Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GCVKNmlkclJ4QiVOXE8hFvpYL5E.roa
File: GCVKNmlkclJ4QiVOXE8hFvpYL5E.roa (raw, json)
Hash identifier: iJoGLIZDQF8Ai6sCH3Y6KBfkPD9PIzRQEjJIa1SfKIo=
Subject key identifier: 18:25:4A:36:69:64:72:52:78:42:25:4E:5C:4F:21:16:FA:58:2F:91
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01858768AA62E88A2C6D8595BCDE39C32410
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GCVKNmlkclJ4QiVOXE8hFvpYL5E.roa
Signing time: Fri 06 Jan 2023 14:07:41 +0000
ROA not before: Fri 06 Jan 2023 14:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.227.0/24 maxlen: 24
5.105.44.0/22 maxlen: 22
5.105.47.0/24 maxlen: 24
5.105.46.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.55.0/24 maxlen: 24
5.105.54.0/24 maxlen: 24
5.105.53.0/24 maxlen: 24
5.105.52.0/24 maxlen: 24
5.105.52.0/22 maxlen: 24
5.105.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:87:68:aa:62:e8:8a:2c:6d:85:95:bc:de:39:c3:24:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 6 14:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18254a36696472527842254e5c4f2116fa582f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:00:3e:87:e9:26:f5:46:d3:ef:82:ab:46:
eb:30:c6:21:69:de:1b:28:22:f5:c9:50:a8:e3:f9:
c2:5b:8e:c7:79:5a:54:e0:0c:18:99:31:d4:06:df:
c0:e9:69:38:02:93:32:6d:d1:71:f8:a0:35:60:b2:
64:01:bc:c0:a9:46:d3:da:1d:7f:39:62:17:1b:0a:
13:45:e1:8a:d2:02:a6:5b:92:4d:07:4d:4e:22:9b:
47:ca:76:01:36:98:71:ae:a5:7e:5a:65:f1:fe:f8:
da:ed:b4:bb:7c:9d:52:ce:43:36:7e:0a:2c:43:4c:
6e:ec:8e:e1:d9:16:9b:b7:24:74:2e:8d:8f:94:14:
81:49:29:da:c0:76:d3:e1:d8:22:1f:94:93:34:5e:
e7:4b:56:71:c6:c4:ae:b9:6b:16:2a:f8:d3:26:60:
53:d4:af:41:4d:93:dd:79:70:d6:a6:5e:98:ff:dd:
91:fb:a1:7f:bd:e2:5f:b1:93:8a:d9:18:68:ae:c6:
42:d6:53:d3:5c:18:ad:07:f9:de:01:07:58:34:75:
a6:41:b7:4e:1e:20:ac:75:ce:bb:02:cb:2f:04:fd:
7a:38:68:d4:a0:45:15:64:54:e0:f0:0b:62:78:da:
a6:3d:23:d0:28:e9:db:31:e9:e4:5c:f2:63:5d:fb:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:25:4A:36:69:64:72:52:78:42:25:4E:5C:4F:21:16:FA:58:2F:91
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GCVKNmlkclJ4QiVOXE8hFvpYL5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.44.0/22
5.105.52.0/22
5.105.219.0/24
5.105.227.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ef:e0:b0:ea:6f:c5:a1:91:95:b9:6d:b1:84:4b:cc:77:6e:
14:00:42:b4:8b:f2:e2:6e:e0:8e:5f:50:16:2d:e6:bc:c0:33:
f1:d2:f2:8d:87:3e:28:00:8a:5d:7f:d4:f7:ce:ca:14:36:1f:
5d:0a:13:67:9b:31:f2:90:7e:44:ed:54:c5:35:35:ed:d4:b4:
7e:ab:2e:56:b6:61:cc:c9:b9:07:73:c4:5a:61:9d:b3:ff:22:
7f:a9:5e:fa:b6:70:eb:15:d5:64:28:e7:e8:80:c4:00:ab:9d:
97:12:a2:9b:d4:ad:c7:d8:56:48:06:36:a5:41:37:89:e6:45:
38:e9:b9:fa:40:4a:0c:10:e6:a3:59:ec:8d:d6:0b:44:8b:95:
b1:4c:5c:2b:d9:08:85:eb:e3:e8:76:fb:64:5b:84:f6:82:26:
dc:f1:3b:99:ba:bb:93:80:6b:5b:9b:b8:15:e4:f4:70:9e:e9:
b8:07:a7:7b:08:9b:55:bd:ad:97:4f:22:b5:71:05:06:f2:6f:
e1:42:8e:1b:8a:10:75:cf:f6:e9:42:78:6a:bd:dd:bb:d0:09:
68:85:3d:86:35:b1:58:21:ec:72:01:4c:fb:9c:bf:f3:c4:79:
35:31:d3:b0:fb:d0:f5:65:04:86:c5:6d:80:d0:e6:2f:53:43:
ab:8e:56:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:51 2025 by rpki-client