Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8TvrkF9NTk_BjS308FYj0nnMCjI.roa
File: 8TvrkF9NTk_BjS308FYj0nnMCjI.roa (raw, json)
Hash identifier: STbe0G6rsog/k5Ubk6fEXHRI7mIX9PMfki0fjcNzHM4=
Subject key identifier: F1:3B:EB:90:5F:4D:4E:4F:C1:8D:2D:F4:F0:56:23:D2:79:CC:0A:32
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188D76BC6F277C63916CB4E732FEE93B490
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8TvrkF9NTk_BjS308FYj0nnMCjI.roa
Signing time: Tue 20 Jun 2023 06:09:04 +0000
ROA not before: Tue 20 Jun 2023 06:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.143.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:6b:c6:f2:77:c6:39:16:cb:4e:73:2f:ee:93:b4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 20 06:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f13beb905f4d4e4fc18d2df4f05623d279cc0a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:d2:28:02:ca:ef:06:7a:f1:19:19:e4:ac:
76:c2:05:b7:c3:61:8c:97:de:c7:72:cf:f9:e8:53:
f0:08:7c:8f:c4:6c:7e:29:b5:fd:72:94:a4:db:95:
fb:38:89:6f:0e:27:c1:27:99:3f:81:80:37:7c:69:
63:ad:43:21:22:cb:d6:97:fd:db:34:c2:5e:2d:4a:
60:d6:77:85:7c:c6:0d:b2:60:6d:25:8e:b1:67:f3:
14:28:1a:ba:b3:68:d3:c3:51:fd:14:38:df:8d:66:
12:39:cc:21:5b:ea:52:c2:0f:33:78:14:a4:a7:75:
93:9d:b1:ce:e8:de:35:55:0a:74:74:ac:1a:94:d2:
25:11:99:e8:e8:7e:1b:9e:f7:23:08:15:c1:49:bb:
50:83:82:32:f6:1f:e9:d2:9f:90:4e:57:b1:80:61:
8c:b4:c8:59:10:0b:3a:1c:94:b4:9d:ba:59:c3:55:
77:4d:9e:23:d2:f8:c0:de:2d:90:91:c3:e8:fd:21:
14:1e:2f:42:54:03:e2:e3:1a:4b:74:6e:a9:80:0c:
cd:0e:20:87:7a:8c:1b:d1:42:17:46:8d:dc:8a:20:
89:ee:87:2e:fe:78:86:df:30:37:97:1c:e9:e5:cc:
0b:c4:72:03:c9:d9:8f:c7:8e:f3:cd:dd:08:b8:87:
35:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3B:EB:90:5F:4D:4E:4F:C1:8D:2D:F4:F0:56:23:D2:79:CC:0A:32
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/8TvrkF9NTk_BjS308FYj0nnMCjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.5.0/24
5.105.7.0/24
5.105.18.0/23
5.105.36.0/24
5.105.59.0/24
5.105.94.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.143.0/24
5.105.162.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0-5.105.230.255
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
86:03:ac:d0:d9:ef:ed:6b:9d:99:2c:f4:4e:f7:e7:80:6d:1c:
f1:c3:d5:36:cf:d8:82:ec:f9:85:e1:59:a1:de:ef:fa:2b:c8:
62:f1:0d:09:1f:44:75:65:19:b2:e2:2c:39:fc:89:71:b5:3c:
9c:7b:8c:d0:d9:8d:00:d7:aa:f8:11:8d:c2:60:29:73:11:b2:
44:4a:c6:44:90:72:02:0e:f9:67:2c:11:a0:3f:52:cb:43:a8:
3e:35:65:e2:f0:93:62:c8:ed:95:3f:df:32:82:71:6e:8b:71:
ae:d6:4e:ac:2d:10:d6:d9:f8:28:06:87:b1:ce:1a:75:d0:3a:
2b:a9:90:e5:53:60:2e:8e:d1:f3:a3:05:9f:ea:e2:f0:60:2d:
61:b1:c9:4b:51:67:25:83:70:3b:b3:4a:f7:44:ec:26:36:a4:
ad:45:dd:c9:e6:31:e2:02:a0:c1:5a:9c:66:f5:97:9d:8f:5e:
39:40:76:c7:f9:00:98:29:a0:b0:bd:20:06:96:d6:cf:bb:2e:
6c:82:f4:ca:c8:20:65:62:44:da:92:77:3a:49:dd:47:2e:ea:
25:cc:96:e1:ea:56:af:ef:0b:d3:13:f9:7c:84:9e:46:02:e0:
c6:d6:a1:ac:13:50:bd:d2:f3:07:46:bf:a6:fe:13:7c:4b:66:
2a:68:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:41 2025 by rpki-client