Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ftkNXxJD1DusXreVV8UU0gINFl8.roa
File: ftkNXxJD1DusXreVV8UU0gINFl8.roa (raw, json)
Hash identifier: 9stlJy273rBIzZCqBJllqP/hJ8+Ra41TzMPRQcy3JXw=
Subject key identifier: 7E:D9:0D:5F:12:43:D4:3B:AC:5E:B7:95:57:C5:14:D2:02:0D:16:5F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01850B7C9A1D05B902C99273A81249253A74
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ftkNXxJD1DusXreVV8UU0gINFl8.roa
Signing time: Tue 13 Dec 2022 12:36:33 +0000
ROA not before: Tue 13 Dec 2022 12:36:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 5.105.228.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:7c:9a:1d:05:b9:02:c9:92:73:a8:12:49:25:3a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 13 12:36:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ed90d5f1243d43bac5eb79557c514d2020d165f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8d:9f:93:7b:1c:5c:9b:7b:59:39:48:4f:42:
a1:89:35:b8:e5:b6:52:96:10:61:05:1a:96:60:27:
f2:f6:2b:6f:bf:2b:f8:65:79:f7:0e:2c:88:f2:99:
c3:3f:e6:22:0e:eb:28:41:2f:f4:a1:27:06:84:a3:
83:fa:b8:94:90:f5:85:53:e1:0d:bc:97:4f:37:4a:
1c:dd:e2:9b:7e:8c:9a:ec:88:74:fd:27:99:be:1b:
0a:c9:1f:a2:e8:44:04:57:b0:e0:f8:9f:3b:bc:7e:
46:00:70:b0:19:df:8f:4f:a8:7c:2e:34:b4:21:f5:
cb:db:46:9f:32:25:45:11:68:02:c7:4e:e4:40:b1:
14:e9:6f:95:93:0e:52:62:dc:87:48:cc:a0:40:59:
1f:32:31:f1:b6:a0:ad:cb:d5:64:3d:cc:09:7f:ea:
a2:cb:cc:61:e8:3d:e8:4c:54:85:0b:26:e9:fa:8b:
9a:d7:7d:2a:05:fe:7c:29:db:3f:9f:32:d2:af:f4:
75:81:e2:7e:0b:02:b0:23:2f:b8:15:e6:5a:e3:44:
52:c2:bb:e7:42:db:34:0f:c9:75:a4:41:73:d6:34:
ff:85:61:6b:1f:1e:d7:91:f8:dc:40:c6:df:09:28:
3d:cc:a6:23:44:93:28:d4:f5:e1:97:b0:de:0b:3a:
7a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D9:0D:5F:12:43:D4:3B:AC:5E:B7:95:57:C5:14:D2:02:0D:16:5F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ftkNXxJD1DusXreVV8UU0gINFl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.51.0/24
5.105.66.0/24
5.105.118.0/24
5.105.169.0/24
5.105.228.0/24
Signature Algorithm: sha256WithRSAEncryption
67:30:81:a7:9b:84:45:31:c5:a2:3c:b3:12:9a:09:e9:77:d3:
71:4e:00:1a:95:3a:7b:b1:6c:0b:c0:d4:1d:81:07:be:f5:77:
a3:ad:db:6b:7c:d3:f3:de:a4:ca:13:2c:01:53:31:a2:3c:53:
d3:98:64:92:cf:e6:12:11:dc:51:36:e7:98:71:cb:97:41:ec:
27:b7:19:6f:21:79:11:3d:fb:fb:c5:8f:5b:b5:39:ab:97:43:
3a:b2:e7:ae:f2:c1:3f:09:e9:08:ff:95:36:83:f3:4c:08:0d:
00:57:cd:53:3c:eb:1a:62:af:6e:78:66:39:d1:43:50:da:57:
a1:9b:17:fa:10:e2:00:c8:c5:55:9a:4c:f7:b3:26:3f:e2:5d:
ee:68:81:ce:9f:30:dc:5f:9c:cf:83:83:87:c8:d9:c2:6a:87:
92:f6:e7:82:78:d2:cc:7b:c9:a5:77:c8:07:a4:83:e7:99:9c:
95:9d:32:2b:9e:b6:58:31:57:db:d2:cd:22:3f:28:9e:ea:7d:
6d:d6:73:1e:bc:c5:72:bb:81:8c:58:c9:bf:93:17:dc:64:15:
2b:09:fc:2e:8e:5f:69:18:15:0f:79:ce:e8:90:ca:e3:dc:fa:
ec:13:8a:cb:07:b5:07:9b:65:cd:36:88:77:99:aa:6a:b8:f6:
f1:d5:d6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org