Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/whEAh3zr9qdFBtN1M8dk4mA5JDk.roa
File: whEAh3zr9qdFBtN1M8dk4mA5JDk.roa (raw, json)
Hash identifier: O8a2UmqQ7onmFWOfTJ5iCkCX9OMWtjIziv9hQecmPVA=
Subject key identifier: C2:11:00:87:7C:EB:F6:A7:45:06:D3:75:33:C7:64:E2:60:39:24:39
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018408D81E1D853EC7837B5148666DF38D25
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/whEAh3zr9qdFBtN1M8dk4mA5JDk.roa
Signing time: Mon 24 Oct 2022 07:14:51 +0000
ROA not before: Mon 24 Oct 2022 07:14:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 5.105.238.0/24 maxlen: 24
5.105.241.0/24 maxlen: 24
5.105.27.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.188.0/24 maxlen: 24
5.105.98.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:08:d8:1e:1d:85:3e:c7:83:7b:51:48:66:6d:f3:8d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 24 07:14:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c21100877cebf6a74506d37533c764e260392439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:c3:90:1c:95:16:5a:12:81:77:27:da:ed:
5f:49:38:f9:53:78:8e:52:fe:67:4d:76:86:a5:27:
8a:b5:70:bb:2d:82:90:d7:4f:98:16:4e:67:7d:64:
92:6e:14:72:a5:f8:60:a8:a9:b1:33:bf:14:0a:c3:
00:ae:bd:a4:e6:47:5d:63:66:13:d8:64:de:20:5e:
a9:4a:37:85:94:3f:57:a9:df:f2:99:fc:50:85:82:
9d:81:85:bc:60:96:06:ef:52:cb:52:a9:e8:51:5e:
cd:2d:f0:7d:33:67:1b:85:d0:d6:74:27:dc:20:48:
70:48:45:7d:23:79:ea:56:b1:e2:8a:cb:68:7d:8c:
53:77:ad:54:5c:34:74:0d:6e:2b:5e:55:c2:ab:dd:
4b:ab:44:be:59:9b:39:a1:d5:9f:d8:19:85:e0:eb:
ec:13:1d:4a:e8:a8:b7:37:79:6a:ce:b6:dd:41:fd:
fd:12:5e:c9:29:72:6e:b1:04:cd:a2:e5:d3:0a:d0:
3b:8a:83:99:8c:4f:28:e8:49:1f:b6:51:c1:2b:8c:
32:21:ba:de:25:a7:1a:52:0e:81:db:67:13:6b:2d:
58:7e:93:81:f6:d4:07:ab:fe:45:c6:c1:ec:c5:7a:
f9:94:94:f6:8a:03:f4:75:7f:45:95:79:a6:95:8a:
6b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:11:00:87:7C:EB:F6:A7:45:06:D3:75:33:C7:64:E2:60:39:24:39
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/whEAh3zr9qdFBtN1M8dk4mA5JDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.27.0/24
5.105.98.0/24
5.105.188.0/24
5.105.204.0/24
5.105.238.0/24
5.105.241.0/24
5.105.252.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:04:60:da:da:5e:b9:f2:4e:ee:3c:de:8f:ad:d1:81:ec:24:
15:75:06:da:d3:37:8c:4f:a5:c5:b6:90:5f:c6:86:e6:d9:6f:
84:81:fc:39:d6:5e:e6:2e:c4:b6:99:03:41:13:40:ab:c0:dd:
2a:4b:b0:23:86:f9:97:b3:27:ef:c4:97:25:c2:9c:c6:b8:c3:
33:eb:a0:c7:04:63:57:a8:ec:da:45:2f:3b:27:e0:05:72:fa:
1c:7c:8c:9d:f8:1c:db:0d:28:d7:85:8b:9d:34:10:77:26:e6:
ad:0a:c9:b1:49:29:1b:10:a4:b7:8b:1d:30:ba:24:47:49:d8:
a8:51:2d:96:6b:35:59:f3:f7:28:a7:41:80:77:a4:9e:c2:3b:
5c:f5:48:a2:37:f1:e9:d4:9b:62:76:13:e5:05:ee:39:51:f9:
08:58:b2:3f:ca:13:cc:5d:ff:d3:f8:6d:5a:3d:70:79:ff:fd:
2a:25:a9:b7:50:f7:09:e5:43:09:73:3f:b8:6f:55:38:09:6a:
26:e1:da:8e:a9:26:50:fe:3a:24:ef:18:21:ba:4a:6d:ac:fc:
78:fd:62:44:4c:2e:31:87:66:eb:d5:0c:c0:4a:27:bd:47:c4:
4d:3f:7a:cd:9d:e5:92:78:2a:da:16:e8:77:fe:ed:9f:50:d8:
9d:2f:e1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org