Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vfkCgv9ca7-uVLTDHWq_JCP4ln0.roa
File: vfkCgv9ca7-uVLTDHWq_JCP4ln0.roa (raw, json)
Hash identifier: d4pOXKrB2XtRAkSs88jSm7rLjAG4iKmnIU0rGlN69H8=
Subject key identifier: BD:F9:02:82:FF:5C:6B:BF:AE:54:B4:C3:1D:6A:BF:24:23:F8:96:7D
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189965B3631128E96A1F7C743192ACEE73D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vfkCgv9ca7-uVLTDHWq_JCP4ln0.roa
Signing time: Thu 27 Jul 2023 07:58:27 +0000
ROA not before: Thu 27 Jul 2023 07:58:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41095
IP address blocks: 5.105.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:5b:36:31:12:8e:96:a1:f7:c7:43:19:2a:ce:e7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 27 07:58:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdf90282ff5c6bbfae54b4c31d6abf2423f8967d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:04:ac:d6:92:94:7b:68:78:90:33:bc:a3:d4:
3c:cd:43:27:ab:26:57:34:c5:ae:8f:35:23:97:56:
af:c6:5a:e5:1a:29:a5:f5:03:f8:e3:65:a8:ed:8e:
a9:0a:00:6d:be:e4:1e:3e:b6:f9:4e:c3:e4:de:d0:
5a:d8:48:b1:d2:88:06:1e:cf:ca:4f:e9:7e:05:30:
94:68:b0:c5:27:4a:12:a1:aa:bc:06:26:5b:d2:ae:
58:5b:3c:25:ca:06:88:45:d8:ba:2f:31:60:52:a0:
c1:b6:00:57:be:8a:7f:4b:6e:b2:16:05:f9:43:60:
94:cc:6e:c7:11:a3:98:ee:08:f3:88:ec:70:2e:83:
06:4c:30:2d:3c:1b:a9:a5:75:cc:6a:79:ce:6b:e5:
4d:43:21:32:a9:ab:54:f0:38:75:e0:52:c7:3f:59:
0f:d5:01:4a:36:4e:06:05:9b:19:65:e7:da:27:5f:
bb:2e:cd:d6:c1:c5:d2:1e:80:b2:57:41:06:bc:14:
6a:57:6a:be:f3:73:ef:ad:a5:8b:87:ec:b4:7c:f6:
21:22:f3:cf:41:b1:63:f7:13:3d:30:6e:e0:50:30:
3a:b9:0e:f0:bf:02:68:93:5c:9d:60:b4:25:cf:9f:
a1:3f:4f:76:7c:fa:32:7e:a8:67:58:5a:6a:24:26:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:02:82:FF:5C:6B:BF:AE:54:B4:C3:1D:6A:BF:24:23:F8:96:7D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vfkCgv9ca7-uVLTDHWq_JCP4ln0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.68.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:2a:c4:35:88:b8:d0:b6:73:5c:41:d8:9c:12:91:e9:e1:53:
00:21:c9:4e:c7:ff:50:3a:0c:ef:bb:27:5e:58:fd:fa:8b:df:
76:08:d6:de:6f:0e:4e:8e:d0:e6:da:df:ed:5d:e8:de:30:8a:
72:1b:40:cc:1a:6b:cd:92:20:df:32:f1:3c:b3:fe:41:12:ad:
bd:e1:a5:62:18:4d:dc:d1:4a:1f:05:de:d6:42:e0:ec:ca:ed:
3c:5c:8a:d1:b5:7f:48:a5:95:e0:0e:03:20:49:7b:2c:f1:2e:
11:52:41:f5:4e:3c:31:b5:5b:f8:f0:30:dc:bc:6c:bd:f9:09:
1b:f7:3f:09:47:c2:87:c4:e1:2e:b9:5d:8b:b0:9f:d3:2a:bb:
1b:a0:cb:94:a5:e6:54:e8:40:58:fc:68:ae:3f:8c:1c:ce:0c:
73:0b:f9:e3:11:75:b3:62:46:8e:e8:a2:75:28:f5:da:c5:cb:
d1:51:d5:39:f2:c6:3b:8f:b8:fb:84:3a:4b:ea:17:6b:e4:d5:
57:39:b2:4a:c8:3b:ce:f9:44:c7:7f:0b:67:c4:ac:00:7e:a5:
29:56:7c:c5:24:95:2b:eb:4a:58:10:ee:8e:dc:52:ff:85:d3:
cd:d0:5b:05:03:64:98:49:f8:8b:e6:59:98:77:75:ef:65:c9:
a6:e5:43:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:48 2025 by rpki-client