Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XYGtvxh0qIy-ko8pJrKq5VsORE4.roa
File: XYGtvxh0qIy-ko8pJrKq5VsORE4.roa (raw, json)
Hash identifier: KXIDCt/4AYFwoUPn9oSukCX7jWuSSidZaVXk2H3kzAY=
Subject key identifier: 5D:81:AD:BF:18:74:A8:8C:BE:92:8F:29:26:B2:AA:E5:5B:0E:44:4E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183A853E37CB99972445D2ECB741CC9C9DB
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XYGtvxh0qIy-ko8pJrKq5VsORE4.roa
Signing time: Wed 05 Oct 2022 13:26:53 +0000
ROA not before: Wed 05 Oct 2022 13:26:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 5.105.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:53:e3:7c:b9:99:72:44:5d:2e:cb:74:1c:c9:c9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 5 13:26:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d81adbf1874a88cbe928f2926b2aae55b0e444e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:ba:c8:94:04:b0:97:0d:99:b2:49:e0:72:
ae:11:d5:cc:44:7b:3c:4f:ee:06:ce:94:3e:44:c6:
05:cd:07:e4:f7:ec:e9:c9:69:85:8b:5e:5f:34:02:
a6:08:1e:3b:59:f8:23:d9:95:24:da:ce:77:c7:fe:
64:65:7e:a1:17:16:c8:93:f3:58:60:26:c8:2b:2b:
d3:8b:68:85:0d:c8:5e:f6:da:bb:f2:76:36:f3:69:
ef:18:3f:72:56:9f:1f:1c:80:6b:47:ad:c7:57:4b:
57:27:79:91:33:24:82:ee:8b:56:03:d9:2b:1a:09:
40:ba:8a:5b:b0:7e:60:71:0b:b6:c7:9d:80:7f:3b:
ea:8a:89:49:7a:7e:99:f5:03:b9:fc:1c:f8:ed:38:
2a:87:e2:cf:f8:59:ed:dc:6e:14:76:8c:03:f1:00:
6f:e1:59:d2:e9:86:d1:15:1e:85:1d:61:d1:0d:8f:
b7:60:f8:77:38:95:8d:01:f5:f7:3c:0c:90:85:6e:
b2:ce:83:25:e1:8b:d0:70:03:a4:1b:cf:fe:22:05:
7f:3a:9f:00:d2:c1:fd:a2:1d:2c:8e:38:1a:c1:71:
b5:18:88:00:b3:a7:d8:99:89:8b:c8:80:41:f6:fb:
15:dc:b5:a6:9a:e8:3c:8e:4b:9e:25:5a:1f:c9:cd:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:81:AD:BF:18:74:A8:8C:BE:92:8F:29:26:B2:AA:E5:5B:0E:44:4E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XYGtvxh0qIy-ko8pJrKq5VsORE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.104.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:47:14:5a:fc:32:09:9a:96:ad:7c:5b:c6:e5:01:d4:ae:24:
dc:87:d0:43:c6:7d:c9:61:42:e9:38:12:fc:72:2d:40:94:50:
54:5a:52:35:f1:81:30:0d:3e:c0:39:f4:fc:b4:85:ba:70:ac:
16:ce:b4:79:2e:22:f9:90:3a:4e:51:f4:21:55:5f:b2:4a:d0:
d4:f8:5d:00:75:1d:cf:10:24:8b:fe:35:b8:92:07:e6:bd:93:
f2:d7:4f:ee:6e:b5:8c:af:b7:93:3a:4e:60:d0:64:91:69:f0:
87:16:2b:fc:98:fb:a0:99:b2:df:8c:d9:aa:73:0e:17:b3:63:
f8:a9:c0:48:e5:e7:45:81:d9:36:c1:ec:07:92:6d:47:49:f6:
70:db:62:1a:35:81:34:0d:75:f6:af:c4:3d:bd:7e:dc:a0:db:
a2:e2:3f:f2:1b:dd:98:09:ea:27:90:4c:41:e2:63:39:8b:c9:
29:ab:79:76:4f:c3:3e:9f:f6:40:49:c2:94:f3:7c:6e:1d:21:
3e:94:34:2b:0a:35:5a:62:dc:89:4a:20:f7:2b:aa:8b:96:9e:
93:4e:5a:52:de:64:b8:1a:98:cd:9c:8c:df:98:3b:22:2d:99:
30:83:6e:f8:f8:09:91:c2:e4:9e:33:f4:c1:05:24:1f:8c:57:
d8:29:ab:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOoU+N8uZlyRF0uy3QcycnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjIxMDA1MTMyNjUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDgxYWRiZjE4NzRhODhjYmU5MjhmMjkyNmIyYWFlNTViMGU0NDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcS6yJQEsJcNmbJJ4HKuEdXMRHs8
T+4GzpQ+RMYFzQfk9+zpyWmFi15fNAKmCB47Wfgj2ZUk2s53x/5kZX6hFxbIk/NY
YCbIKyvTi2iFDche9tq78nY282nvGD9yVp8fHIBrR63HV0tXJ3mRMySC7otWA9kr
GglAuopbsH5gcQu2x52AfzvqiolJen6Z9QO5/Bz47Tgqh+LP+Fnt3G4UdowD8QBv
4VnS6YbRFR6FHWHRDY+3YPh3OJWNAfX3PAyQhW6yzoMl4YvQcAOkG8/+IgV/Op8A
0sH9oh0sjjgawXG1GIgAs6fYmYmLyIBB9vsV3LWmmug8jkueJVofyc3BywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF2Brb8YdKiMvpKPKSayquVbDkROMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvWFlHdHZ4aDBxSXkta284cEpyS3E1VnNPUkU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWloMA0G
CSqGSIb3DQEBCwUAA4IBAQDKRxRa/DIJmpatfFvG5QHUriTch9BDxn3JYULpOBL8
ci1AlFBUWlI18YEwDT7AOfT8tIW6cKwWzrR5LiL5kDpOUfQhVV+yStDU+F0AdR3P
ECSL/jW4kgfmvZPy10/ubrWMr7eTOk5g0GSRafCHFiv8mPugmbLfjNmqcw4Xs2P4
qcBI5edFgdk2wewHkm1HSfZw22IaNYE0DXX2r8Q9vX7coNui4j/yG92YCeonkExB
4mM5i8kpq3l2T8M+n/ZAScKU83xuHSE+lDQrCjVaYtyJSiD3K6qLlp6TTlpS3mS4
GpjNnIzfmDsiLZkwg274+AmRwuSeM/TBBSQfjFfYKasz
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org