Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/tsZIVwaDrFa2OG66iuyC6KCQFQs.roa
File: tsZIVwaDrFa2OG66iuyC6KCQFQs.roa (raw, json)
Hash identifier: etAzrhwZY+STXNdl6HuP1IcO8TnIDEIgeItta3V7GKo=
Subject key identifier: B6:C6:48:57:06:83:AC:56:B6:38:6E:BA:8A:EC:82:E8:A0:90:15:0B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183ACF00155EAA5FA40FC06F063CF204A7A
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/tsZIVwaDrFa2OG66iuyC6KCQFQs.roa
Signing time: Thu 06 Oct 2022 10:55:53 +0000
ROA not before: Thu 06 Oct 2022 10:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 5.105.104.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:f0:01:55:ea:a5:fa:40:fc:06:f0:63:cf:20:4a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 6 10:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6c648570683ac56b6386eba8aec82e8a090150b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:54:21:a6:9b:57:5c:03:66:38:71:7e:17:
d8:ed:aa:8b:d8:9a:1e:53:2f:e5:5b:74:89:cd:bd:
45:05:ff:d2:bc:84:5c:bb:e3:35:a8:7a:14:c1:ea:
9e:25:d5:40:5d:96:36:0f:27:05:ff:10:0d:06:d7:
ea:7b:ad:05:b4:b2:08:a4:2e:76:83:82:da:d2:8c:
fe:61:64:5e:42:54:5c:19:70:b6:fe:18:63:ff:c9:
35:cf:d0:aa:02:ca:3b:3f:24:d8:f9:76:d3:0d:02:
59:c4:10:14:73:93:30:c5:84:55:e4:6d:16:1f:87:
a4:d7:fd:85:d9:34:a2:a9:84:15:9e:a2:f3:eb:d3:
78:81:3b:f0:aa:d8:9e:db:f1:f5:37:49:86:ef:87:
37:c6:6a:7f:1c:3f:38:c3:38:85:44:22:26:03:db:
7a:a2:30:d1:35:87:48:12:73:fd:a3:58:dc:78:e9:
86:fc:87:e1:d7:cb:c4:72:fd:27:69:e8:39:4e:fc:
9e:93:d9:43:f2:7a:04:cf:50:99:62:0a:0e:f9:ac:
55:ae:8d:9f:24:1f:6a:18:e3:ac:18:04:8a:75:08:
d4:a5:a7:bd:44:a1:47:d6:90:41:72:71:73:d0:9a:
27:bc:92:33:6f:82:2c:f8:58:91:d2:b2:bc:4c:1d:
a6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C6:48:57:06:83:AC:56:B6:38:6E:BA:8A:EC:82:E8:A0:90:15:0B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/tsZIVwaDrFa2OG66iuyC6KCQFQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.100.0/24
5.105.103.0-5.105.104.255
Signature Algorithm: sha256WithRSAEncryption
c5:2d:a8:94:db:82:5e:f6:14:89:02:a0:d0:77:ba:38:07:d7:
60:83:8a:31:c8:7d:5b:f3:10:d4:a0:81:46:41:c4:ae:ad:64:
fc:0c:82:82:2e:ba:95:63:a1:d6:83:28:f1:77:54:77:7a:d4:
fb:46:d2:d0:f0:ee:0d:d2:fc:46:c3:41:1e:19:9b:3a:d2:cd:
ef:ea:6a:71:94:2c:f2:13:64:cf:87:5d:bd:a9:28:bd:f7:88:
0a:17:a5:7d:90:c3:23:d6:d9:f5:4e:3b:3c:ce:94:d3:83:6a:
91:6a:aa:4e:c0:cd:80:e1:3b:67:bd:2e:0b:21:67:bd:cd:8e:
64:89:fe:e4:00:8b:12:f4:72:f1:36:05:e1:3d:a4:1c:c3:6d:
73:27:78:83:60:19:22:53:8d:7b:6b:08:9f:29:eb:75:8c:30:
30:9f:0e:b9:cd:4b:b9:25:b3:78:13:f1:ec:00:96:f8:60:e0:
20:0a:d1:24:45:29:77:e7:f0:70:46:67:99:9d:c1:d5:0d:1e:
d9:71:9f:0e:6b:9a:fe:37:de:b9:e0:53:59:c4:54:58:2d:6e:
89:86:81:a2:d9:9e:9f:5a:05:eb:a9:cc:e6:82:dc:65:3f:b1:
bd:ab:4a:3a:9b:52:f2:2b:9a:4c:2e:ff:dd:66:f7:84:59:6a:
51:ca:a6:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org