Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6uw5K-n6Vn1AccEajHJNq9b_q-s.roa
File: 6uw5K-n6Vn1AccEajHJNq9b_q-s.roa (raw, json)
Hash identifier: rZQijG+qydl1XHc9aI4XQZObLvr7QvZvPZ4jsoupo2c=
Subject key identifier: EA:EC:39:2B:E9:FA:56:7D:40:71:C1:1A:8C:72:4D:AB:D6:FF:AB:EB
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5B664EBF4EFA4216B96442838BC70
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6uw5K-n6Vn1AccEajHJNq9b_q-s.roa
Signing time: Sun 01 Jan 2023 05:54:54 +0000
ROA not before: Sun 01 Jan 2023 05:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b6:64:eb:f4:ef:a4:21:6b:96:44:28:38:bc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaec392be9fa567d4071c11a8c724dabd6ffabeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:ca:30:d2:7d:99:bf:d8:a3:89:0d:b4:fb:
35:59:a6:b1:73:d4:3a:94:74:de:47:2a:4d:fa:fd:
8f:fb:57:58:7d:94:7a:b9:8b:99:6f:46:20:a7:22:
10:df:87:c2:30:2c:e5:24:99:66:a6:90:b6:4f:60:
a2:bc:56:c4:7e:8c:8a:cd:5a:b6:e2:24:08:30:52:
01:1c:5b:dd:a5:10:32:44:e2:24:6f:27:f3:2f:d4:
c6:08:76:f1:58:2b:47:fb:c7:e7:52:81:e6:a6:21:
a7:03:a4:d5:7b:b4:61:f5:8e:88:78:c2:69:24:6d:
32:10:a9:15:a0:c9:7f:04:1a:35:1a:2a:b9:88:ab:
e0:be:38:32:c0:a6:19:18:90:b7:f5:b4:bf:95:a4:
ce:1c:e5:66:34:42:3f:b3:40:09:80:04:80:bc:2b:
af:09:c6:79:f6:9d:cb:63:84:e7:f1:61:a5:54:10:
6e:ac:98:04:e4:02:b3:fd:8f:74:23:65:59:cd:bf:
65:bc:64:f7:66:48:1d:d7:04:86:58:6f:cc:2a:9c:
e0:ef:54:19:87:68:fa:eb:be:a9:ad:ab:de:f7:f2:
e6:35:3f:51:dd:05:66:b8:a1:ce:63:e9:ee:5e:cd:
f5:a2:f1:b4:5a:0c:0b:2d:e4:c9:62:18:7a:ad:88:
64:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EC:39:2B:E9:FA:56:7D:40:71:C1:1A:8C:72:4D:AB:D6:FF:AB:EB
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6uw5K-n6Vn1AccEajHJNq9b_q-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
Signature Algorithm: sha256WithRSAEncryption
81:43:83:4b:f3:c1:98:60:c0:70:d3:30:c2:11:f3:38:c9:62:
72:df:d5:0a:c8:a0:e6:c6:c4:3b:e0:f6:73:cc:d5:fe:0d:2a:
12:19:4d:77:48:1b:62:55:17:63:8b:22:8d:55:c7:8a:b0:dc:
ae:26:07:96:c5:07:45:62:36:a9:cb:f0:d2:80:6d:0c:76:8a:
a4:2d:5a:07:00:48:16:ed:9f:d6:70:0f:26:cf:f6:54:57:cd:
4d:9e:06:74:73:21:69:2c:09:a3:66:d0:60:7b:27:2f:35:bd:
9c:e5:2a:32:31:63:2b:1e:a0:66:46:a1:f0:33:39:87:4c:84:
d5:db:7e:71:33:cc:f7:48:77:d9:34:64:bf:92:9c:df:e8:16:
22:40:2f:91:40:26:ac:a6:0c:5a:4d:bd:a4:16:0e:3b:07:77:
5c:9a:65:41:94:79:fb:b2:e7:aa:aa:47:e3:8f:52:80:09:e0:
34:b4:17:79:30:3e:c6:d5:27:39:08:ad:c7:d8:d0:2c:ac:97:
eb:ff:8d:98:b9:4b:a1:0c:80:5e:fb:e5:2e:4d:fa:fe:b7:24:
d3:8f:18:a7:d4:e0:74:4c:47:71:d2:f8:3c:c7:c6:8c:a4:c7:
44:9f:33:34:53:ff:b9:ca:1a:e4:78:c1:1b:d5:fb:05:e0:f7:
60:43:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:36:28 2025 by rpki-client