Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GPdAYMepnK-reCJs9qxon47GwnM.roa
File: GPdAYMepnK-reCJs9qxon47GwnM.roa (raw, json)
Hash identifier: O/JFKQdYfIZC9dqEeZWAI8zWdrHrR18U0o34hg/scY8=
Subject key identifier: 18:F7:40:60:C7:A9:9C:AF:AB:78:22:6C:F6:AC:68:9F:8E:C6:C2:73
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018722BCE183B65348C5975F1BE5E29D32EF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GPdAYMepnK-reCJs9qxon47GwnM.roa
Signing time: Mon 27 Mar 2023 11:03:36 +0000
ROA not before: Mon 27 Mar 2023 11:03:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 5.105.242.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:bc:e1:83:b6:53:48:c5:97:5f:1b:e5:e2:9d:32:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 27 11:03:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18f74060c7a99cafab78226cf6ac689f8ec6c273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:50:34:af:cc:42:ff:82:74:53:53:07:a2:
90:4f:5e:25:04:00:57:43:42:01:4b:ca:5b:bd:1a:
c7:65:6a:f1:53:cd:0c:87:4c:2d:0c:37:84:5b:57:
7f:01:28:ae:47:e4:ea:6d:69:7a:bb:a8:e3:c0:d5:
08:8b:ca:ac:29:c7:37:f9:40:d4:64:1d:e4:f3:c7:
0f:35:73:20:17:e7:c8:81:4e:3b:b0:e4:cf:83:eb:
ce:d8:bf:e8:f5:ce:e4:4d:35:b4:d4:e0:b3:3a:de:
fd:98:5f:52:af:e7:e6:fa:48:6e:6d:44:39:a0:49:
10:29:76:a0:a0:66:d0:8b:a8:21:47:13:2b:26:03:
f0:c2:6e:18:cd:0c:6e:9e:4c:57:1f:9a:2b:0d:30:
2a:b4:ad:7e:98:9c:df:37:8b:d2:90:db:f6:71:cf:
0e:91:f6:50:b7:8a:16:14:1a:fb:55:ab:25:68:77:
52:49:6d:2a:7b:12:ea:7d:2a:03:7c:48:a7:0c:0b:
0d:40:7a:9a:2e:32:61:77:a0:00:0c:63:a2:81:c8:
a3:46:c7:02:f5:53:de:73:0b:90:a8:69:a3:33:16:
03:2e:be:c2:a1:a8:5f:4b:63:d7:f9:9b:03:e8:45:
18:2b:cd:4b:b9:e7:41:6e:51:12:04:df:f7:09:79:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F7:40:60:C7:A9:9C:AF:AB:78:22:6C:F6:AC:68:9F:8E:C6:C2:73
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GPdAYMepnK-reCJs9qxon47GwnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.169.0/24
5.105.185.0/24
5.105.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:98:0c:9f:00:79:cf:1e:c2:4c:9d:85:3a:10:e6:c5:a0:6f:
fa:0c:85:be:e4:70:3f:cd:f0:9a:4e:1d:fa:a5:1c:68:41:72:
d6:27:dd:ec:90:2a:c4:a9:cc:56:71:93:ce:12:15:03:02:10:
4e:d4:ec:73:2d:a7:9c:34:60:6a:75:d1:a4:45:cf:9e:ce:fe:
4c:3f:8f:05:0f:e1:f8:ad:be:1e:23:89:37:60:de:d7:c7:57:
da:30:bb:01:f8:9a:ea:01:7b:ab:28:10:fa:31:d8:22:ce:a5:
c0:95:2c:1a:8e:f0:3e:90:00:9f:b2:79:32:6a:53:50:31:d3:
c6:c6:db:ee:73:eb:52:36:fb:fb:d4:c8:ed:4b:ed:16:1e:d9:
fb:82:ef:ac:5f:09:2e:07:b5:a7:e7:6b:6a:f8:58:95:52:0d:
d1:02:f5:9f:77:73:c2:4e:ef:1a:71:b3:fd:34:71:02:4b:29:
72:74:b1:b0:81:50:c4:d3:23:76:e8:c9:db:46:9d:fa:af:4a:
0c:11:fe:1b:40:5a:17:65:3c:1c:a6:97:97:bf:45:88:45:bb:
f1:9f:c3:b7:6c:a3:3d:4d:38:87:1c:3c:ae:c6:96:5b:bd:fa:
1d:bc:a3:42:c7:eb:54:22:b1:3b:df:7b:2d:0e:8b:e2:cf:75:
62:03:8c:0e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYcivOGDtlNIxZdfG+XinTLvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMzI3MTEwMzM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGY3NDA2MGM3YTk5Y2FmYWI3ODIyNmNmNmFjNjg5ZjhlYzZjMjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKRQNK/MQv+CdFNTB6KQT14lBABX
Q0IBS8pbvRrHZWrxU80Mh0wtDDeEW1d/ASiuR+TqbWl6u6jjwNUIi8qsKcc3+UDU
ZB3k88cPNXMgF+fIgU47sOTPg+vO2L/o9c7kTTW01OCzOt79mF9Sr+fm+khubUQ5
oEkQKXagoGbQi6ghRxMrJgPwwm4YzQxunkxXH5orDTAqtK1+mJzfN4vSkNv2cc8O
kfZQt4oWFBr7VaslaHdSSW0qexLqfSoDfEinDAsNQHqaLjJhd6AADGOigcijRscC
9VPecwuQqGmjMxYDLr7CoahfS2PX+ZsD6EUYK81LuedBblESBN/3CXmH0wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBj3QGDHqZyvq3gibPasaJ+OxsJzMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvR1BkQVlNZXBuSy1yZUNKczlxeG9uNDdHd25NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABWmpAwQA
BWm5AwQABWnyMA0GCSqGSIb3DQEBCwUAA4IBAQCpmAyfAHnPHsJMnYU6EObFoG/6
DIW+5HA/zfCaTh36pRxoQXLWJ93skCrEqcxWcZPOEhUDAhBO1OxzLaecNGBqddGk
Rc+ezv5MP48FD+H4rb4eI4k3YN7Xx1faMLsB+JrqAXurKBD6MdgizqXAlSwajvA+
kACfsnkyalNQMdPGxtvuc+tSNvv71MjtS+0WHtn7gu+sXwkuB7Wn52tq+FiVUg3R
AvWfd3PCTu8acbP9NHECSylydLGwgVDE0yN26MnbRp36r0oMEf4bQFoXZTwcppeX
v0WIRbvxn8O3bKM9TTiHHDyuxpZbvfodvKNCx+tUIrE733stDoviz3ViA4wO
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:31 2025 by rpki-client