Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-v3x1DkUMYQfsAKTnrob4CtjfI0.roa
File: 1-v3x1DkUMYQfsAKTnrob4CtjfI0.roa (raw, json)
Hash identifier: qTuO4kNtCoMYf73mIAdRKRte9djA7ppLSj8LFfgFAMg=
Subject key identifier: FA:FD:F1:D4:39:14:31:84:1F:B0:02:93:9E:BA:1B:E0:2B:63:7C:8D
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186834B9BB3554B7AB8C77AAF441A22104E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-v3x1DkUMYQfsAKTnrob4CtjfI0.roa
Signing time: Fri 24 Feb 2023 12:00:15 +0000
ROA not before: Fri 24 Feb 2023 12:00:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:83:4b:9b:b3:55:4b:7a:b8:c7:7a:af:44:1a:22:10:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 24 12:00:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fafdf1d4391431841fb002939eba1be02b637c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:62:a8:ba:47:fd:41:f3:9c:ff:f5:e9:f7:
bf:bc:70:76:54:73:ec:0f:77:44:d1:44:43:4b:c0:
30:6f:ff:f8:f7:6a:0e:c0:08:68:b2:e5:74:94:2d:
04:6d:a2:e5:82:db:c6:2e:17:ef:09:50:d7:90:a3:
82:d4:2c:30:78:63:ff:b4:9a:58:6d:18:a4:e8:99:
a5:dd:5c:55:ab:05:08:a8:e8:98:0f:53:95:2d:56:
9c:4c:fa:6c:1c:4d:4f:c9:6b:8e:36:d7:45:a2:43:
2d:a1:b9:c5:59:0a:bb:1e:76:f7:7b:f9:3d:eb:c8:
dd:00:96:1a:17:80:02:47:1a:2a:d3:71:8d:9c:54:
10:d3:c5:bd:14:cc:a4:2b:17:74:93:63:7a:cb:72:
60:9a:62:fb:b8:76:6e:11:25:ae:df:a6:7f:48:f2:
50:03:91:7f:2f:9c:95:34:5c:55:fc:ad:94:27:0b:
5a:ba:6a:b2:a5:ef:81:d8:c5:8b:41:ce:cb:a8:04:
e5:77:79:49:57:c1:de:b8:08:1c:27:ff:f1:59:9c:
83:90:b4:20:2d:0d:76:8a:7e:c9:d1:5a:49:6d:b4:
46:08:fe:c4:62:71:eb:6a:81:12:36:3c:56:eb:9b:
bf:bf:79:90:99:ce:ac:81:2c:f4:ce:73:c7:9f:9d:
b6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FD:F1:D4:39:14:31:84:1F:B0:02:93:9E:BA:1B:E0:2B:63:7C:8D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-v3x1DkUMYQfsAKTnrob4CtjfI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.12.0/24
5.105.68.0/23
5.105.112.0/22
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:a9:b6:6d:4d:47:68:50:1b:28:36:1e:d1:55:91:32:a8:33:
61:89:b0:ac:9b:ea:e4:fd:bb:63:19:83:a8:8b:83:0c:fe:60:
53:21:4d:af:7a:3a:e4:7f:24:a7:ba:7d:b0:11:ec:27:92:6c:
01:24:cb:b3:7d:31:db:b0:6c:fa:b1:42:7b:38:f4:68:07:dc:
09:09:6f:8c:ae:fc:62:b4:72:c8:89:2c:1f:0c:94:7f:7a:21:
1c:d2:cb:84:4d:dd:ee:ea:e2:c7:7b:08:df:8c:6c:81:9e:7b:
5c:2b:80:a1:74:3a:16:cc:95:fd:1f:d1:f7:16:1e:f3:60:0c:
fb:56:6f:53:06:03:f8:1f:26:d2:5d:fb:7b:16:5f:f3:27:a9:
bf:bf:99:34:41:56:cf:00:0e:f5:ed:57:61:36:fc:40:5d:43:
d4:b0:93:8b:8f:d1:a0:12:a4:43:1f:91:5c:60:09:5a:58:23:
c3:39:ee:0d:01:94:b3:4b:79:c7:34:31:65:5e:74:60:06:b1:
dc:ee:0b:3b:11:04:6c:65:18:5e:b1:ce:bb:f3:31:cd:b2:df:
75:8e:a1:89:d6:a7:cc:c5:f6:15:59:d2:1b:58:eb:81:36:b5:
1f:cd:f9:18:07:db:37:57:50:d5:4c:44:e7:43:63:b2:89:35:
3c:a2:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:23 2025 by rpki-client