Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/N5RjuelfRiQ6BzX-VTtqJEWFHr4.roa
File: N5RjuelfRiQ6BzX-VTtqJEWFHr4.roa (raw, json)
Hash identifier: 43Zxp+yHZ3RB8hoTqqc1szo5RQiE9y0D5hit6ct3N5c=
Subject key identifier: 37:94:63:B9:E9:5F:46:24:3A:07:35:FE:55:3B:6A:24:45:85:1E:BE
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189D41B2ECB93C3BD34F7D5CF8112FEBE8A
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/N5RjuelfRiQ6BzX-VTtqJEWFHr4.roa
Signing time: Tue 08 Aug 2023 07:44:58 +0000
ROA not before: Tue 08 Aug 2023 07:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.209.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.14.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.23.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:1b:2e:cb:93:c3:bd:34:f7:d5:cf:81:12:fe:be:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 8 07:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=379463b9e95f46243a0735fe553b6a2445851ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0c:62:d4:09:1e:cb:2e:1f:05:65:0d:0e:37:
c8:aa:c9:c3:24:69:80:42:29:ab:f0:64:d7:4e:f2:
fa:6a:df:f6:0c:4d:90:ac:31:07:63:81:f8:d0:e2:
12:c5:0d:b6:3f:8a:03:4d:60:f4:b4:4c:7c:f4:bb:
5c:a4:27:85:18:16:cf:4e:b4:bc:af:1b:8a:00:22:
dd:4d:de:02:f2:88:a6:71:77:c2:40:da:48:5d:2a:
c4:7b:8c:87:c4:31:68:a5:96:98:eb:cd:14:ab:87:
f2:30:53:ae:01:c9:10:f6:40:f0:78:b3:d5:4e:88:
53:d0:de:32:d3:79:22:8c:93:ff:4a:82:5f:1b:88:
0e:bc:25:d4:f9:5f:ad:7f:87:7d:9e:30:15:a7:57:
6d:d0:9f:5d:68:c0:20:31:8c:c3:3a:e5:9c:4e:b7:
84:f9:3b:16:b0:02:db:57:97:d2:fa:ec:07:c6:a0:
36:53:84:67:70:2c:eb:f7:bb:e4:b1:be:f1:74:74:
10:d6:36:5c:a4:3b:a4:4c:5b:ec:ee:bf:d4:c3:d9:
35:16:a8:25:2c:ce:0d:d5:3b:20:7d:28:ab:bf:84:
73:8a:dd:d5:43:3d:ed:a7:bd:8e:cd:02:fe:b0:5e:
71:8e:c1:dc:d5:81:c2:ad:2a:88:b4:21:92:47:bd:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:94:63:B9:E9:5F:46:24:3A:07:35:FE:55:3B:6A:24:45:85:1E:BE
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/N5RjuelfRiQ6BzX-VTtqJEWFHr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.14.0/23
5.105.18.0/23
5.105.21.0/24
5.105.23.0/24
5.105.26.0/24
5.105.30.0/24
5.105.32.0/23
5.105.40.0/24
5.105.44.0/24
5.105.57.0/24
5.105.62.0/23
5.105.75.0/24
5.105.101.0/24
5.105.111.0/24
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/24
5.105.157.0/24
5.105.162.0/24
5.105.169.0/24
5.105.209.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.249.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
23:db:06:b7:01:08:1d:31:51:05:fe:df:be:74:1b:6b:c6:c4:
83:09:75:66:cc:c8:92:2b:43:08:2b:a7:62:4f:47:e9:ff:a0:
83:91:bf:af:f4:88:51:69:ce:2c:1c:b0:f6:f2:a5:05:38:20:
ed:a8:b6:38:31:aa:33:3c:8b:19:8b:a2:bb:a6:59:4d:0e:b4:
38:11:9e:6b:a0:cf:19:1c:70:0b:5e:26:cd:f4:dd:28:74:d8:
9a:da:fb:7f:b8:7d:b2:fb:62:8c:d0:53:92:d4:40:b0:e6:c9:
20:32:1a:66:70:ea:d7:54:64:44:5a:90:84:92:1b:e6:14:3c:
c4:1b:58:04:98:f5:92:a7:0a:f6:a6:46:18:be:12:66:60:89:
7f:d1:8b:d4:1a:bc:f0:13:06:0f:ec:d7:84:d3:e7:8b:b5:43:
6e:fc:da:c3:8b:66:03:52:a9:73:88:62:74:ac:3b:13:31:5f:
b0:e1:92:81:22:d6:24:f7:1d:83:c1:1d:8b:04:be:01:3c:3c:
67:c0:56:57:83:cf:01:1b:de:ff:3e:03:40:9f:43:bd:bb:89:
ea:90:4d:4f:d0:4f:e3:06:3f:05:42:ca:29:b7:d0:6b:f1:ce:
bd:2f:39:5a:6c:f2:8d:bd:c1:1c:c6:9d:55:02:12:61:2f:3c:
8a:e8:b7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:43 2025 by rpki-client