Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/B_0tiBpWG31C9y4vCwuhOHsBkvE.roa
File: B_0tiBpWG31C9y4vCwuhOHsBkvE.roa (raw, json)
Hash identifier: bkzp4/lrBf2R8vocc+cc0v5ax2mmIf1bke3N4XXXBSM=
Subject key identifier: 07:FD:2D:88:1A:56:1B:7D:42:F7:2E:2F:0B:0B:A1:38:7B:01:92:F1
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018663634CFD21B8193CA4D84FE84A9C20A3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/B_0tiBpWG31C9y4vCwuhOHsBkvE.roa
Signing time: Sat 18 Feb 2023 07:18:17 +0000
ROA not before: Sat 18 Feb 2023 07:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/23 maxlen: 23
5.105.130.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.238.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.241.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:63:63:4c:fd:21:b8:19:3c:a4:d8:4f:e8:4a:9c:20:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 18 07:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07fd2d881a561b7d42f72e2f0b0ba1387b0192f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:fc:d1:a9:28:da:92:22:3b:98:b5:34:5f:
45:1c:59:f2:d5:20:62:01:05:ee:1d:11:ec:c8:c5:
1c:ee:af:4c:5e:bc:34:44:51:52:32:ce:97:c5:63:
66:3c:20:51:3a:1b:c7:4b:d9:28:7f:ac:54:ba:0b:
55:46:e9:d6:b9:8c:14:b8:15:c2:3e:93:aa:8d:43:
f4:84:6d:c0:6c:0d:45:65:7b:3e:39:a6:01:7a:53:
d5:90:f4:5b:5c:58:03:08:c2:5f:cf:90:aa:0b:ea:
86:64:06:c4:af:82:25:98:55:29:be:1e:e6:a4:87:
42:8e:d8:f3:00:77:f3:34:7a:5a:d0:3e:6b:22:46:
6b:93:5e:e2:0f:51:a4:f5:c3:82:51:5a:fa:83:7e:
43:9a:21:1c:ac:4d:18:05:95:55:fe:1e:70:c6:2e:
1e:bf:cd:2b:cb:c6:f7:19:56:aa:92:eb:28:c0:d2:
d0:9b:be:a3:cd:c6:eb:cd:2b:ba:34:24:c4:d0:80:
f7:c4:12:f5:37:53:63:c7:41:60:e6:f5:3c:f5:58:
13:76:98:eb:0e:79:2e:61:aa:14:a3:fd:b0:b8:56:
7d:0d:03:37:ec:64:21:c0:fc:71:47:5c:b7:22:cf:
ac:9b:e2:3e:56:9f:5a:ce:7b:89:62:39:a9:b2:b1:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FD:2D:88:1A:56:1B:7D:42:F7:2E:2F:0B:0B:A1:38:7B:01:92:F1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/B_0tiBpWG31C9y4vCwuhOHsBkvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.12.0/24
5.105.30.0/24
5.105.38.0/23
5.105.68.0/23
5.105.79.0/24
5.105.95.0/24
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.130.0/24
5.105.136.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.172.0/24
5.105.186.0/23
5.105.195.0/24
5.105.198.0/23
5.105.202.0-5.105.204.255
5.105.206.0/23
5.105.238.0-5.105.241.255
5.105.244.0/23
5.105.248.0/23
5.105.252.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a2:ea:5d:e3:b7:00:ec:30:a7:cb:1a:7b:b0:46:59:05:76:
c9:5e:5c:d8:95:87:39:5d:41:7e:f2:19:b4:34:eb:17:c1:94:
47:1b:a6:c3:ef:9c:e7:e8:42:02:05:78:62:58:3b:4c:ca:b2:
7c:3c:4e:7e:b2:72:00:71:c6:ca:8a:31:93:bf:7c:58:4c:56:
f2:61:57:ce:c3:df:3d:ac:08:bd:73:4e:70:b8:db:9d:bf:b0:
d9:b8:5d:4f:11:cf:60:3c:3d:7b:56:fc:b9:b0:30:67:66:cc:
56:77:bd:08:66:5f:40:d2:c9:62:8f:aa:ea:47:c7:26:f8:49:
b9:1b:d5:ca:01:d1:37:71:fb:3c:84:f0:a4:e6:56:fc:8b:08:
87:b9:5a:b0:0e:74:fa:8a:54:c7:f0:c6:3e:3c:ce:69:f6:15:
9e:ff:3b:63:05:04:8d:56:2f:8d:4a:f3:2e:a8:08:58:cd:9c:
70:fb:ab:eb:81:ce:7d:9b:05:f4:38:0d:17:1f:e0:df:08:25:
72:33:e9:bf:5a:b3:5c:d3:d6:65:b6:c5:94:65:d9:35:91:92:
1c:40:95:b0:e0:b8:b1:79:ee:5a:50:8b:f6:97:32:39:c4:ae:
99:ca:0c:af:7b:f4:80:e6:d4:17:92:d8:42:23:a0:1a:f7:d7:
ed:37:a0:95
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgISAYZjY0z9IbgZPKTYT+hKnCCjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMjE4MDcxODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2ZkMmQ4ODFhNTYxYjdkNDJmNzJlMmYwYjBiYTEzODdiMDE5MmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBb80ako2pIiO5i1NF9FHFny1SBi
AQXuHRHsyMUc7q9MXrw0RFFSMs6XxWNmPCBROhvHS9kof6xUugtVRunWuYwUuBXC
PpOqjUP0hG3AbA1FZXs+OaYBelPVkPRbXFgDCMJfz5CqC+qGZAbEr4IlmFUpvh7m
pIdCjtjzAHfzNHpa0D5rIkZrk17iD1Gk9cOCUVr6g35DmiEcrE0YBZVV/h5wxi4e
v80ry8b3GVaqkusowNLQm76jzcbrzSu6NCTE0ID3xBL1N1Njx0Fg5vU89VgTdpjr
DnkuYaoUo/2wuFZ9DQM37GQhwPxxR1y3Is+sm+I+Vp9aznuJYjmpsrFTwQIDAQAB
o4ICxjCCAsIwHQYDVR0OBBYEFAf9LYgaVht9QvcuLwsLoTh7AZLxMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvQl8wdGlCcFdHMzFDOXk0dkN3dWhPSHNCa3ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHbBggrBgEFBQcBBwEB/wSByzCByDCBxQQCAAEwgb4DBAAF
aQwDBAAFaR4DBAEFaSYDBAEFaUQDBAAFaU8DBAAFaV8DBAAFaWcDBAAFaWoDBAAF
aWwDBAIFaXADBAEFaXoDBAAFaYIDBAAFaYgDBAEFaYoDBAEFaY4DBAAFaaIDBAAF
aaUDBAAFaawDBAEFaboDBAAFacMDBAEFacYwDAMEAQVpygMEAAVpzAMEAQVpzjAM
AwQBBWnuAwQBBWnwAwQBBWn0AwQBBWn4AwQABWn8AwQABbSwAwQAwS7SMA0GCSqG
SIb3DQEBCwUAA4IBAQBHoupd47cA7DCnyxp7sEZZBXbJXlzYlYc5XUF+8hm0NOsX
wZRHG6bD75zn6EICBXhiWDtMyrJ8PE5+snIAccbKijGTv3xYTFbyYVfOw989rAi9
c05wuNudv7DZuF1PEc9gPD17Vvy5sDBnZsxWd70IZl9A0slij6rqR8cm+Em5G9XK
AdE3cfs8hPCk5lb8iwiHuVqwDnT6ilTH8MY+PM5p9hWe/ztjBQSNVi+NSvMuqAhY
zZxw+6vrgc59mwX0OA0XH+DfCCVyM+m/WrNc09ZltsWUZdk1kZIcQJWw4Lixee5a
UIv2lzI5xK6Zygyve/SA5tQXkthCI6Aa99ftN6CV
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:22 2025 by rpki-client