Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4rdvlNlHTBayCqn8j4V8gLxnPsA.roa
File: 4rdvlNlHTBayCqn8j4V8gLxnPsA.roa (raw, json)
Hash identifier: s2ZD2O7EXyf4oU8R6m90nUWlA3/2ctEujTExyfR+44E=
Subject key identifier: E2:B7:6F:94:D9:47:4C:16:B2:0A:A9:FC:8F:85:7C:80:BC:67:3E:C0
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01841AAEC35FA331ACC91BC9C5D94265B465
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4rdvlNlHTBayCqn8j4V8gLxnPsA.roa
Signing time: Thu 27 Oct 2022 18:22:51 +0000
ROA not before: Thu 27 Oct 2022 18:22:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396356
IP address blocks: 5.105.231.0/24 maxlen: 24
5.105.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1a:ae:c3:5f:a3:31:ac:c9:1b:c9:c5:d9:42:65:b4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 27 18:22:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2b76f94d9474c16b20aa9fc8f857c80bc673ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:90:e0:7e:81:f1:c7:2b:5c:5c:6e:f2:e9:
38:87:91:f5:a0:88:f8:c3:c5:f9:11:e1:b6:4f:93:
c4:9d:ef:c2:9f:c1:68:9c:69:78:09:c1:95:b9:dc:
79:e2:be:f8:b9:91:ee:62:85:5c:a2:2d:6a:cf:d2:
79:01:65:71:8d:16:2c:7a:4e:5a:df:ad:8d:24:20:
dd:a5:7d:be:9c:e9:b4:48:e9:81:68:1a:06:90:70:
a3:da:df:19:57:90:75:7c:91:ec:49:7e:4f:fc:b7:
25:b7:36:76:4f:75:7b:28:b0:98:a6:7e:45:31:b6:
ec:89:f4:cb:e7:74:c2:32:3b:52:2a:08:0a:59:98:
86:5d:89:95:f8:b1:25:c3:23:f7:0d:95:04:ae:aa:
36:a9:3b:cf:44:98:6c:d0:d5:1d:fb:79:14:96:a7:
54:bb:32:f4:6c:0f:3b:ec:12:fa:e6:ca:d8:e4:71:
17:9c:6f:a7:d5:3e:42:4b:b5:e1:78:51:85:f8:cc:
4e:4d:2a:5d:d2:2e:84:86:d2:a0:6b:fa:e8:f1:c5:
b5:84:c5:8f:36:85:5e:c9:64:a1:a4:d2:7f:e6:ad:
8a:bf:64:4c:a7:04:2f:61:08:04:75:52:c0:eb:76:
94:33:be:61:89:65:e2:e9:f9:92:1c:39:5f:31:98:
9e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B7:6F:94:D9:47:4C:16:B2:0A:A9:FC:8F:85:7C:80:BC:67:3E:C0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/4rdvlNlHTBayCqn8j4V8gLxnPsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.231.0/24
5.105.237.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d4:0d:2b:dd:c8:44:2a:0f:f7:77:45:f6:79:5a:6e:4c:da:
35:3b:3e:1c:99:9f:ec:8e:1f:0b:ec:43:7d:9e:c5:6d:ae:1e:
2e:fc:e4:11:c5:3c:c6:05:6a:d7:ad:92:b6:be:60:59:72:32:
f0:57:ea:60:3c:d1:89:0a:6d:d7:fa:2e:c0:06:90:80:8c:50:
99:05:c1:3d:db:ec:bf:32:3c:1f:56:c6:0e:81:3f:03:fe:62:
95:6e:69:c9:59:27:b1:8d:f7:70:ec:67:62:d8:68:5a:8e:7a:
cf:ad:31:21:6a:78:1f:79:28:31:d1:80:47:86:5d:10:8a:9f:
0d:cb:5c:cf:05:58:02:a7:bc:0a:ee:cf:fb:db:be:b5:8b:55:
78:94:f8:76:d3:16:e4:27:2e:7b:4d:50:fa:d6:25:4c:2a:e7:
33:17:3d:59:c8:10:7e:d4:2c:2e:74:1d:8f:d8:ed:0f:7a:ee:
08:90:29:b2:d6:f0:83:c2:d6:49:a7:8b:b9:de:4c:9d:27:b0:
bc:20:7f:cf:19:38:b3:55:80:46:6d:1c:ef:71:1a:53:3c:74:
cc:35:14:a5:ea:f2:0b:65:8e:bd:aa:81:a0:5b:97:78:02:d4:
57:2e:66:de:dd:fe:f3:b8:c9:8f:94:ad:35:e0:11:a8:11:71:
8a:70:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:39 2025 by rpki-client