Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EqH7kW0Sdt4NpNeVvcS8SjLE5AU.roa
File: EqH7kW0Sdt4NpNeVvcS8SjLE5AU.roa (raw, json)
Hash identifier: 3uVx+gZ5wM9dQVNLGHK79c0xGMQroj5Coi6hrnoelRY=
Subject key identifier: 12:A1:FB:91:6D:12:76:DE:0D:A4:D7:95:BD:C4:BC:4A:32:C4:E4:05
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A85B4D5E7BE0F6920A4A8C5F5C899C943
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EqH7kW0Sdt4NpNeVvcS8SjLE5AU.roa
Signing time: Mon 11 Sep 2023 19:25:35 +0000
ROA not before: Mon 11 Sep 2023 19:25:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 217.67.64.0/22 maxlen: 22
5.105.91.0/24 maxlen: 24
5.105.90.0/24 maxlen: 24
5.105.92.0/24 maxlen: 24
5.105.93.0/24 maxlen: 24
5.105.223.0/24 maxlen: 24
5.105.222.0/24 maxlen: 24
5.105.224.0/24 maxlen: 24
5.105.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:85:b4:d5:e7:be:0f:69:20:a4:a8:c5:f5:c8:99:c9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 11 19:25:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12a1fb916d1276de0da4d795bdc4bc4a32c4e405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:96:ae:8e:ad:0c:84:47:17:4c:0d:e5:07:5c:
d1:57:fb:b9:ee:e7:15:5c:f7:68:df:e4:3b:49:80:
73:bf:08:25:7c:61:fb:65:ef:f9:b8:ec:81:60:43:
d7:f3:a0:22:b1:a5:4d:bc:37:38:36:5b:c1:27:d4:
59:2e:bf:e7:c9:5d:a7:2b:9e:4e:16:ff:d4:ad:75:
57:aa:fe:14:89:6a:f1:bc:8d:eb:97:76:c1:34:c5:
a9:1b:27:5a:1a:3c:e3:49:5d:a9:3f:5d:fa:a1:ec:
11:b6:86:6d:e5:db:ae:df:c6:37:6d:e6:07:76:36:
6e:94:31:14:80:20:a1:b1:bf:90:89:88:77:49:b8:
5d:50:81:bd:32:9e:e0:d7:47:5a:a2:7c:ed:cf:5f:
85:af:cc:76:23:37:f4:15:0c:78:20:29:bb:9e:a9:
55:2b:db:91:7c:4f:e7:e7:96:1a:61:19:42:65:66:
af:0b:2d:97:72:e8:9c:00:58:a9:15:49:65:47:a8:
0e:64:b4:61:39:39:59:29:b3:be:4f:2a:c3:4d:c9:
6a:21:fa:4a:ec:b8:8e:10:b6:d7:e1:04:40:b0:7c:
ac:94:45:04:02:fa:14:b6:a1:3c:b8:fb:47:86:da:
46:a1:0f:c9:23:25:03:7d:49:0c:bc:49:37:99:a5:
10:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A1:FB:91:6D:12:76:DE:0D:A4:D7:95:BD:C4:BC:4A:32:C4:E4:05
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/EqH7kW0Sdt4NpNeVvcS8SjLE5AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.90.0-5.105.93.255
5.105.222.0-5.105.225.255
217.67.64.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:9c:48:c5:16:e5:f0:90:0c:d6:c0:58:68:ca:1e:d8:3d:21:
f8:75:76:bf:90:e8:15:41:e1:c6:e2:2c:bc:ac:d2:ac:af:e5:
02:fd:01:e4:58:7a:1c:bf:2b:5a:92:05:11:b5:41:33:76:4b:
c6:c0:c9:82:48:e1:34:d4:fc:95:84:32:d5:a5:a9:da:fa:f7:
a7:9f:1f:44:ac:d1:62:72:91:59:fc:c8:68:22:87:f8:3d:8f:
db:c0:f6:0d:8c:ad:f3:f9:f8:b9:86:13:42:6b:b0:1d:4a:f3:
22:b1:9c:1d:ae:f0:a4:c2:f8:81:f1:1a:8c:16:fa:56:98:53:
c5:06:ce:22:16:cd:0a:34:31:9c:35:30:99:94:61:97:90:f7:
fc:ba:2d:29:94:10:f4:cb:d3:d4:af:3c:c2:44:ff:69:cb:ac:
76:8b:45:5d:aa:02:0d:ac:1e:5c:1b:2e:85:c4:f5:54:65:ed:
5b:ea:ea:35:4e:b5:4f:55:3f:87:74:c3:e7:6e:82:ad:79:04:
0b:7f:28:4b:df:fc:13:9f:90:46:0e:fb:32:d8:01:30:c6:3e:
03:03:8a:12:af:de:63:8b:c0:b0:96:72:a6:a2:02:42:53:c2:
6e:86:d8:dd:a1:f5:c1:91:95:61:57:7f:a2:7d:e9:f8:b0:8b:
25:aa:63:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:52:39 2025 by rpki-client