Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vINvCvvxzQYfZTtKDExNJt0e0pM.roa
File: vINvCvvxzQYfZTtKDExNJt0e0pM.roa (raw, json)
Hash identifier: pAdvebhIXC9k4vozWY52UeuVDgaPKYnx6XS3umeObMM=
Subject key identifier: BC:83:6F:0A:FB:F1:CD:06:1F:65:3B:4A:0C:4C:4D:26:DD:1E:D2:93
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01835687E5D849042A59F3A257E75D96C0B7
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vINvCvvxzQYfZTtKDExNJt0e0pM.roa
Signing time: Mon 19 Sep 2022 16:14:50 +0000
ROA not before: Mon 19 Sep 2022 16:14:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136923
IP address blocks: 5.105.120.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.48.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.65.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:56:87:e5:d8:49:04:2a:59:f3:a2:57:e7:5d:96:c0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 19 16:14:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc836f0afbf1cd061f653b4a0c4c4d26dd1ed293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9d:cf:4a:c9:59:8f:3d:cd:3f:67:1c:d7:8e:
b7:f7:e2:20:2a:e1:a6:47:be:04:d8:46:33:c8:d7:
18:c9:a5:34:9b:89:52:29:5b:c8:38:38:56:94:b1:
77:a2:d2:d0:cc:a0:cc:c5:14:26:dd:e5:f2:46:13:
15:1b:bc:1a:83:ed:cf:f3:88:b5:6a:12:b0:55:d6:
e2:11:a6:47:d5:7f:e9:80:a0:77:a0:22:d4:ef:10:
92:33:3e:25:7a:a6:00:b5:5f:09:5e:67:77:25:43:
4a:db:7a:f9:8c:64:a2:12:12:b4:6f:ab:ef:13:61:
52:39:e5:94:6d:98:df:6b:37:5e:9f:84:6e:06:b2:
73:a4:ab:a8:6d:63:0f:fd:f6:c6:04:80:25:ef:a3:
a8:e9:80:a6:65:27:c4:70:8d:4b:f7:71:4c:6b:6d:
f5:8a:f7:b0:17:10:85:b4:7d:cd:e0:92:99:fe:56:
c3:84:17:11:83:3e:fd:8b:d9:1e:23:00:9b:fb:6c:
66:d5:2b:05:72:cf:76:2f:2d:17:05:b3:86:f9:e7:
2c:6b:30:8c:a7:62:8e:03:76:36:72:61:06:c2:8f:
3e:92:68:9f:d8:5c:a1:ba:41:76:b4:79:01:6e:29:
4f:74:bf:d2:61:c4:32:c3:6e:c9:43:18:a3:d4:33:
88:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:83:6F:0A:FB:F1:CD:06:1F:65:3B:4A:0C:4C:4D:26:DD:1E:D2:93
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vINvCvvxzQYfZTtKDExNJt0e0pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.48.0/24
5.105.57.0/24
5.105.65.0/24
5.105.74.0/23
5.105.89.0/24
5.105.97.0/24
5.105.120.0/24
5.105.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:51:81:7f:98:b4:2b:16:f5:62:c7:21:ef:1b:b6:15:c4:fb:
81:f2:ce:e6:45:86:f0:f5:f8:6b:77:94:77:08:ac:10:6e:c2:
a0:87:69:95:e0:77:f3:dd:71:b1:6b:ba:b5:ec:88:49:43:4f:
f9:90:88:9e:2e:54:99:4a:59:1c:a3:f5:fa:6d:5d:30:b5:d1:
1d:7a:03:90:54:e8:f3:23:dc:70:9b:eb:44:60:d6:c9:29:66:
e5:18:a9:1a:b8:91:b6:84:80:f3:25:32:58:91:b1:2f:ca:7d:
a3:56:38:7e:31:8f:05:79:62:6c:65:1f:1d:85:23:ed:db:db:
0e:a0:1f:99:82:49:c3:13:34:c9:3d:23:ff:54:2d:02:d3:f2:
82:55:b8:11:0c:e7:d8:e7:00:fd:56:76:cc:81:df:45:84:b5:
82:ba:a8:3b:fb:42:ff:02:75:76:83:5d:31:91:79:10:7d:cf:
22:c6:d0:1d:dc:39:a6:9c:71:43:d2:45:9e:3e:93:a9:de:b4:
1b:62:1a:1e:7e:17:e2:ef:b1:dd:02:01:f6:0e:6f:d3:30:e7:
2f:96:70:17:e2:69:30:98:b9:d3:c0:d6:3d:f8:42:54:47:94:
4d:57:49:c6:96:fc:ca:50:d5:d3:2b:2f:bc:c1:2b:ff:59:d2:
02:59:d4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org