Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yLtXz2W-IJl8jtQlER6RhmHyXWI.roa
File: yLtXz2W-IJl8jtQlER6RhmHyXWI.roa (raw, json)
Hash identifier: FDHf/fEX6cDFfnpP3umNAVdKLjrNtWWGi2G35o/b/o4=
Subject key identifier: C8:BB:57:CF:65:BE:20:99:7C:8E:D4:25:11:1E:91:86:61:F2:5D:62
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018447859EBB5449FE7CED01382016CBBB0E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yLtXz2W-IJl8jtQlER6RhmHyXWI.roa
Signing time: Sat 05 Nov 2022 11:20:50 +0000
ROA not before: Sat 05 Nov 2022 11:20:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 5.105.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:47:85:9e:bb:54:49:fe:7c:ed:01:38:20:16:cb:bb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 5 11:20:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8bb57cf65be20997c8ed425111e918661f25d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:32:85:67:cd:00:a8:9a:83:d2:c9:bc:a3:
98:99:d1:d5:1d:85:06:7a:4b:a5:7c:0b:a7:75:23:
6f:88:4b:4e:27:73:ba:27:98:01:0c:95:4b:af:39:
9a:42:b6:92:7e:f1:01:de:46:05:10:0d:9b:b7:7e:
56:cf:5f:c5:5a:d2:f1:6e:25:96:4d:87:22:b5:de:
55:57:12:e0:6b:89:19:2c:8c:fc:27:fb:6b:fb:e2:
d6:6b:d5:c4:ac:76:5b:8a:de:92:ee:85:3b:89:53:
62:4b:40:21:08:c4:c5:35:5f:8c:04:ca:7c:9e:5f:
1c:45:38:d1:73:43:3e:2a:21:91:66:cc:e5:8b:70:
34:0a:c6:5b:59:c0:9c:9a:21:be:42:a2:0c:81:06:
5b:f5:ec:c4:36:b8:07:e5:50:7f:cb:2d:98:f2:54:
84:79:d3:79:13:b4:1f:7d:ac:94:75:a4:df:31:11:
24:a0:c8:d2:af:4f:0c:4e:9f:d8:e3:0a:ad:cf:24:
d4:78:cd:74:c2:26:57:e5:21:f5:29:88:fe:23:26:
09:52:74:df:17:7f:1b:37:5e:d5:36:90:f8:1a:f9:
05:d9:76:90:ab:e8:c8:27:33:98:bf:20:b1:fe:8e:
68:d6:4f:4c:0a:01:c5:0c:6f:e1:16:6c:b2:0e:a1:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BB:57:CF:65:BE:20:99:7C:8E:D4:25:11:1E:91:86:61:F2:5D:62
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yLtXz2W-IJl8jtQlER6RhmHyXWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.17.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:3d:29:f2:24:dc:e9:2f:ec:f3:c9:5a:9d:a2:c7:42:42:6a:
62:49:54:a5:85:7e:9a:d8:4e:c0:ad:8b:a6:6a:8c:c6:5a:4c:
4a:98:77:d2:85:b8:65:98:a0:03:6d:3c:d4:ff:00:e2:d0:d8:
f4:f4:82:bc:69:96:cc:b9:91:93:b4:24:99:a5:cf:85:68:c1:
09:45:28:36:57:f3:6f:e9:22:c6:fb:cc:9c:4d:f1:b6:e6:0d:
b7:31:9e:17:64:34:d8:85:12:35:96:35:29:b6:a6:73:0b:4e:
16:9e:39:56:41:8d:aa:e7:45:bc:78:30:a5:08:3f:6c:aa:0a:
6b:bc:d3:7c:18:e3:e4:99:81:ff:29:64:d4:06:0a:d8:f4:ef:
43:0a:06:24:93:70:41:d3:70:cc:fc:14:51:3a:e4:d7:e7:68:
ec:59:07:36:e0:58:4c:92:ac:68:60:ad:c3:8e:9e:e9:96:e7:
b7:3f:23:ae:41:e8:35:80:66:13:86:a8:49:e7:bc:fb:1c:e8:
ec:16:f6:f6:12:c3:16:43:2a:54:82:dc:ef:a9:20:ac:6a:af:
55:06:3a:c8:92:4e:13:4b:e0:45:16:dc:f1:74:79:cd:c0:18:
ce:56:41:0c:b9:fd:e2:27:dc:03:cf:bc:f7:6c:66:91:84:bb:
99:ad:fa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org