Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/j_tjBvOfkuZIKMK3uYFGamZiH7c.roa
File: j_tjBvOfkuZIKMK3uYFGamZiH7c.roa (raw, json)
Hash identifier: qQdPh1nmZB9pYxBegZCd25ckoRIxJkLPhakZUIw9D0Q=
Subject key identifier: 8F:FB:63:06:F3:9F:92:E6:48:28:C2:B7:B9:81:46:6A:66:62:1F:B7
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183FB059B5AFD7EEACB9AA2531D9ABA485C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/j_tjBvOfkuZIKMK3uYFGamZiH7c.roa
Signing time: Fri 21 Oct 2022 14:49:52 +0000
ROA not before: Fri 21 Oct 2022 14:49:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15083
IP address blocks: 5.105.231.0/24 maxlen: 24
5.105.128.0/24 maxlen: 24
5.105.237.0/24 maxlen: 24
5.105.246.0/24 maxlen: 24
5.105.243.0/24 maxlen: 24
5.105.133.0/24 maxlen: 24
5.105.140.0/24 maxlen: 24
5.105.70.0/24 maxlen: 24
5.105.78.0/24 maxlen: 24
5.105.85.0/24 maxlen: 24
5.105.99.0/24 maxlen: 24
5.105.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fb:05:9b:5a:fd:7e:ea:cb:9a:a2:53:1d:9a:ba:48:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 21 14:49:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ffb6306f39f92e64828c2b7b981466a66621fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:f5:23:87:e0:44:1e:ce:84:90:9a:ec:d3:
2c:49:99:ff:c0:af:e5:f0:79:38:bf:c6:59:18:d3:
d3:3e:2e:ac:8f:c4:35:1f:7a:fd:76:2c:35:87:fb:
44:c8:a5:6e:b0:49:2f:4e:83:98:84:89:2d:60:9a:
26:18:e7:64:95:a3:3c:42:4c:28:1b:18:da:f6:cf:
6a:3c:ee:43:05:de:83:32:0a:28:78:b9:4c:e8:38:
eb:8d:57:03:01:fc:77:b6:13:e9:c4:14:f8:79:99:
2e:42:ae:d0:f3:77:61:3f:85:34:fc:a1:0f:15:39:
67:c5:3a:56:00:d2:f7:bf:73:f5:18:30:e0:6c:99:
23:70:3d:b1:0f:2e:11:f1:01:ad:24:9e:24:1f:8b:
0a:c9:51:be:31:54:c4:c4:ea:4c:0d:d4:52:32:2a:
df:5e:4a:1c:38:52:49:58:ed:6a:b8:7a:42:2f:3c:
48:2c:42:0d:fa:68:5e:bf:8f:d7:aa:33:24:41:f3:
01:3c:d5:c9:a8:15:2f:ce:95:d7:b8:17:fb:88:ab:
22:1c:7c:09:fd:f4:26:6e:6b:c0:4c:22:dc:75:5e:
0f:c8:a2:33:ca:fd:e8:8c:1e:58:82:97:a9:88:dd:
6b:70:c8:8f:b2:6d:8f:f1:db:4c:92:06:6f:2d:d7:
d7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FB:63:06:F3:9F:92:E6:48:28:C2:B7:B9:81:46:6A:66:62:1F:B7
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/j_tjBvOfkuZIKMK3uYFGamZiH7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.70.0/24
5.105.78.0/24
5.105.85.0/24
5.105.99.0/24
5.105.109.0/24
5.105.128.0/24
5.105.133.0/24
5.105.140.0/24
5.105.231.0/24
5.105.237.0/24
5.105.243.0/24
5.105.246.0/24
Signature Algorithm: sha256WithRSAEncryption
40:bc:10:5c:dd:85:8b:a0:65:c4:b4:2c:f0:bf:be:2d:1b:98:
7e:01:0a:81:17:c6:07:92:62:bc:07:57:6e:d9:b3:c6:0d:de:
7d:e4:55:c1:68:7b:ec:3e:9d:56:c9:ad:73:49:01:be:00:f3:
5f:9b:55:fc:9d:ca:d9:09:f5:91:58:17:22:fc:b4:06:f4:4e:
d4:8b:bc:0b:b3:6b:7a:a4:a4:dc:5f:61:da:9c:c0:6b:aa:46:
74:9c:a5:b6:7e:55:a0:b5:e1:d6:76:a9:fa:81:18:ed:f0:7e:
6f:55:00:ed:4a:73:43:7b:be:dc:44:a7:08:d9:3a:e1:d6:c5:
c1:32:d3:e9:a1:a4:cd:1a:fc:ac:ab:88:85:4a:6a:2c:d2:76:
35:e5:0b:91:2c:fa:f0:e7:5e:d6:6e:50:0d:3d:7a:ac:58:d1:
29:87:70:60:01:f8:3b:98:83:2a:92:21:5b:4b:9a:1d:5c:53:
27:25:c8:8f:e2:e0:04:49:69:19:74:aa:fc:c6:8d:4a:3f:0b:
fa:86:90:1e:47:07:47:c4:b6:f7:84:4f:a4:4a:81:3b:1f:bf:
1c:b8:2a:4c:c2:b4:95:c4:17:d4:a8:b8:6c:fb:ba:f4:37:86:
17:20:c4:90:34:e7:f3:b1:88:8a:35:51:24:90:23:59:5b:06:
3a:ff:30:e9
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAYP7BZta/X7qy5qiUx2aukhcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjIxMDIxMTQ0OTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmZiNjMwNmYzOWY5MmU2NDgyOGMyYjdiOTgxNDY2YTY2NjIxZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRz1I4fgRB7OhJCa7NMsSZn/wK/l
8Hk4v8ZZGNPTPi6sj8Q1H3r9diw1h/tEyKVusEkvToOYhIktYJomGOdklaM8Qkwo
Gxja9s9qPO5DBd6DMgooeLlM6DjrjVcDAfx3thPpxBT4eZkuQq7Q83dhP4U0/KEP
FTlnxTpWANL3v3P1GDDgbJkjcD2xDy4R8QGtJJ4kH4sKyVG+MVTExOpMDdRSMirf
XkocOFJJWO1quHpCLzxILEIN+mhev4/XqjMkQfMBPNXJqBUvzpXXuBf7iKsiHHwJ
/fQmbmvATCLcdV4PyKIzyv3ojB5YgpepiN1rcMiPsm2P8dtMkgZvLdfX+QIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFI/7Ywbzn5LmSCjCt7mBRmpmYh+3MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEval90akJ2T2ZrdVpJS01LM3VZRkdhbVppSDdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQABWlGAwQA
BWlOAwQABWlVAwQABWljAwQABWltAwQABWmAAwQABWmFAwQABWmMAwQABWnnAwQA
BWntAwQABWnzAwQABWn2MA0GCSqGSIb3DQEBCwUAA4IBAQBAvBBc3YWLoGXEtCzw
v74tG5h+AQqBF8YHkmK8B1du2bPGDd595FXBaHvsPp1Wya1zSQG+APNfm1X8ncrZ
CfWRWBci/LQG9E7Ui7wLs2t6pKTcX2HanMBrqkZ0nKW2flWgteHWdqn6gRjt8H5v
VQDtSnNDe77cRKcI2Trh1sXBMtPpoaTNGvysq4iFSmos0nY15QuRLPrw517WblAN
PXqsWNEph3BgAfg7mIMqkiFbS5odXFMnJciP4uAESWkZdKr8xo1KPwv6hpAeRwdH
xLb3hE+kSoE7H78cuCpMwrSVxBfUqLhs+7r0N4YXIMSQNOfzsYiKNVEkkCNZWwY6
/zDp
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org