Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/gbEwdw3HhHZFVTPr60I_7ILXhT4.roa
File: gbEwdw3HhHZFVTPr60I_7ILXhT4.roa (raw, json)
Hash identifier: oU5AwB7hWntWQzFPQeY3TKGhQXDEddU0zE8c5Se3TeI=
Subject key identifier: 81:B1:30:77:0D:C7:84:76:45:55:33:EB:EB:42:3F:EC:82:D7:85:3E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01831C0B8BAF86827CD1F12219ABFCE12A14
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/gbEwdw3HhHZFVTPr60I_7ILXhT4.roa
Signing time: Thu 08 Sep 2022 07:41:01 +0000
ROA not before: Thu 08 Sep 2022 07:41:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 5.105.253.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:0b:8b:af:86:82:7c:d1:f1:22:19:ab:fc:e1:2a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 8 07:41:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81b130770dc78476455533ebeb423fec82d7853e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:3a:2b:20:76:4b:fb:b9:ef:42:78:66:51:
67:ff:96:9b:b8:28:26:09:ad:b9:1f:ec:be:36:69:
0d:75:94:b9:aa:1a:10:be:60:b2:24:9e:1a:f0:b2:
dc:b4:26:20:f0:6e:d7:c3:f1:21:12:25:b3:4c:df:
d4:1e:36:a8:33:4a:e0:02:b7:32:85:be:4a:49:d2:
fa:4b:00:30:1c:3e:b4:d4:51:d2:e0:11:1b:e8:69:
11:ab:3c:2f:1b:c9:c6:29:f3:d1:f0:c1:ee:d1:cd:
29:17:fc:b6:ea:84:b6:5c:22:d7:0f:10:83:7d:1a:
0f:04:41:a0:57:f5:98:6e:06:6a:8e:f8:9c:3a:03:
07:55:39:3d:70:ec:42:b1:b5:06:5e:24:83:4c:b0:
1c:b4:fd:73:91:6d:52:20:05:2f:ec:42:9e:0c:16:
de:38:db:3c:53:06:90:18:7e:d5:17:78:95:ab:01:
43:a5:98:16:42:f9:f7:a1:d7:18:2d:78:6c:a2:10:
c0:b4:d5:5e:24:50:db:ec:22:b4:7d:d3:f5:e4:b3:
0a:8f:c6:f3:4b:75:da:ef:0b:d3:ec:5d:bb:41:cd:
de:a7:1f:d6:15:db:82:f6:66:dc:18:8a:b0:a2:34:
72:2a:c5:9a:78:c8:ca:77:fc:82:48:db:b1:c3:96:
32:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B1:30:77:0D:C7:84:76:45:55:33:EB:EB:42:3F:EC:82:D7:85:3E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/gbEwdw3HhHZFVTPr60I_7ILXhT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.253.0/24
Signature Algorithm: sha256WithRSAEncryption
37:af:7c:65:db:5f:29:b6:94:10:6f:6c:f7:08:e6:54:5e:0d:
12:33:0e:91:2a:69:e9:01:3f:18:32:b5:25:ff:80:bc:ea:19:
ac:42:b9:0d:41:a7:52:87:ae:f5:51:48:31:01:cc:29:ab:05:
34:16:95:91:9c:4a:72:12:49:82:49:13:96:f0:be:a2:51:29:
20:a3:22:bf:79:fb:dd:4a:ab:f5:77:c9:a2:99:89:b4:42:ed:
15:51:7f:5c:d9:41:22:4c:bb:8d:37:90:a8:06:9f:2b:99:f9:
58:3b:98:ee:3d:ee:f8:a9:4b:54:0d:98:ca:4b:8f:18:53:34:
b8:a0:47:b1:fd:b1:a6:d6:3e:60:cd:6c:1b:a7:98:25:cd:1d:
98:19:d3:82:83:13:70:c6:8e:0a:0c:30:8f:25:ca:b2:16:60:
49:55:77:15:f7:1a:53:68:26:a3:fc:15:ac:32:7b:75:39:a1:
73:29:ea:df:79:1c:3b:e7:f1:30:bc:7d:ab:8f:01:3e:dc:d5:
04:97:04:1c:45:fd:3a:d8:f3:1d:67:59:1d:e0:25:7d:ea:74:
66:b7:f7:29:35:b1:ad:f3:73:ca:89:b7:90:90:a2:bb:fc:14:
f4:ca:87:bd:41:d5:71:46:4e:6a:5a:10:09:36:ce:6e:32:8f:
17:4c:8f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org