Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/L0oQYX-TSrTT3yoqlY0LC1PgkcM.roa
File: L0oQYX-TSrTT3yoqlY0LC1PgkcM.roa (raw, json)
Hash identifier: Od+HHK1jfKMQVbaIoqDbIofJnTAXrOkxI4SLcgUL+o0=
Subject key identifier: 2F:4A:10:61:7F:93:4A:B4:D3:DF:2A:2A:95:8D:0B:0B:53:E0:91:C3
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187E0A7C2603F14C7EFFB1192BFD326DFE9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/L0oQYX-TSrTT3yoqlY0LC1PgkcM.roa
Signing time: Wed 03 May 2023 08:08:23 +0000
ROA not before: Wed 03 May 2023 08:08:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210993
IP address blocks: 5.105.48.0/23 maxlen: 23
5.105.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:a7:c2:60:3f:14:c7:ef:fb:11:92:bf:d3:26:df:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 3 08:08:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f4a10617f934ab4d3df2a2a958d0b0b53e091c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cd:fb:bd:be:f9:1c:27:3b:40:d9:64:7a:fa:
22:31:26:a9:f0:46:41:50:6d:69:69:98:dc:00:06:
87:39:96:fa:f4:2b:b0:5b:19:a1:64:c5:61:61:31:
79:50:1d:0d:17:2f:80:57:b0:27:1c:40:4d:b5:1e:
5c:fe:0d:78:3a:76:dd:02:00:45:e5:88:7c:a2:54:
cf:35:14:3e:07:2f:65:f3:da:d7:2c:8f:82:c9:37:
a6:8c:ab:10:25:cf:ca:35:fd:4f:73:7b:38:7d:71:
90:be:51:0d:0b:6e:a0:22:e0:05:a6:d7:79:63:98:
8a:59:ef:8a:4a:8f:04:60:c7:47:cd:1c:af:8e:74:
5d:86:c9:98:07:dc:6d:d5:5e:f3:2b:a3:d1:0a:f2:
9d:2a:25:19:99:ae:82:d0:ff:cc:d6:1f:90:17:d4:
9c:cc:80:3b:b4:e6:d0:40:62:1e:a1:40:f5:b0:19:
b5:69:37:75:3f:39:de:39:19:c0:de:b7:c7:79:c0:
30:f9:df:60:09:3c:f7:e9:9c:d7:0a:e2:8e:b1:60:
e4:6e:c3:aa:a3:1a:05:b9:40:3b:c2:7e:31:a1:bd:
e7:8f:55:66:8d:f8:72:8a:85:38:c4:fd:d2:0f:7e:
7c:76:86:d9:fd:b5:d6:b4:c8:fb:e7:36:e7:81:2b:
31:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4A:10:61:7F:93:4A:B4:D3:DF:2A:2A:95:8D:0B:0B:53:E0:91:C3
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/L0oQYX-TSrTT3yoqlY0LC1PgkcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.48.0/23
Signature Algorithm: sha256WithRSAEncryption
53:81:74:0a:27:00:4b:e1:c3:77:10:51:f9:d3:a9:cf:5f:74:
35:31:58:ce:45:11:34:47:62:39:a9:a7:96:de:85:09:cd:2f:
fd:cb:ff:8a:ec:f9:2f:a4:53:20:81:52:4a:3a:66:46:17:db:
22:4b:58:95:4a:cd:4d:02:c0:29:b1:b8:1d:44:b3:b2:53:ee:
f4:f3:cf:c9:4a:66:80:8d:c2:97:18:20:80:93:87:f4:f2:88:
39:17:f3:cb:89:d1:c3:66:26:86:a1:85:d5:6d:ca:f7:7d:84:
78:5e:2a:51:f0:16:60:7d:9c:c1:fc:31:cf:e4:13:30:ec:ce:
2f:77:ca:10:b2:48:98:a2:30:ad:3f:a6:df:6c:99:fb:35:29:
c4:fa:cd:71:6b:47:16:dd:97:ed:0c:43:72:10:58:34:d1:9b:
3b:b2:76:e6:a8:5a:26:c2:ac:34:45:e2:21:17:0a:a4:0b:e3:
58:24:91:90:bc:bf:67:18:c3:f1:06:34:3b:9e:70:1f:df:aa:
e6:90:8c:5e:dc:06:73:a8:1c:0f:9a:71:89:f6:e7:8c:3a:dc:
50:76:0d:a0:16:bf:08:d2:c2:11:24:8b:e5:cd:68:82:5e:2f:
75:ae:ab:f5:50:b8:a8:e5:bc:a8:83:4c:46:00:50:81:2a:63:
56:4b:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:50:14 2025 by rpki-client