Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/pFj-ghn2Dimx6-vUzgrEsCFJ7So.roa
File: pFj-ghn2Dimx6-vUzgrEsCFJ7So.roa (raw, json)
Hash identifier: +U9D2sX0UmqurHKByuaODt/WU7FTLcnrk0HgtLUe9wY=
Subject key identifier: A4:58:FE:82:19:F6:0E:29:B1:EB:EB:D4:CE:0A:C4:B0:21:49:ED:2A
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183218E16EE5BEBCCDE94BEF3B8D45E5B38
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/pFj-ghn2Dimx6-vUzgrEsCFJ7So.roa
Signing time: Fri 09 Sep 2022 09:21:43 +0000
ROA not before: Fri 09 Sep 2022 09:21:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 5.105.252.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:8e:16:ee:5b:eb:cc:de:94:be:f3:b8:d4:5e:5b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 9 09:21:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a458fe8219f60e29b1ebebd4ce0ac4b02149ed2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:b6:9f:20:49:5a:29:f2:36:42:41:c7:bb:
00:6b:cb:74:55:1e:89:f6:a8:3b:f3:2f:03:62:f4:
08:9e:0b:01:e9:d0:51:b3:9d:5f:f4:22:4c:f4:ef:
e6:25:2e:b9:0c:f7:1c:2a:e8:88:0e:e8:c1:81:8d:
c8:14:c1:44:e2:60:9d:b0:a5:67:09:96:0d:e7:a5:
94:90:9f:81:ec:db:03:e4:ed:cc:56:77:06:ee:95:
dd:8f:a1:49:6c:87:1f:bd:6e:4b:79:47:e6:04:aa:
1d:d2:23:60:54:a4:ee:f9:88:8f:e8:eb:8f:a5:c1:
1e:82:0a:ae:dd:d0:7d:00:5a:b5:1c:eb:1e:c4:ac:
58:47:95:41:d3:b0:42:86:d9:05:26:73:61:12:4a:
4f:75:77:c4:01:c3:87:39:dd:1d:78:25:1d:aa:ff:
af:b3:1d:47:63:c0:f3:d8:f6:f2:ba:4a:09:3c:fe:
ee:fe:b1:1e:81:ba:92:ea:5e:cb:2e:fa:24:0d:0c:
6c:9a:b0:8b:2e:5b:a2:9b:82:a6:e2:78:0a:5d:2f:
ab:9c:d5:4d:70:82:19:d1:ca:88:ab:1c:ff:ee:0c:
68:fd:ee:f0:bf:05:eb:70:6c:dc:07:18:65:9d:2d:
b6:df:fa:2c:69:25:3f:4a:26:97:34:e9:ca:07:7b:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:58:FE:82:19:F6:0E:29:B1:EB:EB:D4:CE:0A:C4:B0:21:49:ED:2A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/pFj-ghn2Dimx6-vUzgrEsCFJ7So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.252.0/23
Signature Algorithm: sha256WithRSAEncryption
73:3b:d0:3a:76:5c:94:01:f3:fa:06:38:96:c7:c1:44:59:bf:
46:6b:61:a4:3d:78:7e:9c:c7:1b:8e:74:94:82:49:04:c1:f8:
3d:d7:1a:61:45:3c:45:ca:46:f9:1b:e8:58:24:0a:4f:70:a7:
ef:55:03:47:f4:af:39:53:87:a3:06:ab:a5:2c:79:a9:dc:45:
a4:73:6d:02:1d:db:5a:ed:c3:b6:41:9e:7f:68:a2:37:01:87:
cd:d1:dd:a5:76:ae:2b:15:56:66:94:f6:a5:80:29:77:fd:db:
11:09:8f:2c:cb:f2:85:42:2a:93:66:f0:c5:4b:88:9e:09:98:
65:2b:62:bf:a0:c6:a8:62:7d:ef:d9:14:0b:51:df:3f:96:47:
2f:14:ad:df:0d:0a:08:ab:52:8e:25:bd:63:18:81:2c:bc:ba:
32:e2:2a:ed:8b:84:e0:cf:7b:82:15:41:a0:ff:53:ea:18:52:
dc:3a:4a:cd:85:2f:e0:05:e8:bf:88:25:e3:39:23:50:8f:92:
05:52:73:7b:5e:ed:92:65:e9:95:94:43:99:3b:2d:3a:94:99:
cf:5e:75:69:8b:9d:dd:da:69:d9:d3:ba:c8:aa:ce:75:1c:79:
57:87:dd:5d:59:6d:d4:e9:81:1d:10:c3:e1:4a:7e:c5:53:88:
fc:5d:cd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org