ce:5e:ac:3e:
a0:dd:7c:6e:41:04:db:f8:8d:41:a5:19:e0:d4:08:
ec:e6:a6:53:58:1e:99:ac:b0:4d:ad:54:ef:ca:0b:
e5:e0:df:be:3e:cf:07:55:c2:01:69:72:44:11:cd:
78:59:86:84:39:18:8f:67:8d:b8:e4:19:dc:69:c9:
15:1d:c7:ad:d0:ae:89:a8:3f:ea:ad:9e:92:70:c0:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:5B:92:89:39:97:BD:05:8F:90:01:B5:28:59:D6:E1:21:04:F1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/W6tbkok5l70Fj5ABtShZ1uEhBPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
Signature Algorithm: sha256WithRSAEncryption
88:28:c2:53:47:ae:52:6d:88:59:ae:f8:aa:ea:85:34:c4:cb:
78:d7:fe:06:bc:03:5b:4c:d7:d3:d6:e7:b9:1a:6b:12:cc:07:
ed:61:b1:60:8a:5d:9c:b9:4f:f4:48:ec:10:5a:74:9b:c6:c9:
dc:93:ec:b4:9b:ca:47:fd:1a:80:62:e7:58:56:e2:ae:03:4b:
86:49:4a:12:ec:73:80:98:54:02:57:9e:97:c2:b8:c0:d4:83:
82:52:23:3d:ab:f3:47:49:a5:7b:9d:60:61:ef:45:63:df:88:
ac:34:e6:1b:b5:76:1e:d2:31:d0:72:ab:ad:5e:dd:41:23:2f:
75:f9:4c:ed:29:94:1d:c6:b1:29:45:a2:9c:92:35:60:5d:e6:
5a:a6:44:56:25:b5:42:91:fd:6a:e0:d7:cd:b9:34:f6:e7:64:
da:d3:d9:9a:5c:0c:5b:21:b6:b6:f5:de:bc:cb:2f:1c:f3:a1:
c0:a6:62:64:31:41:91:7b:f3:25:7a:19:cc:30:a0:f8:b3:19:
2e:28:c4:e8:95:23:8b:ad:bc:e7:cc:02:ed:9d:4f:cb:72:7e:
1a:5f:07:28:0c:58:4b:2f:9e:c0:1f:e9:f6:35:3c:d9:19:3d:
5b:b3:c7:b5:1a:7e:a8:1d:1a:e3:d1:aa:a5:5c:1c:b6:c7:72:
5d:7b:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org