Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/bfGDI7I6tCaLMYpIFRdtMplexwA.roa
File: bfGDI7I6tCaLMYpIFRdtMplexwA.roa (raw, json)
Hash identifier: KTFEiZet8DG8rhOdl4B1Nznj5U9RZQt/YkRV2KbL8oI=
Subject key identifier: 6D:F1:83:23:B2:3A:B4:26:8B:31:8A:48:15:17:6D:32:99:5E:C7:00
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01846773A5E124A9AE4BE053533C7DAA37E9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/bfGDI7I6tCaLMYpIFRdtMplexwA.roa
Signing time: Fri 11 Nov 2022 16:09:03 +0000
ROA not before: Fri 11 Nov 2022 16:09:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210388
IP address blocks: 5.105.18.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:67:73:a5:e1:24:a9:ae:4b:e0:53:53:3c:7d:aa:37:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 11 16:09:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6df18323b23ab4268b318a4815176d32995ec700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9f:7e:09:d3:bb:bb:8e:28:99:f6:2b:30:05:
ef:75:0f:ea:98:56:99:af:9e:08:a9:a4:a1:4b:55:
dd:98:d9:59:a2:7c:c9:82:ce:6a:b0:d2:0f:1f:1c:
23:9c:cd:4e:c0:a5:65:e6:10:d2:91:45:4e:ec:a0:
63:b8:e6:d5:c6:5e:66:a0:59:1f:11:32:26:3c:c2:
9f:22:cd:8f:2e:20:62:01:03:21:40:47:36:49:07:
57:65:ad:cb:fc:5e:fa:79:7e:ea:6f:6c:6b:d7:28:
fb:c6:ef:3d:d8:08:34:b7:e0:76:4e:9e:58:31:ad:
06:d2:25:6d:da:2f:92:80:9d:5f:4f:b8:44:50:1a:
69:6e:6e:19:15:7e:85:28:28:56:3b:4f:c8:53:6c:
1b:29:b2:10:2b:82:6b:04:9f:47:48:45:a2:21:d8:
af:81:51:51:bd:4e:3b:1f:a3:93:a1:e4:05:da:40:
6f:03:fe:a4:fb:65:92:b0:28:85:cc:6c:b0:ed:be:
98:ef:12:14:d7:c2:3a:c1:7b:f5:e4:f3:b8:ac:86:
b6:e2:2e:a5:d5:13:93:9d:5d:58:f2:76:e6:a1:9c:
56:4e:25:80:c4:39:5e:16:c4:e3:8b:67:99:1e:3e:
c3:a8:2e:30:87:ee:bf:2f:a2:08:e5:63:29:0d:b5:
73:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:83:23:B2:3A:B4:26:8B:31:8A:48:15:17:6D:32:99:5E:C7:00
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/bfGDI7I6tCaLMYpIFRdtMplexwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.4.0/24
5.105.18.0/23
5.105.40.0/24
5.105.49.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:de:64:7d:76:cb:66:04:03:00:eb:4f:e3:23:ec:a6:5d:02:
e0:ee:c4:45:8e:37:c2:e4:c8:fc:1b:d3:48:ff:16:97:ee:c4:
65:60:d4:4d:58:a6:db:17:4d:8f:08:3b:53:4a:3b:72:b6:91:
5a:7e:98:7c:3a:5b:98:76:44:be:e7:39:67:83:d1:38:d0:7d:
9c:06:0b:db:b7:ef:fa:52:f7:7c:b0:2b:48:f9:b9:10:0f:16:
c0:3e:bb:40:96:87:1d:b6:88:8d:5b:5d:0a:67:6f:e9:45:0b:
7b:0d:60:36:f3:85:fc:a2:e5:3a:b8:5b:a9:3b:2e:22:b9:c8:
4e:67:ab:fc:5e:02:58:b5:b1:18:b4:e7:9c:ac:07:20:a5:cc:
f1:b4:f6:5e:be:a9:23:5e:d8:64:91:89:e0:a8:e8:28:92:e4:
1a:ec:ee:1a:40:35:c8:fd:aa:e8:ff:71:b8:92:91:a8:0c:55:
b6:a7:77:52:45:d6:f8:4c:65:d0:12:4b:d3:fd:17:b9:01:77:
1b:1f:8e:a5:ae:a7:15:09:21:db:05:23:62:c4:ef:9a:d4:e8:
b7:fb:17:e9:94:7e:f7:3e:a1:12:6c:dc:a8:5c:7d:5f:8c:68:
cb:05:90:60:92:26:91:8f:d7:67:de:31:cc:81:db:30:b6:bc:
29:5f:d4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org