Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9vy7V4rH6QW2wpqn6eJJqKYIuKc.roa
File: 9vy7V4rH6QW2wpqn6eJJqKYIuKc.roa (raw, json)
Hash identifier: XflQNH1a2vkkEBXDGXonzBMP17hRLg0nuVYdDznitLY=
Subject key identifier: F6:FC:BB:57:8A:C7:E9:05:B6:C2:9A:A7:E9:E2:49:A8:A6:08:B8:A7
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187FA610E77D20F6BC84707A5845DDF91FD
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9vy7V4rH6QW2wpqn6eJJqKYIuKc.roa
Signing time: Mon 08 May 2023 08:01:17 +0000
ROA not before: Mon 08 May 2023 08:01:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.143.0/24 maxlen: 24
5.105.158.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:61:0e:77:d2:0f:6b:c8:47:07:a5:84:5d:df:91:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 8 08:01:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6fcbb578ac7e905b6c29aa7e9e249a8a608b8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:41:8f:42:0c:0c:bd:15:fc:eb:b9:97:be:ca:
45:18:b0:3b:b3:67:91:34:6c:8f:30:27:d5:e3:49:
ab:74:d7:69:16:79:df:56:90:44:54:88:a8:32:36:
a8:5c:50:c0:63:3c:3b:b2:3a:99:78:67:54:c8:88:
2f:19:5d:d9:0d:ef:01:f7:2d:f9:e5:96:52:33:17:
33:e1:04:f3:ec:3c:b6:b0:5d:18:50:06:e6:8e:de:
de:3b:f0:fd:8a:cb:8e:d9:ab:14:a2:9d:e9:1d:cf:
fd:81:68:12:08:d5:b6:53:7a:46:ae:01:77:89:08:
29:57:63:62:94:a6:60:08:29:51:78:4c:9f:00:f0:
0d:ef:3c:c7:73:e3:bd:60:ed:1b:b4:2b:d7:f1:ef:
fb:0f:e3:04:21:ed:ac:3a:49:3d:16:20:a3:97:fb:
35:e4:18:db:0d:d6:81:4b:37:8b:a0:7d:e1:01:34:
1f:83:dd:60:55:44:48:71:be:47:87:ab:60:bc:29:
f8:17:84:dc:63:4b:d3:d8:45:84:68:9c:a7:34:53:
fe:93:e6:aa:58:0e:26:f1:a5:13:fd:8c:34:18:f2:
91:52:1e:d7:03:89:6d:b1:2b:f6:84:79:5f:eb:15:
61:65:75:da:16:c0:02:62:c6:ff:24:e2:f5:4f:ef:
af:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FC:BB:57:8A:C7:E9:05:B6:C2:9A:A7:E9:E2:49:A8:A6:08:B8:A7
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9vy7V4rH6QW2wpqn6eJJqKYIuKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.49.0/24
5.105.51.0/24
5.105.64.0/24
5.105.77.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.143.0/24
5.105.158.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.215.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.248.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b4:53:2e:68:2a:78:88:41:f0:81:00:07:67:e4:cd:51:c9:
e0:1a:13:7e:bd:b1:1e:db:dd:07:0e:bc:1a:93:47:54:ba:6c:
ef:c6:4d:15:40:33:78:aa:59:c6:b0:e9:22:91:2c:a2:e2:c6:
5f:ec:55:e3:7c:1c:aa:40:9b:13:ab:26:10:65:f5:c4:42:4e:
a9:24:9b:ce:07:1b:c4:ba:96:7e:ea:da:f5:e0:f2:b6:d3:82:
ab:13:45:4d:7a:f8:04:7c:b4:15:17:6a:64:45:6a:b2:85:ee:
93:4b:b8:c7:ce:4f:09:04:b6:24:81:77:46:94:97:e4:95:5b:
d2:fe:82:e8:40:9a:29:e0:d8:c5:31:eb:2c:e7:1d:60:85:8d:
30:d4:7d:27:da:6f:88:38:59:b5:87:09:a1:25:0a:da:75:70:
21:69:31:56:96:36:fe:58:92:0b:b9:21:30:b0:08:ca:95:db:
dc:49:c5:e9:95:0d:6c:98:e6:c4:46:cb:c5:c4:4a:75:d4:8d:
4b:0b:03:35:c6:29:cc:ea:15:4f:d8:58:d2:ac:eb:20:d6:3d:
7f:5a:da:8c:c4:95:6c:34:f3:5e:db:5d:3f:7e:24:2c:d4:91:
91:af:9f:56:e8:40:46:9b:59:36:88:8a:56:6a:a3:a6:b6:7a:
3b:eb:b6:99
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgISAYf6YQ530g9ryEcHpYRd35H9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNTA4MDgwMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmZjYmI1NzhhYzdlOTA1YjZjMjlhYTdlOWUyNDlhOGE2MDhiOGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUGPQgwMvRX867mXvspFGLA7s2eR
NGyPMCfV40mrdNdpFnnfVpBEVIioMjaoXFDAYzw7sjqZeGdUyIgvGV3ZDe8B9y35
5ZZSMxcz4QTz7Dy2sF0YUAbmjt7eO/D9isuO2asUop3pHc/9gWgSCNW2U3pGrgF3
iQgpV2NilKZgCClReEyfAPAN7zzHc+O9YO0btCvX8e/7D+MEIe2sOkk9FiCjl/s1
5BjbDdaBSzeLoH3hATQfg91gVURIcb5Hh6tgvCn4F4TcY0vT2EWEaJynNFP+k+aq
WA4m8aUT/Yw0GPKRUh7XA4ltsSv2hHlf6xVhZXXaFsACYsb/JOL1T++vYwIDAQAB
o4ICsjCCAq4wHQYDVR0OBBYEFPb8u1eKx+kFtsKap+niSaimCLinMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvOXZ5N1Y0ckg2UVcyd3BxbjZlSkpxS1lJdUtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBsQQCAAEwgaoDBAAF
aR8DBAAFaTEDBAAFaTMDBAAFaUADBAAFaU0DBAAFaWgDBAIFaXADBAAFaXYDBAAF
aY8DBAAFaZ4DBAAFaaIwDAMEAAVppQMEAAVppgMEAAVpqjAMAwQABWm5AwQCBWm4
AwQBBWnGAwQBBWnKAwQABWnXAwQBBWnkMAwDBAAFae8DBAAFafADBAEFafQwDAME
AAVp9wMEAAVp+AMEAAW0sAMEAMEu0jANBgkqhkiG9w0BAQsFAAOCAQEAb7RTLmgq
eIhB8IEAB2fkzVHJ4BoTfr2xHtvdBw68GpNHVLps78ZNFUAzeKpZxrDpIpEsouLG
X+xV43wcqkCbE6smEGX1xEJOqSSbzgcbxLqWfura9eDyttOCqxNFTXr4BHy0FRdq
ZEVqsoXuk0u4x85PCQS2JIF3RpSX5JVb0v6C6ECaKeDYxTHrLOcdYIWNMNR9J9pv
iDhZtYcJoSUK2nVwIWkxVpY2/liSC7khMLAIypXb3EnF6ZUNbJjmxEbLxcRKddSN
SwsDNcYpzOoVT9hY0qzrINY9f1rajMSVbDTzXttdP34kLNSRka+fVuhARptZNoiK
VmqjprZ6O+u2mQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:08 2025 by rpki-client