Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1gTNDkDw6Z89IXAMRFbYGRoWlHU.roa
File: 1gTNDkDw6Z89IXAMRFbYGRoWlHU.roa (raw, json)
Hash identifier: iEmBaVbqZu7NaQjKi1D6saY7zEXfIUzUr/YjdyddRnE=
Subject key identifier: D6:04:CD:0E:40:F0:E9:9F:3D:21:70:0C:44:56:D8:19:1A:16:94:75
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018AFBD9A20B62326BA7EC46AE17356F7C1F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1gTNDkDw6Z89IXAMRFbYGRoWlHU.roa
Signing time: Wed 04 Oct 2023 18:00:58 +0000
ROA not before: Wed 04 Oct 2023 18:00:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 5.105.22.0/24 maxlen: 24
5.105.128.0/24 maxlen: 24
217.67.78.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:d9:a2:0b:62:32:6b:a7:ec:46:ae:17:35:6f:7c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 4 18:00:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d604cd0e40f0e99f3d21700c4456d8191a169475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:24:e7:29:0a:79:d4:2c:ba:4a:c1:22:27:
76:aa:a7:da:9b:ad:65:1d:ab:95:41:5a:41:89:5f:
c3:ae:e8:d5:c1:0b:4d:55:60:64:7b:44:a7:64:06:
9d:a3:72:28:09:16:70:de:e7:43:94:09:34:16:7c:
f6:49:3d:33:c4:b3:2e:eb:9c:bd:47:7f:0a:e8:11:
6e:7b:0e:43:74:d5:38:69:a0:32:61:0f:6e:71:72:
48:1c:7d:5a:c1:37:7a:f1:65:96:39:7d:9d:4c:50:
f0:18:0d:85:36:7c:05:7e:67:6a:bd:1e:ad:bd:26:
63:a6:2e:30:56:67:11:b4:8d:5c:0c:05:71:9c:08:
83:2a:ad:a7:02:98:ac:3d:ba:4a:7d:d7:86:84:8f:
32:51:78:b9:0f:ab:87:06:ef:db:2a:43:93:99:9a:
a1:c4:2e:63:69:a3:70:14:60:05:1a:21:0e:25:39:
3e:2c:c1:49:d6:3f:41:d7:81:9a:d9:74:1d:77:28:
85:92:e0:d2:0f:6a:31:71:07:e5:70:80:47:f9:6a:
60:c3:4f:bb:ab:ba:c3:6b:73:d3:42:e3:45:89:d6:
3e:56:03:35:a9:2f:56:ea:cc:aa:2c:9a:02:53:07:
79:1b:06:93:74:18:71:17:c4:24:75:82:82:a3:79:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:04:CD:0E:40:F0:E9:9F:3D:21:70:0C:44:56:D8:19:1A:16:94:75
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1gTNDkDw6Z89IXAMRFbYGRoWlHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.22.0/24
5.105.128.0/24
217.67.78.0/23
Signature Algorithm: sha256WithRSAEncryption
94:39:14:cd:04:68:8f:07:0b:62:97:9a:50:e3:ae:cd:a9:b8:
3e:e8:20:32:9e:98:a8:82:0d:ca:9a:61:70:af:d7:01:65:1a:
53:23:e3:7a:88:29:e6:73:b6:e4:f3:1e:6d:b2:e7:d6:f5:45:
fd:e8:b7:80:6c:15:10:cd:24:d5:db:21:87:b0:03:5d:a0:e2:
30:d7:68:1e:e8:da:30:e6:88:2b:1c:b7:bc:1a:b3:37:81:31:
5e:ec:41:e8:21:c2:61:99:30:10:ff:41:ef:88:2a:38:9b:ad:
db:46:fa:c6:72:14:62:04:34:77:69:c7:64:79:a2:95:73:ad:
03:e4:fa:74:56:fc:f1:f7:c0:a7:4e:93:41:ae:dd:19:1b:e7:
aa:42:a2:07:de:ea:a7:8c:cb:5b:64:e1:71:85:a2:83:b2:a8:
cd:1a:ee:7c:c3:63:7a:ab:f4:77:81:5a:59:3e:00:d8:7a:78:
83:1d:82:03:1c:ab:9e:a8:b9:d4:5b:dd:c4:85:92:72:b8:05:
cd:90:ff:ef:ff:07:6f:c8:0a:db:ae:db:0f:7d:90:c8:63:3e:
e9:96:87:55:ad:f7:f9:7b:51:86:12:83:16:98:60:00:e9:13:
70:7f:5c:8b:08:f6:76:17:4c:9e:a2:df:c0:77:f8:82:03:49:
96:e6:35:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:25:54 2025 by rpki-client