Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4XMeMwKezbtluu-biEiz0hHdWBU.roa
File: 4XMeMwKezbtluu-biEiz0hHdWBU.roa (raw, json)
Hash identifier: vUSQOz+l1LcPqrbReG8i5Udjze+PlZI7YyCZIpY4eFs=
Subject key identifier: E1:73:1E:33:02:9E:CD:BB:65:BA:EF:9B:88:48:B3:D2:11:DD:58:15
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5B1569E8E84E1C9AFC41D0D5BF208
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4XMeMwKezbtluu-biEiz0hHdWBU.roa
Signing time: Sun 01 Jan 2023 05:54:53 +0000
ROA not before: Sun 01 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 5.105.243.0/24 maxlen: 24
5.105.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b1:56:9e:8e:84:e1:c9:af:c4:1d:0d:5b:f2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1731e33029ecdbb65baef9b8848b3d211dd5815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:87:50:2a:04:79:87:cd:eb:36:c8:18:37:
c4:3b:09:20:69:58:1d:fa:9a:d2:a0:20:cd:cf:19:
96:fd:8e:ab:d4:03:fb:0e:16:24:5c:19:de:5d:89:
46:e8:b3:e6:f5:72:9b:c2:d2:80:35:b2:e1:b4:55:
c8:f0:07:d2:fc:ee:80:d8:65:6d:38:38:c8:24:48:
8a:0f:b9:ca:05:21:00:82:d3:a9:f0:ad:1b:a0:a5:
3f:f4:a4:96:31:b0:a1:25:0a:f1:68:a9:b5:98:73:
16:2f:9c:b5:cb:50:86:fb:36:50:61:6f:7a:84:aa:
0b:05:d0:2b:ab:14:8b:e3:61:81:21:0b:1b:78:0b:
e7:f1:21:b5:58:b7:08:f8:fa:77:d2:ac:01:6f:8b:
4b:6d:16:cb:80:f8:7d:71:ce:da:eb:25:76:7a:a6:
61:00:23:18:40:c0:05:91:1f:67:70:11:6c:ad:bc:
26:9b:11:c2:9f:1c:ff:4a:f6:cb:60:10:27:e9:90:
de:e5:e6:89:07:64:a5:f2:48:c6:80:3c:d9:96:80:
42:9a:53:c8:bc:d0:bd:ad:bd:7d:ec:eb:b8:de:43:
ff:49:c6:48:3f:f2:e4:96:0c:ae:72:e1:53:ce:5e:
43:5b:69:92:c9:4f:02:9c:fd:d5:cc:74:ea:49:45:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:73:1E:33:02:9E:CD:BB:65:BA:EF:9B:88:48:B3:D2:11:DD:58:15
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4XMeMwKezbtluu-biEiz0hHdWBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.243.0/24
5.105.246.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f8:f1:ad:16:a8:89:2f:0e:ad:53:1a:45:aa:1e:e8:bd:9e:
82:ec:9b:c9:6e:1e:81:f6:e7:1a:57:11:86:2c:75:be:07:cf:
a7:11:4f:cd:d8:4e:fc:fe:c9:b3:5c:65:f5:ba:38:f0:e1:96:
85:2c:c4:a6:0b:42:95:98:01:96:50:53:3a:32:bc:27:5a:84:
c9:82:95:b0:8a:70:90:68:da:96:ab:5d:10:47:67:57:e8:c2:
62:e8:72:18:13:0b:e0:03:ba:0a:85:28:3f:1a:a4:58:44:05:
52:f9:9a:4e:92:8c:d2:b2:2c:a1:ab:4a:96:5e:ba:10:c3:c0:
52:92:1f:24:2f:d6:26:97:f0:e4:99:54:23:f8:2a:83:41:23:
73:34:54:0e:f6:ff:8d:1c:37:52:80:d3:42:43:66:68:de:ef:
bf:eb:e2:57:ca:04:3a:90:02:6e:2b:bc:38:0d:e7:e6:94:82:
13:03:60:a4:d0:92:c3:07:49:03:2c:4a:56:74:66:7a:80:11:
d4:e2:58:03:bd:8c:4d:01:81:3c:a4:b2:ab:eb:2f:f1:ad:fe:
9a:e2:33:30:f1:47:6a:b1:f3:a6:cc:9a:94:c0:ce:12:7f:0d:
ce:27:8a:6b:7b:5a:b7:17:4e:48:2a:e5:ad:2c:15:7c:6c:8b:
48:34:6a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:55:26 2025 by rpki-client