Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/iHbgBKign74oTztNzw8S6i51on4.roa
File: iHbgBKign74oTztNzw8S6i51on4.roa (raw, json)
Hash identifier: 7iF/tvlQrikJfpZpqVD8Bks4C9UjQFKcy9RRP0fuSzc=
Subject key identifier: 88:76:E0:04:A8:A0:9F:BE:28:4F:3B:4D:CF:0F:12:EA:2E:75:A2:7E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183EB8DF6C828FC413325580F60985F6370
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/iHbgBKign74oTztNzw8S6i51on4.roa
Signing time: Tue 18 Oct 2022 14:44:52 +0000
ROA not before: Tue 18 Oct 2022 14:44:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 5.105.185.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:8d:f6:c8:28:fc:41:33:25:58:0f:60:98:5f:63:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 18 14:44:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8876e004a8a09fbe284f3b4dcf0f12ea2e75a27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:75:8c:36:e0:47:7f:96:17:e1:ca:a7:b0:
f0:ff:68:66:7c:5b:af:b1:e7:c3:66:d4:67:ad:e3:
a5:2a:20:16:2c:2c:f3:c6:90:15:47:4a:a7:51:8b:
59:0e:b5:77:4b:4a:b8:ab:05:b6:30:f7:33:74:5b:
cc:21:ba:ac:13:d8:41:e0:32:57:a2:ba:36:fc:e2:
fc:13:3b:5f:ac:96:a5:a4:e2:1e:dc:a4:3c:86:bb:
72:be:83:09:15:0f:ea:c7:15:cc:88:f7:eb:ca:fd:
43:d6:61:be:c9:40:1f:8e:43:32:1d:72:1b:e8:87:
ef:55:a7:c0:25:01:52:86:09:e8:e2:50:14:05:43:
fc:98:6a:7d:f2:03:50:cf:20:f7:b5:3a:34:e7:5a:
e2:7e:9a:ad:de:4e:97:04:74:a8:df:86:7e:bb:fe:
2a:76:d2:fc:ea:62:18:8f:ae:ce:97:11:8a:3a:e1:
ee:60:75:1a:34:20:43:52:2b:ed:f0:34:44:9d:5f:
d5:61:0b:ff:f4:ff:d9:78:9b:5f:d5:4c:10:42:3e:
c7:48:a6:5c:c3:f3:0d:25:72:18:f9:eb:56:7f:39:
57:0b:b8:64:20:1e:a3:23:f2:5a:b9:cf:27:20:5e:
5e:69:56:60:ca:3b:9b:a5:62:c3:59:10:db:83:d1:
f7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:76:E0:04:A8:A0:9F:BE:28:4F:3B:4D:CF:0F:12:EA:2E:75:A2:7E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/iHbgBKign74oTztNzw8S6i51on4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.108.0/24
5.105.185.0/24
Signature Algorithm: sha256WithRSAEncryption
17:01:10:bf:a2:47:6c:e7:94:46:f6:4d:42:b5:4a:8e:f1:12:
28:fc:da:66:02:93:2a:3f:74:60:a4:8a:35:3e:b4:e9:f5:fc:
3f:3e:43:f2:49:c6:dd:14:ef:d4:ea:05:ce:17:e4:98:f6:c7:
c2:f3:e2:c5:06:49:2f:b0:ae:c4:e0:65:54:1e:63:5b:2d:f4:
87:9a:68:7c:5e:b2:16:93:37:9b:56:ce:47:8c:13:51:6e:9d:
47:9f:5e:23:5e:df:4e:6e:f3:79:20:ec:f8:d3:f0:5c:c0:e8:
47:30:bb:11:6e:1b:72:60:16:ef:3f:63:f2:e8:c8:d4:43:54:
2c:0e:a8:0a:07:28:7e:6c:fc:de:bb:1e:e1:d2:19:83:b9:10:
72:9f:7c:d5:25:5d:59:93:17:64:c0:70:80:ab:d9:e9:0a:11:
4a:42:fd:36:b9:59:95:32:28:02:0b:66:34:ef:02:ac:b6:89:
3f:71:7a:7b:6b:31:a3:32:73:3d:47:48:33:71:f6:86:7c:0a:
4b:c6:8e:41:40:6b:df:df:69:73:de:c3:1f:92:b0:7a:a4:38:
60:0c:4e:42:0e:13:8e:b9:99:ec:57:36:4c:54:3e:32:9a:f0:
f7:b0:a6:52:86:3a:7f:a1:da:88:d6:89:bb:64:55:d6:36:23:
08:9f:08:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org