Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3S1hJHq5cEPoz2HL0rDgDjA-KG0.roa
File: 3S1hJHq5cEPoz2HL0rDgDjA-KG0.roa (raw, json)
Hash identifier: ydqM9wck9/0lV4ak6O6EFsRr8pgKdM3EZ5GaFbctXWo=
Subject key identifier: DD:2D:61:24:7A:B9:70:43:E8:CF:61:CB:D2:B0:E0:0E:30:3E:28:6D
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187C8575F4887E737870535EE0A48E707BE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3S1hJHq5cEPoz2HL0rDgDjA-KG0.roa
Signing time: Fri 28 Apr 2023 14:49:41 +0000
ROA not before: Fri 28 Apr 2023 14:49:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.105.168.0/24 maxlen: 24
5.105.65.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c8:57:5f:48:87:e7:37:87:05:35:ee:0a:48:e7:07:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 28 14:49:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd2d61247ab97043e8cf61cbd2b0e00e303e286d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:0a:9a:3c:9d:1d:db:ff:82:6f:99:b5:25:
c3:77:1d:bf:01:69:11:c4:0d:41:b5:da:c5:a7:cf:
63:1c:4e:30:1d:2e:f1:b3:58:f6:5a:56:64:a5:9d:
77:1a:5c:61:df:3c:ef:c2:a8:a6:c4:12:a2:1e:28:
bf:f2:03:14:b9:8f:e6:8f:d4:fe:5b:dc:dc:55:16:
b3:51:08:a5:c7:52:4a:f1:4c:c8:81:02:f1:d7:eb:
d8:0e:06:1b:98:c5:35:29:30:fe:8b:46:39:62:02:
da:73:97:d8:35:a7:bd:71:96:8c:bf:f6:2f:b5:7f:
3a:db:6b:7c:07:48:92:2e:6b:d7:87:a7:d6:9f:62:
4a:df:bd:ae:82:af:0f:63:7d:99:ea:fa:8f:3d:a8:
8a:66:4c:d2:90:9a:6c:37:3e:9c:27:3d:13:29:02:
25:dd:b8:4f:a8:09:af:37:5b:a8:2a:25:62:c8:5e:
0f:35:92:72:95:50:c7:e0:9d:2e:3d:f1:99:f1:25:
fe:82:78:9c:2c:ee:d0:4a:57:95:2e:c3:ea:d9:59:
72:b1:91:be:e4:1d:63:cf:d1:00:94:2d:44:4f:94:
14:8c:8a:a5:c7:da:dd:0c:53:53:7d:19:bd:c2:05:
d7:36:00:af:33:50:da:7e:e8:a4:13:bc:52:16:2c:
2c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2D:61:24:7A:B9:70:43:E8:CF:61:CB:D2:B0:E0:0E:30:3E:28:6D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3S1hJHq5cEPoz2HL0rDgDjA-KG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.19.0/24
5.105.24.0/23
5.105.33.0/24
5.105.40.0/24
5.105.43.0/24
5.105.50.0/24
5.105.57.0/24
5.105.65.0/24
5.105.81.0/24
5.105.96.0/24
5.105.168.0/24
5.105.184.0/24
5.105.218.0/24
5.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:b0:f1:ab:67:88:23:f5:bf:37:2e:e2:86:48:08:2f:d5:90:
d9:bb:8c:1a:2e:d1:1a:3e:e8:51:a0:65:88:e4:f9:28:e4:54:
3b:b1:bc:04:62:ac:54:b8:ad:c7:e8:24:3a:27:34:81:c1:f4:
94:6f:91:74:2c:7f:a3:20:b9:0a:f7:a1:f1:0e:67:a1:59:77:
fe:0a:2d:84:82:56:f2:80:79:36:ba:15:8d:63:8e:5a:d8:3f:
9b:27:66:23:b4:2f:65:fc:72:95:59:01:84:e3:dc:7c:d5:00:
08:bc:25:55:aa:b7:ac:12:2d:72:a0:66:ad:f0:a2:a3:8f:20:
2a:f7:07:e7:45:4a:8e:05:63:15:17:4b:f3:e4:93:68:b7:b9:
06:cf:d5:32:ba:eb:64:c7:1f:e3:46:fa:d3:13:42:d8:36:b7:
11:c6:a7:2c:5e:ac:b1:77:a8:95:1f:7f:36:7b:6a:20:b2:f4:
ad:52:64:fd:97:8e:8e:89:30:3e:10:c1:61:06:4e:c6:61:b0:
df:b9:75:2e:7a:92:c5:0b:45:7d:38:97:34:19:cd:4b:c6:b6:
c9:aa:31:30:98:6c:33:a9:34:f2:35:7f:32:64:5f:67:37:a3:
85:d8:46:4e:b1:01:d5:bb:ff:33:4f:57:06:9c:7c:98:40:d5:
af:80:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:05:29 2025 by rpki-client