Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/rPZ2NYO8tRaw_2Q-j6rwMEJe7r4.roa
File: rPZ2NYO8tRaw_2Q-j6rwMEJe7r4.roa (raw, json)
Hash identifier: TpAAbZ3Wp89z1EHlt14oiBiwkmtGk4LFpJ7TCfbw8v0=
Subject key identifier: AC:F6:76:35:83:BC:B5:16:B0:FF:64:3E:8F:AA:F0:30:42:5E:EE:BE
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01855D0898AB594DD316E2903FC54ECFB5E2
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/rPZ2NYO8tRaw_2Q-j6rwMEJe7r4.roa
Signing time: Thu 29 Dec 2022 08:38:42 +0000
ROA not before: Thu 29 Dec 2022 08:38:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 5.105.228.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:08:98:ab:59:4d:d3:16:e2:90:3f:c5:4e:cf:b5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 29 08:38:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acf6763583bcb516b0ff643e8faaf030425eeebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:19:48:cb:9c:3d:b5:9b:c2:3f:0e:c7:d5:
b8:47:30:62:7d:17:d8:62:c8:94:64:82:0b:b5:c9:
9c:8f:6d:40:2e:88:26:68:93:4e:3a:af:4f:85:8a:
47:ae:d1:39:3d:0e:54:a0:57:95:8f:82:27:17:a3:
07:4f:6d:6c:57:6a:99:ef:20:c5:f2:16:30:dc:30:
9d:be:14:90:7f:9f:cc:ab:d5:84:d1:47:40:2a:0c:
cb:58:ea:3d:dd:85:fb:3e:ff:02:04:0c:ff:70:59:
fc:7c:0b:02:ca:8d:3e:b8:44:7c:c5:2c:21:b8:c4:
81:aa:30:31:46:dd:78:c4:f4:6c:ff:21:42:ad:74:
a9:99:7c:fc:78:9f:4b:e2:a5:1f:5e:ef:2d:56:3e:
75:25:74:a2:00:80:e0:ec:22:27:0c:91:4e:72:7b:
84:a7:53:45:81:7c:66:1e:f2:c3:b2:0a:20:e0:81:
18:69:41:3c:05:f0:bc:e8:1b:47:4e:5a:eb:07:8d:
13:03:03:6c:da:6e:c3:e1:77:08:e2:d0:06:0a:92:
b6:33:c7:fa:68:d0:d3:08:98:f8:89:48:db:bd:ec:
ec:29:82:f8:56:32:ac:19:1d:86:d9:2f:74:1f:f2:
a7:c0:85:1b:ac:8f:39:0c:bc:eb:77:18:08:9e:d0:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F6:76:35:83:BC:B5:16:B0:FF:64:3E:8F:AA:F0:30:42:5E:EE:BE
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/rPZ2NYO8tRaw_2Q-j6rwMEJe7r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.51.0/24
5.105.66.0/24
5.105.118.0/24
5.105.169.0/24
5.105.185.0/24
5.105.228.0/24
5.105.242.0/24
Signature Algorithm: sha256WithRSAEncryption
13:5a:4f:00:d7:10:f4:23:0b:d9:29:3a:90:e3:de:2f:94:74:
39:7e:fd:64:ff:13:7b:41:aa:7b:c7:24:be:b7:40:2b:35:c0:
17:af:92:c8:d8:12:ff:2a:38:33:d3:9a:d4:6f:a6:00:e6:f6:
cb:88:e1:26:19:69:fd:92:d0:87:b2:14:b4:8f:b4:20:53:67:
40:07:f1:78:1f:19:c9:6b:94:05:d7:78:8b:d7:96:7d:9a:ea:
84:de:6e:ab:57:2d:51:9b:a7:47:68:7f:53:33:ab:7e:74:d8:
a6:7d:27:06:c0:e0:78:09:33:7f:49:71:e7:7d:4e:37:34:42:
3e:d0:8e:ad:ef:13:11:4f:8c:ca:74:61:8f:fb:66:25:eb:0d:
2c:e3:f4:f0:23:7e:45:7c:2b:1a:39:44:88:b9:0b:09:2d:d0:
53:f6:7e:93:d9:83:0c:fd:05:6b:7c:b8:3d:7d:6b:8f:6b:df:
ba:31:56:41:fb:da:dd:5b:5e:be:ab:ad:b4:6d:ea:d8:89:65:
ba:74:1e:0f:5d:5e:d2:b8:8b:9e:1b:ee:5d:3f:f9:68:fe:a5:
05:b8:07:9d:a2:47:bb:d0:e1:f8:0a:f8:94:07:d5:f6:30:9a:
8d:5c:52:0d:8d:d4:73:ac:e8:84:02:34:53:48:04:2a:a0:60:
f9:ca:a2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org