Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EMrweQXWqS_WLyzqk2relRLz6WM.roa
File: EMrweQXWqS_WLyzqk2relRLz6WM.roa (raw, json)
Hash identifier: oR0XeRqZBltgX7XUDRT4R0+yy/ftGtxZn5DVIwCrSmQ=
Subject key identifier: 10:CA:F0:79:05:D6:A9:2F:D6:2F:2C:EA:93:6A:DE:95:12:F3:E9:63
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A5CC368EEFE9A6773BBA07C152EA5C93E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EMrweQXWqS_WLyzqk2relRLz6WM.roa
Signing time: Sun 03 Sep 2023 20:37:04 +0000
ROA not before: Sun 03 Sep 2023 20:37:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.205.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5c:c3:68:ee:fe:9a:67:73:bb:a0:7c:15:2e:a5:c9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 3 20:37:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10caf07905d6a92fd62f2cea936ade9512f3e963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9e:0b:37:0a:25:34:a5:41:5d:c5:44:ff:2f:
11:39:39:ee:3c:a2:3a:28:ca:38:7e:d8:1f:6b:26:
64:ed:e0:75:96:7f:94:94:e8:c7:32:96:95:31:ba:
d3:aa:11:d2:a1:47:8d:0d:db:4a:e9:90:0f:56:17:
df:f0:59:48:be:02:be:5f:5e:5f:9b:eb:e7:bb:ce:
c5:2f:52:a8:81:09:36:a5:69:4c:3d:86:17:e6:91:
34:ef:9a:13:5c:43:6d:0d:20:41:de:39:eb:de:5b:
fe:ff:8d:86:f0:71:93:ec:1f:60:50:1f:25:25:83:
09:c6:ca:33:44:70:da:b4:ff:0f:8b:b9:0c:a0:5e:
6e:ff:1a:a1:d9:9f:e2:cd:a1:c2:b3:4d:f1:03:27:
0c:b0:b8:9b:ab:b5:33:2d:77:f5:21:2e:4d:2c:85:
fb:a7:14:f5:0f:4c:80:ae:e1:4b:73:61:d2:97:c3:
8a:3f:04:5e:95:6f:9d:f5:89:99:e6:50:5b:e5:df:
df:ad:a9:ec:b7:a8:54:09:dd:96:b5:a6:43:40:00:
43:7c:4e:cc:45:82:55:00:26:bb:ed:0f:67:80:a8:
a6:c2:6f:ba:96:fb:4c:35:8b:76:5d:11:b1:b3:53:
7c:b0:59:1a:28:ba:ad:f2:39:e5:81:15:81:f6:21:
88:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CA:F0:79:05:D6:A9:2F:D6:2F:2C:EA:93:6A:DE:95:12:F3:E9:63
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EMrweQXWqS_WLyzqk2relRLz6WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.16.0/24
5.105.18.0/24
5.105.21.0/24
5.105.40.0/24
5.105.50.0/24
5.105.57.0/24
5.105.62.0/24
5.105.82.0/24
5.105.84.0/24
5.105.115.0/24
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.157.0/24
5.105.162.0/24
5.105.197.0/24
5.105.203.0/24
5.105.205.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
86:70:16:36:d0:6e:b3:86:c5:9a:2b:b6:32:86:b3:59:3c:89:
45:35:c6:7d:14:f8:68:78:ee:1c:6d:52:91:a7:ca:6f:19:b2:
79:65:9c:20:ac:0e:60:e1:72:37:8f:2d:79:5e:0b:bf:0e:1b:
69:0b:77:68:07:4a:f7:84:be:b6:d8:b7:7e:00:ba:e7:5b:56:
72:85:3b:4b:fd:72:d5:a7:99:96:35:b7:de:43:9a:40:00:7f:
3b:83:34:0a:4c:5d:74:67:ec:8e:5e:99:73:cd:5a:29:7d:2e:
18:37:e8:3f:d8:55:e4:11:8a:93:a9:3d:dd:be:96:21:ce:1f:
01:40:b7:8a:55:2e:25:9d:b0:5c:1a:e2:12:b9:97:45:eb:01:
05:dd:a4:c6:76:f4:42:99:81:9b:cf:da:0a:9d:f8:b8:d9:54:
40:1d:e4:b5:8f:7f:ee:b9:46:22:9b:8a:b9:c1:a5:9a:aa:69:
2d:4e:d5:bf:6a:01:c0:dc:7f:ff:5e:5d:9b:d4:8b:55:fb:df:
37:09:f5:5a:ec:5f:03:c2:af:f7:14:fb:21:76:ea:3d:14:1d:
70:c0:a7:d6:b4:06:b5:10:ee:de:26:43:d8:4c:0d:c8:53:1d:
a8:bc:72:cd:fe:b0:a1:54:4a:9b:ad:fd:2b:03:d8:15:6c:d7:
82:8c:25:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:39 2025 by rpki-client