Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/uhqyTEQV8Jx262ToO8Y8FVaXANE.roa
File: uhqyTEQV8Jx262ToO8Y8FVaXANE.roa (raw, json)
Hash identifier: /jbEecAFLEkSp15yHV8kAMUScaECXy81kyGiOsKVicU=
Subject key identifier: BA:1A:B2:4C:44:15:F0:9C:76:EB:64:E8:3B:C6:3C:15:56:97:00:D1
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01841AAEC3241CE1DB5278C919B3CC33F89C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/uhqyTEQV8Jx262ToO8Y8FVaXANE.roa
Signing time: Thu 27 Oct 2022 18:22:51 +0000
ROA not before: Thu 27 Oct 2022 18:22:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 5.105.211.0/24 maxlen: 24
5.105.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1a:ae:c3:24:1c:e1:db:52:78:c9:19:b3:cc:33:f8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 27 18:22:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba1ab24c4415f09c76eb64e83bc63c15569700d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:34:e4:55:61:b7:ac:ed:5d:dd:4d:01:8c:
46:c5:b3:55:0b:69:d0:17:61:cb:3d:70:0e:91:d7:
be:5e:0f:4f:e3:0c:89:09:c0:63:b1:04:0d:d8:31:
ac:09:2a:2a:45:b9:76:96:57:a0:dc:5a:4a:21:51:
a1:29:c7:24:6d:ec:9c:43:e3:c3:74:54:80:a6:ec:
9e:ed:a1:81:03:72:fe:9c:dc:ee:ff:47:ba:eb:10:
df:79:03:b0:b0:51:68:62:0a:f2:38:2d:33:9b:9b:
8e:fd:28:49:b6:5e:fd:48:e0:cc:bd:41:58:f8:59:
20:53:b2:af:d5:19:f0:24:c1:47:d5:17:e3:c1:7c:
a9:fc:4a:a7:93:0d:f4:fb:28:1b:5b:b2:fc:24:e8:
4f:66:c6:22:0a:cb:fc:e5:45:f2:c2:c3:ff:91:72:
0c:7a:c5:7f:d8:06:e2:d6:16:9d:5b:bf:df:fc:82:
c2:c2:2f:f9:60:77:fc:aa:69:ae:6e:7c:7a:73:55:
29:a0:a3:dd:83:1f:62:76:c3:28:f3:4b:24:44:ee:
31:2e:f3:cb:2a:ca:4b:6e:b6:d3:a0:4e:15:68:58:
3a:79:75:24:c0:a9:25:66:bc:0f:04:0d:8e:59:b9:
2b:ee:e7:26:07:0a:fb:b6:74:89:ce:68:de:2b:fe:
14:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1A:B2:4C:44:15:F0:9C:76:EB:64:E8:3B:C6:3C:15:56:97:00:D1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/uhqyTEQV8Jx262ToO8Y8FVaXANE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.116.0/24
5.105.211.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5e:71:f8:91:48:59:a8:75:5f:d0:06:b0:f9:9d:fa:35:8e:
1e:21:1d:09:f1:45:c4:d4:0a:37:d9:d4:e1:08:dc:f9:d9:54:
4e:dd:b0:84:42:f9:b8:08:a4:0f:83:15:30:ae:28:21:83:55:
23:4e:12:e2:94:e7:81:2d:30:02:93:57:16:be:80:65:2c:8c:
bd:94:30:b5:1a:b1:87:55:74:63:4f:8d:42:cc:9e:59:a5:d8:
4b:e7:d3:87:79:c4:92:d5:98:e6:f1:a3:f0:d7:81:7c:f4:dd:
fd:4a:cb:0b:5d:8a:f1:92:73:1d:af:77:3b:8c:e8:49:ae:d9:
b7:54:da:3d:0f:2a:8f:a8:26:9b:40:f4:69:e0:c9:44:d1:5a:
b2:d5:98:9b:ff:06:61:a9:58:3e:26:6c:cd:54:05:f0:69:7f:
11:9c:e6:43:de:3c:08:28:98:ad:e4:f4:5a:d4:62:11:fd:4e:
b7:8e:a8:67:4a:2a:14:a7:52:ad:89:0f:6a:01:00:c6:d0:0e:
2f:30:0d:34:ef:d1:26:b9:67:0a:08:5c:64:9e:88:f2:81:63:
d3:71:b1:53:74:b4:f6:4a:b1:cd:a7:f9:f7:1c:16:58:1d:14:
c8:f0:a8:d7:0a:10:6d:c5:b8:19:07:5d:03:04:45:ae:00:fc:
78:92:a4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:52 2025 by rpki-client