Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/LgLrk2AN102WTE3VKIymNK7pdJE.roa
File: LgLrk2AN102WTE3VKIymNK7pdJE.roa (raw, json)
Hash identifier: RpsMUMHPBrhyQ47Jm0C0Vcg8kokiVD72hyAIWDYrMDk=
Subject key identifier: 2E:02:EB:93:60:0D:D7:4D:96:4C:4D:D5:28:8C:A6:34:AE:E9:74:91
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183CCA4CF06FA7A2742D0EC759C56CF5F4E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/LgLrk2AN102WTE3VKIymNK7pdJE.roa
Signing time: Wed 12 Oct 2022 14:41:36 +0000
ROA not before: Wed 12 Oct 2022 14:41:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.255.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cc:a4:cf:06:fa:7a:27:42:d0:ec:75:9c:56:cf:5f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 12 14:41:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e02eb93600dd74d964c4dd5288ca634aee97491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:9b:db:bb:fc:73:df:b5:8f:3f:c1:e0:7f:
e8:9d:fe:b3:89:c7:de:b9:b2:e9:94:27:30:4a:20:
99:9e:83:80:a0:e7:96:99:7a:dc:55:88:f8:2f:75:
d6:71:0f:90:d3:10:67:a9:69:61:ca:80:6a:e7:38:
a7:db:f3:8a:d3:ed:8d:d4:78:04:de:3a:62:9a:d4:
3b:81:55:83:d7:48:8d:15:85:28:3c:c3:69:84:8e:
78:f0:79:8e:1f:32:ad:1c:ba:7b:c7:12:94:b7:16:
a4:9b:53:e8:3b:9c:82:68:18:1a:72:5f:fd:90:80:
cc:a7:c9:34:99:50:9d:83:ad:52:ca:7d:79:87:2a:
93:f6:46:99:e7:94:de:a5:95:cd:21:6a:9a:b8:26:
01:71:1a:f2:bc:f6:2d:87:10:38:c2:9a:e6:fa:e5:
f0:68:a5:ea:e5:bf:ae:9c:73:06:13:07:c1:c9:f1:
4c:7f:36:6d:8d:8b:bf:d0:46:b4:7e:c3:de:3a:31:
c1:c3:03:97:d5:42:ab:7a:4c:da:58:71:8f:70:05:
11:91:9b:54:28:04:a5:cf:ee:92:a7:5e:50:0f:66:
6e:67:d4:8c:5b:10:ed:f4:c1:17:2d:5a:60:65:de:
2f:3c:1f:b7:8e:9c:e4:7c:68:ae:14:1f:75:7b:a3:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:02:EB:93:60:0D:D7:4D:96:4C:4D:D5:28:8C:A6:34:AE:E9:74:91
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/LgLrk2AN102WTE3VKIymNK7pdJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.79.0/24
5.105.95.0/24
5.105.118.0/24
5.105.122.0/24
5.105.255.0/24
Signature Algorithm: sha256WithRSAEncryption
88:61:84:41:b3:13:48:32:cc:2d:a5:91:df:5e:05:f0:b4:37:
83:c4:18:57:b6:dd:aa:82:c2:af:7f:a8:eb:39:7d:d6:1a:14:
fb:ef:91:aa:2a:66:f8:0d:ac:9e:9e:60:15:99:cd:a1:57:b6:
32:44:2a:7a:d7:69:c2:ae:00:00:68:3e:33:75:dc:6d:37:07:
be:61:aa:f2:24:69:f9:c9:0d:cf:9f:1c:97:d0:6b:dd:3a:0b:
98:78:d0:1a:67:33:88:90:0e:66:b8:30:a6:0a:cf:fc:69:6a:
85:55:d6:e9:3e:a9:1a:13:60:e4:8f:5e:27:cc:7c:3a:8b:72:
2a:b9:ce:81:b7:a5:c6:fa:9d:79:b6:5f:81:16:5e:1b:46:9e:
8e:7f:72:ec:b5:a4:9b:e7:09:00:9c:51:7a:ed:63:82:30:dd:
99:58:06:d7:33:c8:e3:47:20:85:ae:4b:f6:c6:e8:59:de:ab:
78:7a:17:16:2b:8b:06:fe:eb:de:38:7b:b0:45:9f:0b:b8:f0:
96:98:42:00:59:23:7f:5d:a3:38:e8:c7:d1:58:4c:3e:30:4c:
d1:06:0c:87:c8:68:9c:4a:1d:a1:40:1e:ef:8f:f0:bc:f3:cf:
ff:7f:f0:3e:5a:c4:d8:22:21:c7:ed:85:8a:3b:52:1b:7a:6c:
3b:0c:08:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:47:25 2025 by rpki-client