Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/m_TrbDSFT4-FchNIZQhusvMpHG4.roa
File: m_TrbDSFT4-FchNIZQhusvMpHG4.roa (raw, json)
Hash identifier: 7bMBWcSJ2VNUeWlaHqVBZe+DLqAsRerqivufsfetE+c=
Subject key identifier: 9B:F4:EB:6C:34:85:4F:8F:85:72:13:48:65:08:6E:B2:F3:29:1C:6E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01841AAEC2AA87726DD1B658819AE1DD030E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/m_TrbDSFT4-FchNIZQhusvMpHG4.roa
Signing time: Thu 27 Oct 2022 18:22:51 +0000
ROA not before: Thu 27 Oct 2022 18:22:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 5.105.91.0/24 maxlen: 24
5.105.90.0/24 maxlen: 24
5.105.92.0/24 maxlen: 24
5.105.93.0/24 maxlen: 24
5.105.223.0/24 maxlen: 24
5.105.222.0/24 maxlen: 24
5.105.224.0/24 maxlen: 24
5.105.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1a:ae:c2:aa:87:72:6d:d1:b6:58:81:9a:e1:dd:03:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 27 18:22:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bf4eb6c34854f8f8572134865086eb2f3291c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:df:66:41:fd:39:78:0b:34:fd:8a:cd:6d:
53:99:d0:43:f6:fc:5c:de:9c:80:d0:eb:f8:96:34:
4b:3b:b2:88:e3:0c:bc:2e:46:d7:ba:c9:85:5f:a3:
d1:cd:69:e2:9d:49:72:e0:62:c5:96:98:f2:21:28:
2b:51:e2:be:d2:58:70:b0:1a:bb:63:9d:51:db:47:
d3:4d:1d:da:ab:b6:d1:27:31:56:87:fa:75:4e:ab:
db:80:4f:73:e4:af:c9:52:d6:d8:a6:5e:7e:50:39:
f5:01:47:0c:67:d5:a1:9b:d5:2a:d3:69:f4:a3:a6:
32:12:63:6f:1b:67:2c:dc:12:a3:12:f0:7b:60:13:
07:cd:b1:af:3b:1d:df:af:62:57:7a:10:21:5a:16:
71:19:d6:d4:c3:84:03:13:c2:41:21:57:c7:f4:39:
57:5a:14:57:06:e1:30:b9:45:af:08:72:6e:ba:52:
0a:b3:3e:c0:d0:af:0e:40:56:b0:cc:52:09:08:69:
1a:57:06:60:99:50:08:1a:0a:a4:b4:f9:5d:25:3f:
ef:e1:1d:e3:fa:b3:3f:65:ea:1a:fa:c0:07:ab:a6:
45:7c:16:05:23:e6:d6:9b:cf:e6:14:82:ac:c3:d8:
cd:cf:16:c8:9c:89:0b:57:15:f8:73:15:49:ac:df:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F4:EB:6C:34:85:4F:8F:85:72:13:48:65:08:6E:B2:F3:29:1C:6E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/m_TrbDSFT4-FchNIZQhusvMpHG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.90.0-5.105.93.255
5.105.222.0-5.105.225.255
Signature Algorithm: sha256WithRSAEncryption
a0:cf:37:6e:e8:92:67:c7:14:97:1f:c4:c5:86:77:97:7a:68:
b8:2d:2c:06:bb:32:0f:10:62:4c:78:ff:e6:81:6e:5e:84:f7:
b0:a1:08:fa:ce:7a:00:f5:fb:10:6c:68:35:3b:7f:96:9b:ed:
10:ed:b7:0c:a2:fc:28:d4:62:f1:82:d0:31:a8:dc:e4:61:a4:
60:3c:34:00:6d:cd:a1:7f:bc:59:db:77:c6:bd:e1:a4:03:10:
77:2d:00:37:6f:be:c5:aa:1f:56:c1:6f:ea:e0:b1:d5:8c:d0:
7a:2e:68:1f:aa:67:14:cc:8b:11:e2:f4:34:af:7c:2a:b3:0a:
34:85:21:bf:97:b8:b2:c8:e5:0f:ee:89:a3:e7:0f:63:ff:d9:
b1:71:cc:9c:53:87:6d:93:c9:58:9a:0a:94:63:71:66:0f:eb:
a7:ca:fd:39:76:a1:bb:e5:f2:6d:40:2f:e8:1b:f4:53:c6:64:
8b:2d:cd:4f:13:bd:fb:ec:9c:e4:50:e3:7b:a9:a5:52:26:24:
12:45:3c:93:aa:b5:25:7a:2d:5a:94:8a:6a:57:6f:bb:3a:e8:
ea:31:2d:30:63:07:14:6f:43:6b:5b:cc:79:f8:bd:d2:67:da:
28:25:d9:dd:ef:47:ca:1e:16:f2:f3:f5:27:b4:57:ba:74:43:
22:63:01:9a
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYQarsKqh3Jt0bZYgZrh3QMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjIxMDI3MTgyMjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmY0ZWI2YzM0ODU0ZjhmODU3MjEzNDg2NTA4NmViMmYzMjkxYzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIffZkH9OXgLNP2KzW1TmdBD9vxc
3pyA0Ov4ljRLO7KI4wy8LkbXusmFX6PRzWninUly4GLFlpjyISgrUeK+0lhwsBq7
Y51R20fTTR3aq7bRJzFWh/p1TqvbgE9z5K/JUtbYpl5+UDn1AUcMZ9Whm9Uq02n0
o6YyEmNvG2cs3BKjEvB7YBMHzbGvOx3fr2JXehAhWhZxGdbUw4QDE8JBIVfH9DlX
WhRXBuEwuUWvCHJuulIKsz7A0K8OQFawzFIJCGkaVwZgmVAIGgqktPldJT/v4R3j
+rM/Zeoa+sAHq6ZFfBYFI+bWm8/mFIKsw9jNzxbInIkLVxX4cxVJrN/U4wIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFJv062w0hU+PhXITSGUIbrLzKRxuMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvbV9UcmJEU0ZUNC1GY2hOSVpRaHVzdk1wSEc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAEFaVoD
BAEFaVwwDAMEAQVp3gMEAQVp4DANBgkqhkiG9w0BAQsFAAOCAQEAoM83buiSZ8cU
lx/ExYZ3l3pouC0sBrsyDxBiTHj/5oFuXoT3sKEI+s56APX7EGxoNTt/lpvtEO23
DKL8KNRi8YLQMajc5GGkYDw0AG3NoX+8Wdt3xr3hpAMQdy0AN2++xaofVsFv6uCx
1YzQei5oH6pnFMyLEeL0NK98KrMKNIUhv5e4ssjlD+6Jo+cPY//ZsXHMnFOHbZPJ
WJoKlGNxZg/rp8r9OXahu+XybUAv6Bv0U8Zkiy3NTxO9++yc5FDje6mlUiYkEkU8
k6q1JXotWpSKaldvuzro6jEtMGMHFG9Da1vMefi90mfaKCXZ3e9Hyh4W8vP1J7RX
unRDImMBmg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org