Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/rqlu_dj10wvHM_xBWgA04UYqYrE.roa
File: rqlu_dj10wvHM_xBWgA04UYqYrE.roa (raw, json)
Hash identifier: k1bF/fk4XOFMdRJBZfsnkop++90aIa8pRaRfU53t68U=
Subject key identifier: AE:A9:6E:FD:D8:F5:D3:0B:C7:33:FC:41:5A:00:34:E1:46:2A:62:B1
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183F6F590F1ED40C24B631443A72E6FCFE0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/rqlu_dj10wvHM_xBWgA04UYqYrE.roa
Signing time: Thu 20 Oct 2022 19:53:52 +0000
ROA not before: Thu 20 Oct 2022 19:53:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54600
IP address blocks: 5.105.145.0/24 maxlen: 24
5.105.144.0/24 maxlen: 24
5.105.146.0/24 maxlen: 24
5.105.147.0/24 maxlen: 24
5.105.179.0/24 maxlen: 24
5.105.189.0/24 maxlen: 24
5.105.193.0/24 maxlen: 24
5.105.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:f5:90:f1:ed:40:c2:4b:63:14:43:a7:2e:6f:cf:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 20 19:53:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aea96efdd8f5d30bc733fc415a0034e1462a62b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:9d:38:ef:57:3f:a1:b1:2d:21:c4:a3:dd:
7a:0a:9f:6f:0e:0d:9f:85:86:df:3e:2f:18:ee:a0:
af:73:da:49:83:8f:31:cd:ec:f9:4b:4a:ed:8f:1f:
e6:73:76:1b:39:31:f0:cf:6b:d2:68:46:4c:95:e0:
0a:8d:a9:77:af:e5:ba:de:6f:3d:79:93:d4:89:75:
b9:a4:bb:9b:1f:d1:3c:3c:4e:d1:60:9b:94:e6:56:
93:61:12:8c:8a:c2:a9:17:f3:12:fd:a3:a9:06:6d:
2e:cd:e3:06:d7:43:a2:11:03:01:71:59:a1:3e:9e:
83:b8:c0:f8:b8:6e:89:bd:7e:04:56:5f:9e:bd:f2:
23:2c:dd:a5:95:d7:d6:61:b4:af:93:6d:6a:45:50:
45:24:a8:47:4b:b9:d4:12:55:f6:b9:80:5a:66:b4:
9c:79:92:c8:0b:39:fc:00:22:74:b2:e1:93:87:61:
7e:93:3e:cf:34:89:61:af:de:bf:be:57:c6:95:ff:
06:58:2a:bb:3b:2a:cb:65:9a:6b:44:0c:99:aa:c0:
c7:12:7c:75:b6:50:75:1b:09:a5:b5:c1:af:cb:4b:
f8:bd:d0:d7:99:20:60:c8:c1:20:6b:92:fa:1b:0f:
fe:8f:2e:d8:48:51:ff:bc:1d:81:d3:a9:92:c1:75:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A9:6E:FD:D8:F5:D3:0B:C7:33:FC:41:5A:00:34:E1:46:2A:62:B1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/rqlu_dj10wvHM_xBWgA04UYqYrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.144.0/22
5.105.179.0/24
5.105.189.0/24
5.105.193.0/24
5.105.201.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:23:16:53:f9:a2:8f:6b:0b:82:15:5b:a5:1c:74:e5:0b:10:
7d:6f:b7:bd:ab:27:8a:61:07:4b:cb:0b:c5:a9:a4:e5:cb:20:
21:9e:9c:35:ec:cf:83:25:e9:be:fc:28:19:a7:21:34:9e:94:
42:ff:8e:53:c8:7a:3f:4c:d4:78:c7:59:07:b3:c7:c0:6a:da:
a7:09:71:c0:f5:94:04:40:68:aa:58:3b:0c:82:b1:51:73:17:
43:f0:f0:e3:07:14:e7:e4:14:44:03:62:5f:4e:9d:ba:ea:cc:
32:b4:df:de:04:ff:92:a5:f0:5a:51:96:ac:d6:64:61:96:da:
ec:0b:77:17:1c:9c:5f:eb:cf:ad:99:19:b7:f5:00:0d:53:47:
e7:2f:1a:c7:50:61:5d:42:76:64:b4:ce:b5:dd:e3:b3:76:b8:
98:b2:58:0e:ba:1d:71:ee:40:db:3b:94:b8:c0:36:b6:e0:b4:
8f:bd:02:42:4d:4d:70:61:fa:e6:d5:1c:f7:f8:9e:f5:09:7f:
37:38:3e:6d:f8:5f:d9:01:ac:bc:05:ab:39:e7:50:9e:77:2c:
5b:b4:8c:67:3b:f0:0b:49:55:2a:16:1a:fa:c6:04:40:e7:f8:
c5:19:fd:13:b9:48:77:45:ab:67:b5:b6:0c:e6:88:0a:9c:df:
2c:58:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org