Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/DYQjS8GLCTno-cHAmml8Lm-b6fQ.roa
File: DYQjS8GLCTno-cHAmml8Lm-b6fQ.roa (raw, json)
Hash identifier: la4MuKvw9xEgZfYXYD1wpDiCrhmxCm/fLWsPHgYy+aQ=
Subject key identifier: 0D:84:23:4B:C1:8B:09:39:E8:F9:C1:C0:9A:69:7C:2E:6F:9B:E9:F4
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186E51B746355177EB5FC799AE7524F5DAE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/DYQjS8GLCTno-cHAmml8Lm-b6fQ.roa
Signing time: Wed 15 Mar 2023 11:50:27 +0000
ROA not before: Wed 15 Mar 2023 11:50:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 5.105.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:1b:74:63:55:17:7e:b5:fc:79:9a:e7:52:4f:5d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 15 11:50:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d84234bc18b0939e8f9c1c09a697c2e6f9be9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:60:a0:c0:90:8a:64:06:b4:cb:b1:07:f6:
2b:24:84:60:53:f6:ad:6f:a8:b8:f5:1d:ef:21:d6:
67:9c:1e:f6:9d:8a:54:b2:4f:83:83:05:4e:46:6f:
83:19:12:4e:ad:c6:e0:5b:50:fe:23:ab:e1:18:a1:
88:f3:f1:d7:ff:39:21:dc:24:09:11:a5:d2:3a:3d:
62:86:65:b1:b7:33:6f:7e:e4:6d:7f:18:0e:d1:2f:
9e:48:15:cb:56:59:db:de:b3:1e:8c:bf:cf:a0:0d:
75:28:62:1a:80:b5:65:5e:48:dd:d3:06:a6:1c:8b:
a3:64:72:0e:ce:d9:f3:58:7a:2c:3c:16:92:ae:9e:
be:77:6f:f5:02:43:b9:c8:36:e8:d2:a7:95:57:eb:
be:3f:94:86:1a:e8:ff:61:8c:25:76:3b:53:27:05:
9f:27:a6:c8:98:7d:af:41:67:0b:e9:0b:18:dd:9e:
87:f6:74:4e:fa:ce:01:94:ae:de:2b:01:fa:0c:5e:
64:9e:f9:68:8e:9e:a1:c8:09:2d:51:29:20:06:e7:
c0:51:8a:48:22:78:c3:9f:9b:a6:82:a5:a3:0c:ef:
6a:d8:42:bb:97:11:ca:08:36:2f:03:ba:1a:47:da:
f1:5f:e9:db:7a:13:d3:85:33:98:8c:22:6d:30:95:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:84:23:4B:C1:8B:09:39:E8:F9:C1:C0:9A:69:7C:2E:6F:9B:E9:F4
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/DYQjS8GLCTno-cHAmml8Lm-b6fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.42.0/24
Signature Algorithm: sha256WithRSAEncryption
85:8c:42:ce:3c:e0:1e:d0:22:b2:3d:b9:2d:cd:fb:1b:3a:88:
96:d5:48:b8:4a:c9:bb:43:37:83:15:0a:c8:17:48:12:d5:e7:
7f:5f:4f:75:d2:f6:93:20:7f:a3:3a:66:07:4c:3f:6c:0a:b8:
eb:14:b7:c8:a1:49:21:5b:33:21:5b:4c:fc:e4:5e:35:a4:7f:
66:8e:35:16:03:3d:0e:35:fd:bb:f9:b6:e4:2d:d4:b0:6d:ea:
14:a7:98:55:de:69:de:42:33:bd:fa:2a:10:5b:20:6c:3c:1e:
3e:68:55:3e:0d:9c:e0:18:25:16:27:cc:ba:c0:ba:c7:77:e2:
58:09:7e:7d:77:2b:a5:41:21:2d:45:64:f9:c7:ce:4c:08:03:
15:91:9a:e0:45:63:9d:d7:2d:4d:1f:44:60:24:fb:f2:00:4f:
e7:6a:81:28:0f:17:87:fe:cd:a8:f5:06:44:9b:64:ce:9c:b2:
a1:95:b2:4e:1d:39:22:e2:47:78:bf:eb:0e:54:13:42:b1:44:
90:28:96:05:c5:80:67:38:c2:d3:d3:e5:a7:58:ff:b0:cc:c6:
e3:07:3f:db:e5:b3:ff:ec:6d:34:cb:7a:4e:65:2d:8b:63:b8:
fa:49:61:a8:db:90:d8:47:c4:6a:6e:e1:a5:a4:d4:47:98:2b:
25:f5:d6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:47 2025 by rpki-client