Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EJdkaAcrcF6kzK4vNjz9qRQG3uo.roa
File: EJdkaAcrcF6kzK4vNjz9qRQG3uo.roa (raw, json)
Hash identifier: UFEoqH2VD+AjRL+Io28JYZNLbUTxMBtCe2rVzJbbXPw=
Subject key identifier: 10:97:64:68:07:2B:70:5E:A4:CC:AE:2F:36:3C:FD:A9:14:06:DE:EA
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189B5F4614D1CD698C7C6AC6E6DBEA4ABCD
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EJdkaAcrcF6kzK4vNjz9qRQG3uo.roa
Signing time: Wed 02 Aug 2023 11:13:58 +0000
ROA not before: Wed 02 Aug 2023 11:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 5.105.186.0/23 maxlen: 24
5.105.202.0/23 maxlen: 24
5.105.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:f4:61:4d:1c:d6:98:c7:c6:ac:6e:6d:be:a4:ab:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 2 11:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10976468072b705ea4ccae2f363cfda91406deea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a1:6e:03:e7:c6:d9:8c:2f:b2:e6:64:24:b4:
70:f9:80:cd:ca:fc:b4:d2:4f:cc:bf:e0:59:3b:33:
64:77:55:15:49:d1:75:06:aa:c6:f9:ac:a2:7a:9f:
44:2c:85:94:e8:b2:68:b7:a3:eb:60:00:a3:46:19:
8b:c8:7a:f5:7d:b4:34:7f:b1:50:42:c7:74:46:4a:
b8:04:2b:81:f1:3f:75:f7:03:c4:4c:9c:f5:1c:e1:
23:06:77:40:4e:b8:73:7d:40:86:aa:b1:bf:56:4e:
cb:13:93:df:8a:14:b4:ac:a8:95:cd:d1:d3:45:63:
b3:17:71:a4:d1:24:52:1e:10:89:a1:ba:5b:c3:e1:
33:8d:84:19:55:ea:ee:f4:e9:3b:21:9d:3b:dd:3f:
5b:55:be:a8:eb:ac:35:41:9e:40:34:4d:b8:a1:eb:
8c:eb:7e:71:0d:b3:8b:93:ea:48:37:f3:75:44:ef:
da:60:5c:3c:76:9d:a1:fd:ea:78:c3:75:d0:0b:5e:
74:1e:b6:96:9a:ad:fe:26:f4:8f:6a:39:a3:4a:b5:
3e:bf:13:b9:ee:1c:01:37:37:e8:d2:8e:e6:4c:01:
14:04:bf:39:f5:23:e1:69:57:e1:8b:03:f7:e6:db:
ed:ae:80:6c:a7:80:19:f6:da:db:c7:f7:60:65:61:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:97:64:68:07:2B:70:5E:A4:CC:AE:2F:36:3C:FD:A9:14:06:DE:EA
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EJdkaAcrcF6kzK4vNjz9qRQG3uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.186.0/23
5.105.202.0/23
5.105.212.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a5:80:d6:0c:85:e7:87:48:61:e0:bd:5d:e4:1f:0f:21:a6:
94:83:fd:62:6d:de:19:a2:e0:75:79:f3:02:2b:25:9e:b2:97:
fe:a7:fc:31:37:e3:25:06:b4:5c:d6:5c:5b:33:02:04:48:7f:
a9:96:d0:61:e3:0f:d7:7f:17:e8:fa:2a:6b:e1:8a:3e:c4:8c:
71:69:2b:47:c7:21:f1:2f:0a:a0:cd:6f:c4:9b:ec:ed:f2:02:
f1:8d:5f:66:18:d5:c5:f8:54:45:d8:3c:78:bb:82:5a:c7:64:
37:e0:b4:79:35:b5:07:04:e6:d0:03:22:2d:1e:49:78:0a:80:
68:37:c7:e6:32:90:59:0c:36:34:e8:c7:de:93:f2:af:80:e9:
28:62:11:2c:9d:16:a5:b2:4e:86:ce:f0:14:63:c2:af:f0:5d:
49:85:b6:bb:59:f6:6d:39:47:64:a7:06:c6:b6:11:2c:01:f1:
44:54:19:6f:ad:4f:15:ad:78:ba:30:69:3b:f5:f3:b2:e1:7e:
61:89:11:2b:5d:78:ee:c9:8a:71:fe:09:a0:09:b0:11:10:4b:
51:f0:e4:5a:b5:d6:49:99:42:8f:52:59:77:c3:09:45:3c:51:
05:ea:6d:69:9c:40:3b:59:a0:99:a9:44:6a:e8:8b:35:79:1b:
45:df:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:11:59 2025 by rpki-client