Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dPPwKUnEqAx67qntGoKwZiWf_C4.roa
File: dPPwKUnEqAx67qntGoKwZiWf_C4.roa (raw, json)
Hash identifier: LY2Ph+/GVRySyqdFFHxQT+X6hhjRDHtD8dpoOVgVkQU=
Subject key identifier: 74:F3:F0:29:49:C4:A8:0C:7A:EE:A9:ED:1A:82:B0:66:25:9F:FC:2E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018408D81CFDB3AC2FFA346DB471C2082238
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dPPwKUnEqAx67qntGoKwZiWf_C4.roa
Signing time: Mon 24 Oct 2022 07:14:51 +0000
ROA not before: Mon 24 Oct 2022 07:14:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:08:d8:1c:fd:b3:ac:2f:fa:34:6d:b4:71:c2:08:22:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 24 07:14:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74f3f02949c4a80c7aeea9ed1a82b066259ffc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:c5:2b:a6:2f:ed:4c:21:ed:fb:82:da:30:
71:fa:6a:d8:79:71:5d:3e:07:f6:52:59:1f:a0:ef:
af:50:ac:3f:fa:24:27:34:1f:5b:44:a8:17:03:f9:
3a:90:d7:68:68:db:49:26:5d:fd:f4:1d:46:21:27:
6e:ee:48:62:6a:c1:fe:99:65:92:b5:8a:5b:ab:da:
8a:68:8e:2f:6b:3d:69:0e:d1:fc:53:19:3f:17:71:
17:e9:1b:af:0e:c2:b1:9f:60:15:8c:d6:2c:61:8e:
4f:a3:a8:25:d1:ff:b2:ef:83:0e:e6:fb:da:c3:ed:
a2:29:80:95:d6:a1:8d:9a:24:60:30:35:02:7a:b3:
33:58:d7:cc:37:d3:50:51:e3:f9:f1:ae:b2:3a:12:
fa:fb:22:a4:13:0f:2a:b0:07:65:f6:a8:64:b5:3b:
39:e9:8e:b2:3d:fe:9c:20:f5:39:80:8d:5c:c2:85:
77:5d:9d:36:fd:23:07:26:e6:39:26:26:04:ff:17:
de:6e:2a:26:c9:1a:75:d3:71:e7:54:59:11:a3:9b:
36:27:c6:f8:98:73:d3:07:ab:b8:81:11:69:76:07:
5f:d9:04:c1:c6:01:08:b3:98:c3:1d:91:18:68:07:
3e:b9:a4:4f:cb:ac:4e:15:04:04:80:93:b5:56:98:
ad:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F3:F0:29:49:C4:A8:0C:7A:EE:A9:ED:1A:82:B0:66:25:9F:FC:2E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dPPwKUnEqAx67qntGoKwZiWf_C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.79.0/24
5.105.95.0/24
5.105.118.0/24
5.105.122.0/24
5.105.228.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:93:4f:c5:5a:07:db:82:dc:8b:a5:43:22:a8:49:8f:d1:e1:
d6:97:08:02:3f:ad:27:a6:df:2f:cf:5c:6f:43:1b:dc:e5:cc:
95:f7:10:df:14:65:fe:5b:76:c8:3b:42:90:98:6c:40:29:09:
db:6d:00:cd:3c:27:7c:95:a3:29:49:de:c7:6c:14:47:0e:06:
1c:6d:82:f1:64:4b:84:c0:ae:9e:6d:fc:07:4d:7f:2e:1f:ab:
12:45:40:54:49:bf:7a:92:47:15:c8:42:7b:5c:48:8f:5c:47:
55:49:fe:92:62:c2:ad:d7:d6:a4:68:12:7b:ca:6a:cb:eb:f5:
f4:1e:65:2a:c3:7c:d6:80:52:2c:c5:c1:18:1a:7a:a0:c0:0d:
8b:03:1d:57:58:1d:03:ca:f8:a7:87:ad:01:9c:8f:3c:b3:11:
cf:e6:6f:dc:d8:47:35:a6:bf:a4:3b:9e:fa:45:85:47:52:67:
19:f0:68:07:1e:83:1b:11:5d:55:aa:c2:f1:e4:ef:fb:12:98:
3f:64:ae:0a:b4:f8:35:8e:78:cf:04:1a:c4:dd:2b:8a:7a:ee:
2e:e1:3c:eb:48:62:a1:b6:e4:9f:7d:0a:c6:3a:40:45:79:8d:
36:73:37:c1:87:4c:c6:3b:77:77:39:5e:d1:55:3a:b6:4a:cf:
75:9a:ce:b8
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYQI2Bz9s6wv+jRttHHCCCI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjIxMDI0MDcxNDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGYzZjAyOTQ5YzRhODBjN2FlZWE5ZWQxYTgyYjA2NjI1OWZmYzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYLFK6Yv7Uwh7fuC2jBx+mrYeXFd
Pgf2UlkfoO+vUKw/+iQnNB9bRKgXA/k6kNdoaNtJJl399B1GISdu7khiasH+mWWS
tYpbq9qKaI4vaz1pDtH8Uxk/F3EX6RuvDsKxn2AVjNYsYY5Po6gl0f+y74MO5vva
w+2iKYCV1qGNmiRgMDUCerMzWNfMN9NQUeP58a6yOhL6+yKkEw8qsAdl9qhktTs5
6Y6yPf6cIPU5gI1cwoV3XZ02/SMHJuY5JiYE/xfebiomyRp103HnVFkRo5s2J8b4
mHPTB6u4gRFpdgdf2QTBxgEIs5jDHZEYaAc+uaRPy6xOFQQEgJO1VpitmQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHTz8ClJxKgMeu6p7RqCsGYln/wuMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvZFBQd0tVbkVxQXg2N3FudEdvS3daaVdmX0M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABWlPAwQA
BWlfAwQABWl2AwQABWl6AwQABWnkMA0GCSqGSIb3DQEBCwUAA4IBAQCKk0/FWgfb
gtyLpUMiqEmP0eHWlwgCP60npt8vz1xvQxvc5cyV9xDfFGX+W3bIO0KQmGxAKQnb
bQDNPCd8laMpSd7HbBRHDgYcbYLxZEuEwK6ebfwHTX8uH6sSRUBUSb96kkcVyEJ7
XEiPXEdVSf6SYsKt19akaBJ7ymrL6/X0HmUqw3zWgFIsxcEYGnqgwA2LAx1XWB0D
yvinh60BnI88sxHP5m/c2Ec1pr+kO576RYVHUmcZ8GgHHoMbEV1VqsLx5O/7Epg/
ZK4KtPg1jnjPBBrE3SuKeu4u4TzrSGKhtuSffQrGOkBFeY02czfBh0zGO3d3OV7R
VTq2Ss91ms64
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org