Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/IFGE5NsoZR_ugr7pFS39z6r6jyY.roa
File: IFGE5NsoZR_ugr7pFS39z6r6jyY.roa (raw, json)
Hash identifier: zQGk26T44gYSvSqt4kTXsP8Hy6t3ox/Tdz8bHgiaOc0=
Subject key identifier: 20:51:84:E4:DB:28:65:1F:EE:82:BE:E9:15:2D:FD:CF:AA:FA:8F:26
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187BC82CE34A8C3A6D95A90BDBC8FBE46AB
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/IFGE5NsoZR_ugr7pFS39z6r6jyY.roa
Signing time: Wed 26 Apr 2023 07:41:41 +0000
ROA not before: Wed 26 Apr 2023 07:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.35.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:82:ce:34:a8:c3:a6:d9:5a:90:bd:bc:8f:be:46:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 26 07:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=205184e4db28651fee82bee9152dfdcfaafa8f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ab:b6:e4:96:5d:c1:f8:09:18:7f:b0:52:88:
19:96:4a:b3:da:c9:22:40:34:b7:fb:ba:6e:95:73:
b3:c4:6b:e4:02:c4:ea:1d:f4:ee:4a:24:1a:24:ec:
5f:32:6f:04:ba:2b:3f:e7:2f:d4:35:25:ee:a4:84:
08:b0:79:20:ba:86:f0:c0:f2:9a:ba:4b:65:13:a0:
f3:b9:e2:3c:8b:69:28:22:d0:99:ff:6a:47:8e:4b:
6d:eb:33:80:92:0f:a6:57:f4:a7:60:17:fb:ba:54:
e9:c3:03:c5:56:a5:88:77:f7:e4:8e:21:19:e6:11:
4c:fe:22:90:18:ca:6a:f0:95:fe:89:19:de:b4:f7:
df:a4:db:3d:e5:f1:ab:1f:77:bd:53:09:30:44:04:
63:19:8d:87:8a:dc:de:f5:8f:4a:a8:df:2d:e3:8c:
7c:0f:24:9c:32:87:30:72:d9:e9:f2:aa:c0:9c:d9:
63:9a:24:7d:e6:a1:42:94:d3:75:75:80:87:41:c7:
17:d5:6b:44:5b:db:2f:dc:4f:04:83:5a:c7:50:18:
b0:ce:d3:ee:de:15:ff:f3:8c:9f:43:2c:a3:d3:2e:
8a:70:84:85:8b:9b:45:74:ae:b7:e5:c4:7f:21:0f:
56:8b:6f:ea:86:7a:12:9e:45:32:66:e3:72:aa:fc:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:51:84:E4:DB:28:65:1F:EE:82:BE:E9:15:2D:FD:CF:AA:FA:8F:26
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/IFGE5NsoZR_ugr7pFS39z6r6jyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.34.0/23
5.105.64.0/24
5.105.68.0/23
5.105.77.0/24
5.105.94.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d2:65:23:6d:d7:8e:0e:b3:2c:31:de:49:d4:80:8c:61:40:
e8:74:82:bb:b4:a0:e4:76:18:04:ca:fb:31:78:81:4e:be:8d:
57:ba:27:cb:3c:6d:e5:6f:8f:55:c8:22:e1:ad:5e:02:60:ac:
46:17:0f:97:c8:0f:9d:73:85:51:83:1d:20:55:f8:be:82:88:
a6:45:ae:03:f3:7d:88:8b:59:79:92:59:d9:80:f3:78:37:91:
3f:9f:96:9c:83:ab:8f:e3:27:e6:c9:2e:6f:51:e7:e0:7f:c8:
2c:91:4a:3b:2c:e1:06:09:ff:05:80:d2:c5:53:9f:63:cd:20:
a3:ff:c7:20:37:c1:4e:e9:ce:72:b5:b9:f8:20:2f:e2:e1:71:
a0:3b:c0:1e:5a:95:80:32:8c:d1:ab:f3:9d:ea:fc:f8:7e:3d:
39:cd:d8:49:25:47:bc:4f:57:e9:60:e5:87:9a:ec:b4:8c:ab:
b7:1d:ba:5a:37:98:ea:61:ae:b9:8a:25:5b:32:cd:99:12:e3:
fb:c3:cd:26:22:57:5e:ee:d5:62:0c:20:cf:3a:d5:c2:ee:2b:
7d:9c:cc:e6:6c:02:69:fb:bc:68:21:ec:a4:88:18:0b:89:33:
cd:9b:d1:00:b6:53:35:20:b6:ef:e1:e6:13:71:8f:9a:38:b5:
2d:16:6c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:50 2025 by rpki-client