Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1x8bNf_FmZmYHcECw0FPEZe8hWo.roa
File: 1x8bNf_FmZmYHcECw0FPEZe8hWo.roa (raw, json)
Hash identifier: uaG5QfO9XJwoiqxvqGyk4ZFLAINddP2naxn5A76rt+I=
Subject key identifier: D7:1F:1B:35:FF:C5:99:99:98:1D:C1:02:C3:41:4F:11:97:BC:85:6A
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018B1596A5A33093266B8B42494964B82843
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1x8bNf_FmZmYHcECw0FPEZe8hWo.roa
Signing time: Mon 09 Oct 2023 17:57:56 +0000
ROA not before: Mon 09 Oct 2023 17:57:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.227.0/24 maxlen: 24
5.105.13.0/24 maxlen: 24
217.67.76.0/23 maxlen: 24
5.105.52.0/24 maxlen: 24
5.105.52.0/22 maxlen: 22
5.105.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:15:96:a5:a3:30:93:26:6b:8b:42:49:49:64:b8:28:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 9 17:57:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d71f1b35ffc59999981dc102c3414f1197bc856a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:c4:d9:29:1f:d5:ad:0f:4c:37:cc:c8:4a:
b4:19:c8:e2:53:4a:bf:3c:4f:03:50:49:58:0d:b6:
f2:04:95:7a:c8:44:8e:b7:39:0d:76:a6:0b:10:06:
cb:35:4d:01:54:a3:77:70:54:49:57:a9:95:14:60:
1a:81:ef:ca:39:e2:1f:fa:4d:8b:40:29:82:ec:e8:
a5:d5:05:64:bb:a4:e6:ed:89:a4:4e:74:b5:e4:fa:
b8:e0:54:b0:55:73:d0:66:34:94:33:e1:a9:fd:cc:
0d:f1:6b:0a:7e:48:58:b9:24:dd:63:87:75:9c:89:
6d:9c:45:bf:41:87:90:c9:f8:47:aa:3d:73:fe:cc:
2b:bd:43:b4:86:5f:2c:f4:46:38:89:27:36:e4:23:
e0:e7:53:66:73:70:0c:e9:38:10:16:fa:a9:7e:56:
46:bd:5a:65:81:ea:9b:4e:dc:ed:f2:b0:86:f9:eb:
38:ea:dd:bc:04:19:94:78:74:ca:65:61:9a:99:a8:
48:71:26:48:7b:c7:97:ab:93:b7:9b:1e:89:46:b3:
27:33:df:93:ff:95:1e:0e:ee:3c:32:ed:fb:f0:e6:
65:c1:a9:4d:76:7d:5c:b5:f0:6b:82:ea:91:ff:2e:
75:93:09:44:45:1f:a5:2b:21:35:66:f3:fc:e1:f7:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1F:1B:35:FF:C5:99:99:98:1D:C1:02:C3:41:4F:11:97:BC:85:6A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1x8bNf_FmZmYHcECw0FPEZe8hWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.13.0/24
5.105.52.0/22
5.105.219.0/24
5.105.227.0/24
217.67.76.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:10:b3:87:37:60:bc:02:6e:a8:9f:e6:e3:5a:62:c9:7f:a8:
0b:04:63:42:54:3b:e1:fb:2e:ee:80:93:4f:6b:98:b6:03:08:
be:5d:2b:86:44:10:5c:39:86:65:b8:56:67:c7:cf:4a:69:bf:
21:20:f7:2a:ba:09:81:a0:53:b3:1c:c3:3c:0a:81:37:6a:93:
90:d8:9c:82:b1:af:6e:b6:6c:68:61:49:3c:7f:9e:74:5f:05:
64:6b:92:fd:2e:00:d0:5f:22:d7:69:75:42:a3:04:78:dd:2f:
32:ed:63:55:07:24:66:f8:a5:53:19:56:c6:08:88:3f:fb:b5:
8c:54:06:70:56:28:d8:b3:50:bb:d6:dd:02:b0:a0:df:da:84:
30:a4:b2:8d:f4:a1:cb:af:9d:b1:f2:c5:af:50:0b:5b:1a:e2:
22:2d:65:e8:08:e9:dd:1e:45:3d:15:02:4a:df:66:d5:1f:6b:
0f:fe:8f:fe:8c:96:48:e2:cb:6a:cd:39:bc:2a:92:54:72:5e:
51:3f:c7:f2:d8:79:01:4a:13:be:fd:23:07:df:ae:63:df:f1:
0a:42:49:25:5c:56:99:ad:3b:6f:ff:2e:93:44:89:08:a5:bc:
43:69:b1:30:ec:9d:51:94:94:67:97:bf:23:57:81:8b:cd:37:
99:9e:5c:3c
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYsVlqWjMJMma4tCSUlkuChDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMxMDA5MTc1NzU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzFmMWIzNWZmYzU5OTk5OTgxZGMxMDJjMzQxNGYxMTk3YmM4NTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqLE2Skf1a0PTDfMyEq0GcjiU0q/
PE8DUElYDbbyBJV6yESOtzkNdqYLEAbLNU0BVKN3cFRJV6mVFGAage/KOeIf+k2L
QCmC7Oil1QVku6Tm7YmkTnS15Pq44FSwVXPQZjSUM+Gp/cwN8WsKfkhYuSTdY4d1
nIltnEW/QYeQyfhHqj1z/swrvUO0hl8s9EY4iSc25CPg51Nmc3AM6TgQFvqpflZG
vVplgeqbTtzt8rCG+es46t28BBmUeHTKZWGamahIcSZIe8eXq5O3mx6JRrMnM9+T
/5UeDu48Mu378OZlwalNdn1ctfBrguqR/y51kwlERR+lKyE1ZvP84fchKQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNcfGzX/xZmZmB3BAsNBTxGXvIVqMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvMXg4Yk5mX0ZtWm1ZSGNFQ3cwRlBFWmU4aFdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABWkNAwQC
BWk0AwQABWnbAwQABWnjAwQB2UNMMA0GCSqGSIb3DQEBCwUAA4IBAQCdELOHN2C8
Am6on+bjWmLJf6gLBGNCVDvh+y7ugJNPa5i2Awi+XSuGRBBcOYZluFZnx89Kab8h
IPcqugmBoFOzHMM8CoE3apOQ2JyCsa9utmxoYUk8f550XwVka5L9LgDQXyLXaXVC
owR43S8y7WNVByRm+KVTGVbGCIg/+7WMVAZwVijYs1C71t0CsKDf2oQwpLKN9KHL
r52x8sWvUAtbGuIiLWXoCOndHkU9FQJK32bVH2sP/o/+jJZI4stqzTm8KpJUcl5R
P8fy2HkBShO+/SMH365j3/EKQkklXFaZrTtv/y6TRIkIpbxDabEw7J1RlJRnl78j
V4GLzTeZnlw8
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:18 2025 by rpki-client