Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OCtws-luCj1ddZcZYZBPQavvgzM.roa
File: OCtws-luCj1ddZcZYZBPQavvgzM.roa (raw, json)
Hash identifier: H4+cuzilmrsnL6pVilU0z0J39fZ4pmdXrGKzxAMA8Tk=
Subject key identifier: 38:2B:70:B3:E9:6E:0A:3D:5D:75:97:19:61:90:4F:41:AB:EF:83:33
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A65CF7124E65E152E80CE4A986A8CB3ED
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OCtws-luCj1ddZcZYZBPQavvgzM.roa
Signing time: Tue 05 Sep 2023 14:46:48 +0000
ROA not before: Tue 05 Sep 2023 14:46:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.205.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:cf:71:24:e6:5e:15:2e:80:ce:4a:98:6a:8c:b3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 5 14:46:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=382b70b3e96e0a3d5d75971961904f41abef8333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:21:8e:84:44:45:bb:58:b9:10:f0:fa:e3:
fb:73:82:1e:6c:18:b8:f1:69:07:5d:de:b0:b8:a3:
ae:e6:da:43:32:c2:6a:43:c7:54:8b:cf:ad:b8:8b:
06:eb:2c:62:29:9a:9c:04:72:02:36:44:6e:e1:6d:
4f:93:81:61:ce:cc:8c:8c:e1:e9:2c:d7:cf:5c:74:
0c:29:be:86:1f:2e:a2:c9:70:a4:4b:12:9e:18:84:
e0:1e:25:58:98:32:a0:8e:f0:6c:5c:9e:d5:50:26:
83:3c:c9:dd:94:36:4e:ef:2e:09:5c:8d:4a:35:54:
2a:d5:78:51:1e:13:33:9a:f5:5c:90:32:05:98:61:
69:27:c4:01:98:ee:e7:c7:75:1d:98:1e:1c:0f:60:
ce:d7:92:1e:50:62:cb:7b:e3:76:8a:52:42:22:37:
e4:82:20:87:61:57:c5:2c:38:af:1d:eb:ce:dd:94:
69:65:15:af:6c:ad:dc:35:1a:68:22:c1:5d:4f:b3:
b6:29:01:be:3e:09:86:ad:b9:50:cd:f6:53:7f:f6:
d8:7c:27:b7:85:5d:00:2d:92:b4:bf:f1:34:38:d4:
cd:16:93:5d:1d:c5:c4:40:4f:b5:31:47:5b:24:4c:
c5:27:e3:7c:85:91:f4:72:58:ff:ad:90:5e:0c:98:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2B:70:B3:E9:6E:0A:3D:5D:75:97:19:61:90:4F:41:AB:EF:83:33
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OCtws-luCj1ddZcZYZBPQavvgzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.16.0/24
5.105.18.0/24
5.105.21.0/24
5.105.40.0/24
5.105.50.0/24
5.105.57.0/24
5.105.62.0/24
5.105.84.0/24
5.105.115.0/24
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.157.0/24
5.105.162.0/24
5.105.164.0/24
5.105.187.0/24
5.105.197.0/24
5.105.203.0/24
5.105.205.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d8:54:23:c5:21:0e:55:3c:0d:a3:65:02:01:67:fe:f0:ab:
2d:b9:71:e5:b4:a6:b3:4e:35:a7:65:c0:ed:4f:3d:5a:5c:39:
47:20:81:8c:4b:83:64:4f:ea:b2:5f:96:48:fb:88:29:14:95:
b7:94:c0:d2:48:b1:a0:b7:63:96:28:21:37:4d:0c:f0:4f:b0:
63:bf:bc:fa:89:ab:0d:af:bc:7d:6e:48:fc:81:1b:90:4d:c2:
a5:db:da:ce:55:0e:4b:cd:1c:d7:09:60:68:eb:71:84:a2:74:
47:8d:5d:c2:70:b4:ff:e8:b3:ee:5c:c6:8a:d7:f7:f4:92:3e:
11:2d:fa:d9:64:af:bf:cf:58:fa:08:07:2b:53:4c:47:2f:8c:
7f:2d:ea:3b:4d:bd:09:07:32:5c:94:92:dc:5a:0e:ab:74:fe:
73:dc:f6:ed:85:48:8f:21:11:0e:3b:e4:b0:14:80:84:7f:45:
5f:45:23:12:8a:9f:5d:74:7b:38:2a:56:b1:b0:0b:5a:3e:1e:
bd:aa:cd:2d:4d:11:5e:d0:53:e7:76:56:94:82:99:2f:a0:88:
05:d2:fd:d6:ee:f5:64:a4:d1:6c:d2:52:c6:6c:a4:98:d1:27:
ef:18:a6:44:db:c7:95:19:d5:c2:98:9c:c9:96:03:e4:46:0d:
d2:65:9b:30
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAYplz3Ek5l4VLoDOSphqjLPtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwOTA1MTQ0NjQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODJiNzBiM2U5NmUwYTNkNWQ3NTk3MTk2MTkwNGY0MWFiZWY4MzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozQhjoRERbtYuRDw+uP7c4IebBi4
8WkHXd6wuKOu5tpDMsJqQ8dUi8+tuIsG6yxiKZqcBHICNkRu4W1Pk4FhzsyMjOHp
LNfPXHQMKb6GHy6iyXCkSxKeGITgHiVYmDKgjvBsXJ7VUCaDPMndlDZO7y4JXI1K
NVQq1XhRHhMzmvVckDIFmGFpJ8QBmO7nx3UdmB4cD2DO15IeUGLLe+N2ilJCIjfk
giCHYVfFLDivHevO3ZRpZRWvbK3cNRpoIsFdT7O2KQG+PgmGrblQzfZTf/bYfCe3
hV0ALZK0v/E0ONTNFpNdHcXEQE+1MUdbJEzFJ+N8hZH0clj/rZBeDJiIRQIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFDgrcLPpbgo9XXWXGWGQT0Gr74MzMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvT0N0d3MtbHVDajFkZFpjWllaQlBRYXZ2Z3pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBqwQCAAEwgaQDBAAF
aRADBAAFaRIDBAAFaRUDBAAFaSgDBAAFaTIDBAAFaTkDBAAFaT4DBAAFaVQDBAAF
aXMDBAAFaXoDBAAFaX8DBAAFaYMDBAAFaYYDBAAFaYgDBAEFaYoDBAAFaZ0DBAAF
aaIDBAAFaaQDBAAFabsDBAAFacUDBAAFacsDBAAFac0wDAMEAAVp7wMEAAVp8AME
AQVp9AMEAAW0sAMEAMEu0jANBgkqhkiG9w0BAQsFAAOCAQEActhUI8UhDlU8DaNl
AgFn/vCrLblx5bSms041p2XA7U89Wlw5RyCBjEuDZE/qsl+WSPuIKRSVt5TA0kix
oLdjlighN00M8E+wY7+8+omrDa+8fW5I/IEbkE3CpdvazlUOS80c1wlgaOtxhKJ0
R41dwnC0/+iz7lzGitf39JI+ES362WSvv89Y+ggHK1NMRy+Mfy3qO029CQcyXJSS
3FoOq3T+c9z27YVIjyERDjvksBSAhH9FX0UjEoqfXXR7OCpWsbALWj4evarNLU0R
XtBT53ZWlIKZL6CIBdL91u71ZKTRbNJSxmykmNEn7ximRNvHlRnVwpicyZYD5EYN
0mWbMA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:33 2025 by rpki-client