Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5UC8JSY3WzrMKbJkA8OqCC0IMSE.roa
File: 5UC8JSY3WzrMKbJkA8OqCC0IMSE.roa (raw, json)
Hash identifier: tyVToWF+RyvBa7hV2kdrr+MXajJkavBBafCakIcA4Vw=
Subject key identifier: E5:40:BC:25:26:37:5B:3A:CC:29:B2:64:03:C3:AA:08:2D:08:31:21
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185F26ED63F1584DF1CC2B7146105B709A3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5UC8JSY3WzrMKbJkA8OqCC0IMSE.roa
Signing time: Fri 27 Jan 2023 08:53:48 +0000
ROA not before: Fri 27 Jan 2023 08:53:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:6e:d6:3f:15:84:df:1c:c2:b7:14:61:05:b7:09:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 27 08:53:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e540bc2526375b3acc29b26403c3aa082d083121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:da:7c:e1:68:dc:aa:75:e8:24:43:fa:03:
97:2a:3d:39:6c:3a:60:c7:d8:35:21:75:b0:ba:32:
27:17:8b:38:71:7d:06:88:ff:6e:ca:4c:43:f3:86:
3b:8d:f9:40:c2:30:8c:fe:34:8c:8f:41:92:51:42:
de:e4:79:f7:84:8e:a4:a6:e3:9c:b7:00:c0:57:ce:
9f:2a:38:ae:39:3b:1b:f7:5e:f0:4f:da:16:b0:b5:
94:2c:29:a3:06:1c:e4:60:c6:59:61:4b:1e:4e:6b:
c8:94:19:f0:04:34:1a:3b:3a:84:52:d2:58:a0:e5:
8a:3c:bf:52:b0:07:89:53:cc:8b:09:ec:4f:05:00:
52:ba:68:fd:ab:76:de:0f:b4:aa:a8:92:ab:18:68:
c4:38:57:4e:d3:6d:0c:4f:28:bd:c4:69:cf:1e:71:
e8:1c:c8:15:76:d2:84:0d:7d:51:a7:28:a4:e8:f8:
ff:8c:e3:5e:e3:cd:76:46:9a:53:94:95:88:16:55:
21:7b:06:eb:47:41:6d:b7:db:30:0f:d5:45:b9:cc:
11:53:c4:db:2d:65:ff:6c:ae:6a:fb:ad:cb:86:db:
55:31:32:66:42:f9:dd:e0:24:e7:e6:3f:b3:50:c0:
17:c9:c2:2d:ae:fc:9a:14:14:0f:57:86:87:3b:0d:
42:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:40:BC:25:26:37:5B:3A:CC:29:B2:64:03:C3:AA:08:2D:08:31:21
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5UC8JSY3WzrMKbJkA8OqCC0IMSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
5.105.40.0/24
5.105.43.0/24
5.105.57.0/24
5.105.65.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:c1:3e:6c:22:68:42:80:1c:10:37:b3:a9:63:61:2f:57:97:
66:a0:fb:85:8d:dd:5b:c3:01:41:3d:81:a8:96:97:1d:6c:29:
fa:18:9a:a7:3c:03:10:fa:f7:83:11:64:33:be:f7:be:17:d9:
e2:0e:e8:c7:1d:03:3c:91:c5:a8:87:1d:45:9a:a7:0a:35:99:
1d:a3:bf:d4:fc:f6:97:20:51:4c:30:b0:bc:03:13:ec:47:30:
1e:37:94:d2:75:6c:58:d3:e8:61:f3:e4:83:c1:66:7e:0a:c0:
c7:e7:43:a7:4e:fd:7d:62:7f:68:39:6c:58:a3:05:13:18:8a:
79:99:b0:a0:65:ac:41:a0:3d:5d:c2:58:5d:3a:b5:bf:64:08:
cb:57:de:02:3e:94:38:8d:0c:f0:80:f8:dc:f3:69:44:ba:75:
1c:17:be:00:35:b1:3a:50:5a:02:79:c2:24:87:2b:0c:3a:a8:
cb:05:da:2d:f0:40:43:b3:f3:5a:6a:f3:2e:33:d9:7d:ae:93:
c7:8e:ed:14:8d:a4:3b:39:c1:8a:e7:46:e6:ad:48:b7:48:b0:
90:0f:a7:b9:23:12:31:fd:73:b6:85:e2:e9:aa:7f:26:d9:19:
ac:c6:25:1d:5c:d7:f0:64:25:5c:52:74:2c:1a:46:06:22:e8:
2d:c3:d7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:59:13 2025 by rpki-client