Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oiikbgW_0CeA-bT8dLNlO4o1ftI.roa
File: oiikbgW_0CeA-bT8dLNlO4o1ftI.roa (raw, json)
Hash identifier: PNVndAv+/uw/j02m1hmd9f3DnUUxZanTvel5O9UlIi4=
Subject key identifier: A2:28:A4:6E:05:BF:D0:27:80:F9:B4:FC:74:B3:65:3B:8A:35:7E:D2
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01852E6F5434E2264D347393AE02EA2CEED7
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oiikbgW_0CeA-bT8dLNlO4o1ftI.roa
Signing time: Tue 20 Dec 2022 07:28:45 +0000
ROA not before: Tue 20 Dec 2022 07:28:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.227.0/24 maxlen: 24
5.105.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:6f:54:34:e2:26:4d:34:73:93:ae:02:ea:2c:ee:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 20 07:28:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a228a46e05bfd02780f9b4fc74b3653b8a357ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:4a:b1:d2:87:eb:29:88:25:fb:88:25:a1:
6e:71:ea:b2:fa:42:02:36:35:42:4f:b0:fe:f5:c4:
dd:34:1a:a8:41:23:68:dc:5e:15:b7:98:a7:aa:c7:
c3:69:c6:15:61:e9:36:a9:cc:4d:db:08:20:5e:45:
e1:e6:f3:b9:63:15:e7:33:0d:c6:41:bc:00:78:9e:
25:58:5e:94:63:de:86:33:93:b6:43:74:17:38:85:
5c:12:d4:ac:0f:df:35:bf:07:49:89:0e:fe:8f:fe:
ca:5c:dc:a4:1a:fb:08:22:01:28:6a:9b:31:6c:d2:
8c:0b:7e:90:76:d3:a1:c6:e0:07:b1:b9:38:5d:01:
dc:0d:05:9c:1d:d3:b7:01:7f:15:6c:3e:cb:69:6c:
7e:bc:2d:d3:b2:2b:5d:03:77:2c:c8:70:43:f4:35:
54:e5:a5:8f:4d:03:55:29:04:b3:ac:7a:eb:41:86:
5f:a9:26:18:44:00:61:cc:05:d9:48:d8:6c:bc:45:
64:97:06:b9:46:77:0f:90:14:1f:c7:b1:8d:c5:f8:
05:45:58:a5:ce:62:54:98:8a:20:7a:e8:41:c0:5f:
a4:cb:b8:f4:0b:33:5c:32:17:3f:25:c8:de:43:45:
71:79:7e:d4:d6:04:cf:ff:0a:25:34:37:3d:4f:a8:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:28:A4:6E:05:BF:D0:27:80:F9:B4:FC:74:B3:65:3B:8A:35:7E:D2
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oiikbgW_0CeA-bT8dLNlO4o1ftI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.219.0/24
5.105.227.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:6d:fa:17:1d:57:b9:d3:42:9f:2b:c9:01:98:f1:a0:da:fe:
b1:d5:bf:0c:3d:26:26:3f:a5:a1:c3:d3:5a:3f:5c:5c:fe:61:
cf:6d:76:99:c0:c3:83:28:65:17:3b:72:84:c8:c9:e7:22:c2:
0c:85:92:12:92:ef:81:24:8a:9a:6a:eb:1f:5e:dc:3b:59:65:
2a:39:ab:b5:d0:4a:f2:e6:e2:8d:46:62:e7:c3:ef:d8:f9:43:
78:19:eb:6e:b1:5c:79:a2:98:1d:27:ce:3d:c5:c2:50:5c:d4:
01:92:6f:b2:f4:2a:f9:a1:9c:ba:ad:fb:4d:a5:da:f8:c0:d9:
d6:37:dd:97:df:16:ce:28:d4:a4:03:20:91:29:10:01:d4:07:
1d:e8:b5:ce:e7:07:33:d1:47:ad:d0:73:f0:6f:47:e1:6a:00:
d7:7f:7c:c9:49:ab:ce:d3:a6:52:69:74:a7:e0:d2:11:56:b3:
58:b0:e9:f6:1e:3b:2f:06:3a:2b:9f:f7:01:8e:e3:20:0c:0d:
f5:65:14:a9:45:99:9f:96:62:27:34:14:bb:02:64:4d:85:c6:
f8:25:1b:23:4b:a6:db:11:76:5a:fb:f9:fd:38:10:b4:f8:19:
90:06:0f:a9:26:c0:88:7c:2a:4d:1d:48:58:ae:98:ff:32:3d:
9e:e8:49:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org