Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/i_S9-GVEUSkGbpgWNNs0NML0WM4.roa
File: i_S9-GVEUSkGbpgWNNs0NML0WM4.roa (raw, json)
Hash identifier: MmqpPWEmM1mP17BagiEBF5kCQwohbvAyMLYDAO8quZ0=
Subject key identifier: 8B:F4:BD:F8:65:44:51:29:06:6E:98:16:34:DB:34:34:C2:F4:58:CE
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188BE30B7CC909FE6D135C6FD7D0B1E67C3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/i_S9-GVEUSkGbpgWNNs0NML0WM4.roa
Signing time: Thu 15 Jun 2023 08:34:03 +0000
ROA not before: Thu 15 Jun 2023 08:34:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 5.105.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:30:b7:cc:90:9f:e6:d1:35:c6:fd:7d:0b:1e:67:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 15 08:34:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bf4bdf865445129066e981634db3434c2f458ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:31:d5:4a:c0:00:8e:10:6d:f6:ff:5c:7f:f6:
fa:ae:a6:44:3a:39:df:37:50:e2:00:0e:9b:47:0a:
74:a6:7b:f2:61:5f:26:da:e1:1f:05:8e:42:f0:30:
a2:36:7e:5d:91:ab:aa:e1:73:74:d6:2d:8e:05:2e:
94:dc:02:59:fc:c4:21:d1:99:c9:ac:b6:fb:00:31:
cb:fd:42:9f:f7:f0:fc:91:61:44:56:13:b7:dc:2f:
e2:bc:94:80:7e:0d:66:6a:60:ca:4b:b5:24:15:db:
a8:90:ec:43:62:b1:39:c8:9e:7f:72:a5:92:9a:12:
d4:d0:c3:7b:8c:b2:2e:58:37:66:61:3e:58:cc:22:
de:bc:31:19:5c:02:19:6c:be:7a:cc:96:6d:99:43:
8d:89:6d:91:63:07:e0:77:b6:81:8d:0f:2e:8f:53:
2e:93:f6:27:03:48:08:17:c3:8f:0a:28:ff:06:b2:
2b:d6:85:b7:4e:25:36:4f:3d:02:a8:f2:93:c7:9c:
51:34:b9:cc:bb:3b:c6:94:2f:46:57:e1:de:d9:08:
9c:a1:0f:4a:18:5b:12:1e:61:77:23:bf:d5:d8:40:
66:32:c3:9f:c3:62:75:19:2d:ad:c6:31:90:94:5f:
5b:95:84:be:6e:8b:3e:4a:15:67:c8:44:91:fc:52:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F4:BD:F8:65:44:51:29:06:6E:98:16:34:DB:34:34:C2:F4:58:CE
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/i_S9-GVEUSkGbpgWNNs0NML0WM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.68.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:bc:b1:e8:50:fe:9d:e3:0b:a8:1f:53:06:40:ee:58:40:a4:
13:ca:1f:e1:57:68:4d:e0:53:b4:a4:4c:33:93:c8:6c:0a:72:
a7:3a:ca:4e:59:6b:89:71:a7:b8:7f:14:5a:d5:69:de:87:45:
ee:3a:98:24:5f:b6:23:5f:07:13:34:64:8a:d5:13:d3:12:20:
48:6b:dc:7d:1e:96:89:f7:e0:88:ea:56:cb:a5:40:1e:4e:41:
b7:cd:ff:2d:fa:da:a7:aa:30:9d:e5:27:4e:c2:9a:7e:44:f9:
c0:8e:17:f1:ae:4e:45:70:c1:40:20:b7:fd:af:f8:37:1d:f2:
43:9b:08:2e:42:bd:39:37:71:30:75:26:b8:71:17:e9:19:ff:
89:e0:5f:51:39:6b:3a:68:90:61:7c:40:65:e4:72:74:20:33:
16:62:30:ab:c1:ae:b2:29:28:58:f7:bd:59:9e:1e:89:b4:1b:
36:d0:88:1f:e9:cb:76:cf:e0:99:d5:bb:c7:22:d6:79:94:83:
0a:b2:e5:c8:9c:67:96:05:2e:14:17:c8:1c:0f:ed:e5:e9:7e:
2d:a6:98:83:15:97:24:76:01:14:12:bb:f2:82:d2:11:56:6e:
72:6a:47:51:11:2f:27:bb:48:74:60:88:b2:ec:2c:3f:03:b7:
50:4c:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:53 2025 by rpki-client