Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wIdmwPLdK4GF6SffCNYbfMLGwZg.roa
File: wIdmwPLdK4GF6SffCNYbfMLGwZg.roa (raw, json)
Hash identifier: vszPgznLI09UcTOqgKIYa2aPJtt9zJEAnDVDqv13irM=
Subject key identifier: C0:87:66:C0:F2:DD:2B:81:85:E9:27:DF:08:D6:1B:7C:C2:C6:C1:98
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183F6EE3EFC07CEB06E77204FDAF4DF1A64
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wIdmwPLdK4GF6SffCNYbfMLGwZg.roa
Signing time: Thu 20 Oct 2022 19:45:52 +0000
ROA not before: Thu 20 Oct 2022 19:45:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15083
IP address blocks: 5.105.128.0/24 maxlen: 24
5.105.85.0/24 maxlen: 24
5.105.99.0/24 maxlen: 24
5.105.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:ee:3e:fc:07:ce:b0:6e:77:20:4f:da:f4:df:1a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 20 19:45:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c08766c0f2dd2b8185e927df08d61b7cc2c6c198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:a2:83:36:db:db:ef:e8:c8:55:00:4e:01:
84:60:9a:50:cb:36:86:5a:67:2b:10:86:86:e9:cc:
29:3e:2c:cf:1f:65:34:f6:c7:09:8e:ad:32:2b:04:
19:7a:f8:d8:b8:4f:81:d6:b1:46:85:ea:a6:92:91:
fd:c4:10:71:f4:1b:8e:ed:53:ae:e9:ba:67:87:14:
68:2a:df:4c:da:f9:62:3b:a2:3a:d2:41:4d:9d:c6:
4d:c3:af:e4:89:d1:26:9e:ce:15:6c:cc:34:62:af:
2f:6d:31:76:7f:ae:db:3d:3e:c8:7f:ee:82:69:94:
fc:af:2d:c7:f5:b9:9f:37:d0:02:89:f8:f8:76:76:
8d:46:82:91:30:6a:7d:e8:b3:e8:09:b7:a6:87:3c:
2c:2d:e1:25:e1:5d:64:31:29:03:f6:1f:c5:ec:9d:
d7:12:4d:6f:c5:9e:aa:bf:a1:c8:43:ce:b8:31:8e:
6b:01:00:ea:f1:59:26:ca:1a:00:b1:2e:f3:72:50:
17:a2:d6:e8:bf:a2:af:ec:f0:5a:3c:d6:7c:b4:85:
61:ea:1e:ce:75:1d:39:8a:d5:27:67:01:82:f5:13:
62:58:d5:d4:ce:7a:4d:ea:14:2e:63:6c:b5:61:40:
0a:4a:f4:e0:32:6f:96:0d:83:39:b1:06:4a:bd:d0:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:87:66:C0:F2:DD:2B:81:85:E9:27:DF:08:D6:1B:7C:C2:C6:C1:98
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wIdmwPLdK4GF6SffCNYbfMLGwZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.85.0/24
5.105.99.0/24
5.105.109.0/24
5.105.128.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6e:47:ff:1d:66:90:72:25:6e:88:8b:38:bd:1a:ef:4a:00:
4d:8c:1d:ac:50:f0:24:22:39:da:44:8a:1d:95:83:6f:83:07:
db:f6:33:24:e3:de:0b:67:af:6c:05:80:3d:ed:de:aa:70:eb:
e8:a0:5b:75:39:5e:ea:3b:07:0f:e6:66:c4:09:4f:19:08:08:
f1:2e:3e:0e:04:ca:55:df:eb:78:3a:02:fa:6d:ef:f7:0f:02:
8e:c9:af:0c:3b:fc:ef:32:9c:47:2a:3f:8d:dd:20:96:61:56:
3c:57:72:fc:c1:90:19:6c:45:dd:c3:ed:24:16:7e:dd:13:3c:
48:b0:b0:fc:e9:f8:de:bd:59:40:9d:f5:7a:38:a5:18:d3:0f:
ea:96:a0:22:18:24:cf:a1:ac:25:ae:f7:f6:96:47:02:33:60:
9d:3f:1c:bf:83:ba:82:2d:9d:c0:1a:4d:58:1a:90:ac:6c:78:
a3:2b:9b:bf:a1:97:0b:42:3f:f3:e2:c7:0d:ae:a6:b3:a6:84:
4b:b7:02:21:00:15:fb:23:44:72:6e:08:1d:f5:1b:bc:d4:c3:
69:db:59:3b:9a:48:c6:dd:7f:37:db:27:43:c9:84:42:ed:79:
ee:d4:21:c7:b2:60:81:7b:0a:bc:08:99:2a:73:36:76:fe:b0:
5b:92:78:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org