Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/bl_3dwuRFCnoetrrSBsJHmzIQQw.roa
File: bl_3dwuRFCnoetrrSBsJHmzIQQw.roa (raw, json)
Hash identifier: RZGBkARG/9J9Bt/C/mDG34dCU1Uzq48ygu3/7qAbsgo=
Subject key identifier: 6E:5F:F7:77:0B:91:14:29:E8:7A:DA:EB:48:1B:09:1E:6C:C8:41:0C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183F6F06A9098A85EE01EDC08644070100A
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/bl_3dwuRFCnoetrrSBsJHmzIQQw.roa
Signing time: Thu 20 Oct 2022 19:48:14 +0000
ROA not before: Thu 20 Oct 2022 19:48:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 5.105.119.0/24 maxlen: 24
5.105.121.0/24 maxlen: 24
5.105.93.0/24 maxlen: 24
5.105.211.0/24 maxlen: 24
5.105.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:f0:6a:90:98:a8:5e:e0:1e:dc:08:64:40:70:10:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 20 19:48:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e5ff7770b911429e87adaeb481b091e6cc8410c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:95:f8:d0:7d:5b:34:a4:80:c9:64:21:ab:
d6:61:a9:8e:d6:fa:07:ae:51:f6:a9:bc:35:38:f9:
29:a1:70:7c:5f:b3:41:55:11:1e:ef:00:72:ee:52:
0f:44:5f:85:fc:48:3e:a3:08:b0:78:28:70:d0:35:
16:b0:a0:0d:70:28:51:a0:b0:d7:37:33:47:bb:50:
d8:93:7f:8d:04:58:be:cf:87:b7:a2:36:ba:2c:e9:
75:b6:41:a6:9a:9a:dd:62:5e:e9:bf:b6:0a:25:eb:
08:cb:c5:3c:5a:20:cc:ce:fb:92:5a:85:1d:72:3f:
53:3f:a8:54:bf:79:87:39:4d:63:36:00:b8:21:56:
16:9c:d1:37:51:07:21:c4:dd:04:b4:a0:da:de:50:
48:a9:e0:a8:48:e5:c4:e5:13:ae:b3:08:fb:1e:7c:
54:de:75:7d:06:ea:b9:1f:eb:cf:1e:ee:5b:93:14:
0c:c7:44:88:48:ef:18:59:5b:3c:e2:c4:18:66:63:
1b:27:d5:cc:48:a5:73:1f:45:85:f2:06:23:16:01:
2b:3c:a7:5a:bc:d1:88:ce:aa:3f:0b:5a:35:81:4f:
2a:82:46:59:65:be:a9:72:52:dc:0d:a5:bd:a4:6f:
91:80:36:45:d6:ec:b6:67:e3:4b:43:b1:d3:95:be:
37:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5F:F7:77:0B:91:14:29:E8:7A:DA:EB:48:1B:09:1E:6C:C8:41:0C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/bl_3dwuRFCnoetrrSBsJHmzIQQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.93.0/24
5.105.116.0/24
5.105.119.0/24
5.105.121.0/24
5.105.211.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ef:92:e4:18:05:40:bb:12:de:0d:a7:5f:eb:7a:63:10:a9:
56:d9:a4:65:e2:d9:39:f0:db:83:a4:f4:6d:24:ee:92:32:ec:
0e:5d:28:50:54:34:10:d4:43:9d:41:29:ce:7f:06:d6:c7:7b:
74:b5:20:36:5c:b3:bf:d6:41:c7:39:a7:cc:d1:a1:d1:bc:f4:
c8:87:a6:17:2d:45:11:b5:90:aa:c6:25:7f:9d:63:7d:67:f0:
3c:ae:b1:de:48:09:2c:64:73:b5:40:36:a3:26:f2:92:ce:03:
79:e5:bf:65:3e:f5:eb:ca:c5:bf:1a:83:14:7a:c2:d0:d6:1c:
5d:28:f9:a9:9b:79:75:fa:77:8d:49:c4:fa:e0:90:d8:c7:c3:
ed:72:2c:82:91:ad:76:b5:8d:49:16:c2:cc:5c:f5:13:f1:56:
e3:ca:d6:46:2e:a1:d1:93:99:90:a0:c4:d9:e8:b1:0f:ff:e6:
5c:64:3c:77:5e:8b:aa:34:6e:14:45:ca:4b:2b:85:83:f0:f9:
e6:f7:2c:75:39:4c:ab:dc:bb:66:12:69:0d:75:26:6b:58:df:
e5:7a:89:01:04:84:fc:7e:03:9b:d5:cf:3f:4a:f2:9a:ef:54:
ca:47:e8:ba:ed:b5:6f:bf:05:9a:6e:23:ca:dd:a7:6f:c0:da:
18:22:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:51 2025 by rpki-client