Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/DcNd7B8Ycyo16m9AMpf4ex7A2Ds.roa
File: DcNd7B8Ycyo16m9AMpf4ex7A2Ds.roa (raw, json)
Hash identifier: wd4BN/BTTwyiD44jKkwET2daaraYMDP7BCQfk8RXRhk=
Subject key identifier: 0D:C3:5D:EC:1F:18:73:2A:35:EA:6F:40:32:97:F8:7B:1E:C0:D8:3B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018613D804CA801D713797EADD00664A9903
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/DcNd7B8Ycyo16m9AMpf4ex7A2Ds.roa
Signing time: Thu 02 Feb 2023 20:36:09 +0000
ROA not before: Thu 02 Feb 2023 20:36:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 5.105.131.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:13:d8:04:ca:80:1d:71:37:97:ea:dd:00:66:4a:99:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 2 20:36:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dc35dec1f18732a35ea6f403297f87b1ec0d83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:42:a8:12:d2:63:c4:32:1b:40:f9:74:24:
ca:04:e9:c8:e4:0b:a7:b3:08:3f:63:c9:da:bd:bd:
16:28:e8:d2:dc:18:5a:92:5f:65:f6:c9:9d:32:e3:
1e:dd:ac:81:1b:66:1f:b5:9c:3d:33:d0:c7:0b:81:
62:77:1e:d2:d9:08:67:66:9e:c9:9b:8e:a9:8a:15:
70:83:6d:f7:61:55:c5:52:d4:86:9f:c8:62:3d:26:
b4:aa:fa:d4:af:7a:88:89:8f:0e:ed:fe:39:cd:b2:
f2:5f:90:0e:65:0b:10:55:1e:d8:12:1a:8b:26:22:
b8:12:f3:55:45:3a:d3:3d:7e:b4:c8:c7:bd:ca:97:
7f:70:93:a4:77:43:c2:19:cc:15:d1:6f:e3:f4:84:
8b:62:98:70:ad:39:7b:e1:2f:15:c2:4b:67:3b:4e:
b3:7a:40:dd:5f:0c:fb:9f:09:ba:e4:de:e8:64:f8:
5a:12:03:8d:93:5c:25:dd:26:c7:1e:73:c6:65:31:
6b:e8:e1:0e:7b:fd:4c:00:bd:41:cc:b9:a3:59:f3:
6a:89:0c:d2:4f:1a:f5:f9:df:b1:be:60:b7:53:13:
a7:c6:fe:f5:60:10:fc:29:e1:84:2a:a2:03:4b:49:
8f:55:70:6d:ce:1e:b3:5b:af:69:f6:d9:4d:99:79:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C3:5D:EC:1F:18:73:2A:35:EA:6F:40:32:97:F8:7B:1E:C0:D8:3B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/DcNd7B8Ycyo16m9AMpf4ex7A2Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.80.0/24
5.105.131.0/24
5.105.134.0/24
Signature Algorithm: sha256WithRSAEncryption
55:81:02:e2:f1:4a:69:4f:3f:3e:f8:08:15:dc:e7:85:20:a0:
d9:88:bf:4a:a8:25:30:a8:e8:95:94:9d:b1:44:7a:35:29:ae:
77:f8:ed:9a:ac:a5:77:e9:69:b7:c5:fe:a6:f2:95:6c:5e:81:
f3:64:cf:5e:f0:2d:de:39:cf:3f:c7:51:26:88:f6:f4:58:61:
d1:65:b1:28:f2:ed:e8:05:b2:56:5d:22:08:bd:86:3b:d4:de:
37:2f:1f:43:5c:21:9a:a1:38:42:34:6f:80:de:8e:a0:88:13:
b4:e3:52:dd:0b:cf:10:7b:4a:4c:1e:9d:f2:79:c4:43:b3:73:
37:bf:9c:1f:34:14:53:0a:b2:23:6c:28:e1:f0:9f:70:d6:64:
1a:8f:2a:96:7f:9c:c6:eb:20:48:f7:74:15:88:b4:8c:5a:40:
15:1f:ce:10:0f:33:95:1c:36:a3:bd:ea:02:dd:3d:d0:8e:ca:
4b:d7:76:b0:57:20:5b:81:00:81:2e:bf:b4:9a:d3:2c:de:4d:
7b:6d:89:c4:c0:35:9a:ea:f8:b5:d2:e3:47:a3:75:a1:be:4e:
24:41:3d:e9:68:72:66:48:88:bc:23:b3:cb:5e:4f:c3:bb:31:
0b:69:9e:55:0b:14:39:45:bb:de:14:d3:e9:de:51:ab:50:e9:
b8:a5:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:32 2025 by rpki-client