Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1nJyo-u9sJ2eiBpbXQHktQMk_GQ.roa
File: 1nJyo-u9sJ2eiBpbXQHktQMk_GQ.roa (raw, json)
Hash identifier: P3fpIAn8rnrEObd6J+CX3bK350gvopLv8E4HjCh4/qA=
Subject key identifier: D6:72:72:A3:EB:BD:B0:9D:9E:88:1A:5B:5D:01:E4:B5:03:24:FC:64
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018692375816836EE15EA04BBDC38A3A44ED
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1nJyo-u9sJ2eiBpbXQHktQMk_GQ.roa
Signing time: Mon 27 Feb 2023 09:32:25 +0000
ROA not before: Mon 27 Feb 2023 09:32:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46573
IP address blocks: 5.105.125.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.28.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:37:58:16:83:6e:e1:5e:a0:4b:bd:c3:8a:3a:44:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 27 09:32:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d67272a3ebbdb09d9e881a5b5d01e4b50324fc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:b9:59:86:2f:f5:09:24:a1:ff:a5:8a:98:
65:eb:0c:c5:39:38:9b:41:38:70:6d:23:01:1b:18:
a2:5c:0e:cd:50:74:fe:b4:9a:28:79:b8:73:47:7c:
c2:0e:35:22:34:a6:cc:f6:59:8b:61:ba:2f:1f:7c:
a6:72:92:c5:46:dd:9f:f0:c9:8f:23:17:51:d2:6d:
f9:30:46:2c:19:41:bf:95:9d:0f:58:42:c5:4f:ce:
5f:5a:05:a8:0f:1c:da:51:40:26:9a:74:90:ae:b1:
5b:26:60:6a:ba:a9:e7:53:6e:8a:47:76:7e:cf:01:
25:3d:a8:3d:8b:01:af:0b:ee:3f:f1:96:84:0c:f0:
63:6c:2f:de:57:66:84:12:01:f4:2b:7c:b8:51:77:
fa:3a:c4:ca:b1:e8:c5:a7:58:c5:1a:1d:37:5f:27:
93:96:d5:29:74:2d:2d:87:3b:46:e2:c7:04:e5:60:
0b:d5:02:02:33:d9:2d:75:9a:15:be:ba:d7:da:ed:
61:12:fb:a4:29:fc:fa:1c:2d:e7:9e:ce:5d:65:51:
5a:c0:32:e6:c6:87:28:13:16:3c:d8:a5:73:2d:44:
0e:97:e1:6e:47:c9:31:eb:c4:9b:26:c1:7c:b1:77:
84:cc:57:92:53:f0:03:56:87:ab:a9:89:36:00:1c:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:72:72:A3:EB:BD:B0:9D:9E:88:1A:5B:5D:01:E4:B5:03:24:FC:64
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1nJyo-u9sJ2eiBpbXQHktQMk_GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.28.0/24
5.105.64.0/24
5.105.77.0/24
5.105.125.0/24
5.105.218.0/24
5.105.229.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ec:b5:90:fc:b9:ee:14:f4:1d:ce:70:ea:37:cb:0a:0c:18:
cd:93:7a:09:90:8d:b7:89:fa:97:1a:9d:0a:a8:3f:c2:75:49:
6c:41:73:9b:9a:6c:28:f0:0e:7a:c0:6b:67:54:5e:ad:33:23:
a1:af:17:02:89:0f:ae:cc:36:bb:84:63:b0:9a:89:cf:4d:fd:
13:9d:64:b0:97:60:ab:92:1f:15:96:32:28:c3:ec:dd:15:b6:
ba:81:d3:41:e5:2b:45:67:1c:c0:1c:d6:1f:93:69:d6:db:73:
91:95:09:ae:f4:40:97:44:2e:62:67:84:86:2b:65:05:cf:40:
4a:8b:50:7d:a9:21:d0:80:b2:a5:f9:b3:d4:c6:7f:e2:fd:af:
9a:72:f1:b3:e2:f0:6a:7e:20:ad:72:f9:c7:25:ce:45:97:77:
dd:6d:b6:88:0d:53:19:bc:59:a7:75:b3:d1:7f:73:6b:e6:a8:
76:63:ca:e6:00:28:a3:9f:d8:66:2c:94:98:26:a5:67:3b:24:
54:76:95:23:a7:ce:f1:b9:e5:e5:79:2a:c7:53:6f:ff:2f:e7:
26:77:a4:7b:82:64:18:36:92:47:b3:d4:0e:d5:e3:83:d4:75:
d9:67:cc:3c:73:b8:67:dd:82:8d:92:d7:83:9d:12:76:ff:a4:
42:aa:3c:fb
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYaSN1gWg27hXqBLvcOKOkTtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMjI3MDkzMjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjcyNzJhM2ViYmRiMDlkOWU4ODFhNWI1ZDAxZTRiNTAzMjRmYzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfS5WYYv9Qkkof+liphl6wzFOTib
QThwbSMBGxiiXA7NUHT+tJooebhzR3zCDjUiNKbM9lmLYbovH3ymcpLFRt2f8MmP
IxdR0m35MEYsGUG/lZ0PWELFT85fWgWoDxzaUUAmmnSQrrFbJmBquqnnU26KR3Z+
zwElPag9iwGvC+4/8ZaEDPBjbC/eV2aEEgH0K3y4UXf6OsTKsejFp1jFGh03XyeT
ltUpdC0thztG4scE5WAL1QICM9ktdZoVvrrX2u1hEvukKfz6HC3nns5dZVFawDLm
xocoExY82KVzLUQOl+FuR8kx68SbJsF8sXeEzFeSU/ADVoerqYk2ABwGLwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFNZycqPrvbCdnogaW10B5LUDJPxkMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvMW5KeW8tdTlzSjJlaUJwYlhRSGt0UU1rX0dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQABWkcAwQA
BWlAAwQABWlNAwQABWl9AwQABWnaAwQABWnlMA0GCSqGSIb3DQEBCwUAA4IBAQBS
7LWQ/LnuFPQdznDqN8sKDBjNk3oJkI23ifqXGp0KqD/CdUlsQXObmmwo8A56wGtn
VF6tMyOhrxcCiQ+uzDa7hGOwmonPTf0TnWSwl2Crkh8VljIow+zdFba6gdNB5StF
ZxzAHNYfk2nW23ORlQmu9ECXRC5iZ4SGK2UFz0BKi1B9qSHQgLKl+bPUxn/i/a+a
cvGz4vBqfiCtcvnHJc5Fl3fdbbaIDVMZvFmndbPRf3Nr5qh2Y8rmACijn9hmLJSY
JqVnOyRUdpUjp87xueXleSrHU2//L+cmd6R7gmQYNpJHs9QO1eOD1HXZZ8w8c7hn
3YKNkteDnRJ2/6RCqjz7
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:43 2025 by rpki-client