Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_07pkrCGIyvHPhAYPcBmRYS4H_g.roa
File: _07pkrCGIyvHPhAYPcBmRYS4H_g.roa (raw, json)
Hash identifier: IcPH9RTMHPmOfH9brJrFepnS1bkbNEd7ZPV+k1mlPXA=
Subject key identifier: FF:4E:E9:92:B0:86:23:2B:C7:3E:10:18:3D:C0:66:45:84:B8:1F:F8
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01841AAEC1347448EA8BB8077877816B80D4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_07pkrCGIyvHPhAYPcBmRYS4H_g.roa
Signing time: Thu 27 Oct 2022 18:22:51 +0000
ROA not before: Thu 27 Oct 2022 18:22:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 5.105.119.0/24 maxlen: 24
5.105.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1a:ae:c1:34:74:48:ea:8b:b8:07:78:77:81:6b:80:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 27 18:22:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff4ee992b086232bc73e10183dc0664584b81ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:58:01:e8:b9:a9:c7:6f:a5:53:58:48:59:
96:93:e0:5f:92:c5:da:1d:e1:d9:1d:67:2c:49:ba:
f7:56:41:86:9a:5e:4c:2d:71:6c:db:03:99:dd:58:
f3:eb:87:63:a7:b4:fc:b3:e8:03:9a:ec:d8:ef:f5:
08:a6:44:09:e0:9e:05:10:0e:a6:97:da:89:58:ff:
6d:72:13:39:99:8a:18:94:0f:4f:ce:05:53:79:08:
e7:e6:6a:39:9d:8c:1d:37:ad:57:1b:d0:d9:f6:7d:
07:74:68:63:55:c3:ce:bf:10:1b:49:cb:0a:27:d4:
c6:68:9d:13:ad:bb:05:2b:e5:13:92:26:30:01:aa:
ea:57:2a:ca:f3:ab:ac:68:12:30:51:73:73:b7:2e:
ae:cd:79:be:ba:22:3b:0c:b0:3a:ea:a2:a0:ed:a2:
1e:0e:69:3b:c9:c8:7e:b6:41:65:ae:ac:49:cc:ab:
b1:2c:b6:0b:04:fe:d1:95:65:2d:b3:85:64:e9:0d:
09:64:5f:6c:78:c6:bb:f5:fc:2d:e6:85:80:43:80:
13:69:20:bb:92:1f:d6:43:ab:b4:30:c0:cd:13:0f:
6e:f9:e6:1a:64:4c:93:33:c4:bf:55:80:b2:1b:05:
40:97:2b:60:32:8a:09:a7:16:31:53:85:ec:72:cb:
63:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4E:E9:92:B0:86:23:2B:C7:3E:10:18:3D:C0:66:45:84:B8:1F:F8
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_07pkrCGIyvHPhAYPcBmRYS4H_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.119.0/24
5.105.121.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ea:58:6b:68:8b:bc:2c:63:bb:be:27:87:c0:8e:cb:38:80:
28:e0:52:93:a6:9d:e7:82:8b:a4:37:01:5f:5a:43:2a:52:96:
36:9b:9a:f4:01:42:c6:95:62:8f:5e:3c:f0:e0:fe:92:c8:5c:
f0:f8:e3:3a:d9:96:17:6e:1f:87:ca:8b:1f:ac:1b:d2:a8:1e:
92:0c:ca:22:9a:c6:54:33:e4:80:c7:a1:4d:72:69:74:8d:33:
27:3a:ba:33:0b:76:cc:0c:67:bf:c9:c1:42:fb:48:d3:f3:88:
48:f1:25:23:71:f8:5d:a5:90:34:fe:23:4b:2f:50:48:eb:8a:
21:2b:e5:89:2a:40:7c:eb:a6:00:51:93:c7:cf:20:6e:90:ba:
52:f8:6c:54:8c:65:30:b0:73:5b:be:c1:7f:27:46:f4:bf:5b:
45:78:4d:07:a8:42:6e:6c:68:fd:36:19:f9:37:7d:a3:7e:cc:
fe:3f:00:da:54:de:8d:db:24:21:c6:6e:f2:51:ce:22:c1:e0:
cf:3f:24:6d:cd:bb:b7:4f:ad:c3:fd:1e:8f:de:d0:88:f4:9e:
9f:6b:15:41:2f:7e:e0:78:e6:27:18:04:90:3b:c8:c1:3f:27:
26:38:c7:c3:74:94:f1:24:e3:24:36:17:82:13:33:bf:39:c2:
e3:ff:01:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org