Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OEKpNV9kCP0VgO9CdjCcHK2zLng.roa
File: OEKpNV9kCP0VgO9CdjCcHK2zLng.roa (raw, json)
Hash identifier: cVGG7iOd/RcyQSsAQG8nidC+iahYIaEM8GftYa3xAag=
Subject key identifier: 38:42:A9:35:5F:64:08:FD:15:80:EF:42:76:30:9C:1C:AD:B3:2E:78
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018828B4012499F1703CA82073D9CA244BD9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OEKpNV9kCP0VgO9CdjCcHK2zLng.roa
Signing time: Wed 17 May 2023 07:54:25 +0000
ROA not before: Wed 17 May 2023 07:54:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.158.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:b4:01:24:99:f1:70:3c:a8:20:73:d9:ca:24:4b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 17 07:54:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3842a9355f6408fd1580ef4276309c1cadb32e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:22:2b:2b:c7:b0:ee:40:df:7d:3a:fc:15:
14:78:53:63:e7:e5:bf:14:a8:c6:64:4c:00:03:6c:
b4:da:48:05:9c:46:92:d8:cd:27:46:1a:fe:e0:ae:
0a:58:76:6c:9c:31:7c:ae:9c:17:81:e8:3b:3b:bb:
de:76:f8:d3:66:59:3c:7f:47:5c:99:42:97:8c:a0:
d8:a9:3e:65:86:aa:fe:ee:e2:d6:3a:98:3d:32:e4:
ac:cf:e3:2e:51:e7:c4:b2:cf:ce:5c:a3:0c:78:24:
b3:9b:b6:b1:de:59:1c:0c:6d:45:38:a8:f9:f4:fe:
c6:ef:ef:d6:e4:d0:5c:50:8e:da:50:58:35:94:52:
a8:ad:2e:53:0c:9a:1c:17:27:33:cf:fa:b8:83:e6:
d0:16:51:fc:d8:d5:e7:81:7f:f3:7d:49:c8:70:e4:
1d:ca:3e:b4:59:6b:ee:b3:1d:c3:bf:8c:45:3b:d8:
fe:bd:65:1c:53:a3:d1:95:f9:60:ef:7e:af:15:f1:
d5:65:b7:e7:1d:39:40:f7:27:1f:4b:74:90:5a:5b:
40:67:09:06:74:75:fa:40:d7:e2:ec:20:66:7e:12:
21:0e:04:09:c9:1f:30:b4:5e:fc:23:b5:6c:de:b2:
84:fc:72:0a:41:cb:82:7a:0d:05:f8:2c:52:6d:d5:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:42:A9:35:5F:64:08:FD:15:80:EF:42:76:30:9C:1C:AD:B3:2E:78
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/OEKpNV9kCP0VgO9CdjCcHK2zLng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.26.0/24
5.105.31.0/24
5.105.51.0/24
5.105.64.0/24
5.105.75.0/24
5.105.77.0/24
5.105.104.0/24
5.105.113.0/24
5.105.118.0/24
5.105.158.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.215.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
10:dc:70:a4:02:3d:b9:96:d3:70:d6:8c:30:4a:a8:d1:36:61:
0d:61:0f:4c:d8:ac:62:d9:2b:4e:d7:41:46:bb:4a:83:cf:da:
da:dd:9b:17:26:7f:e3:65:21:e8:d7:cf:3e:1b:94:fa:90:72:
49:69:f9:61:f4:b9:27:c7:33:08:e2:e7:75:79:ba:97:63:80:
db:91:fd:0a:26:c5:50:58:08:fa:56:94:3d:a8:7d:36:9d:2f:
41:b0:5c:3e:3b:38:ad:62:af:c9:d9:d5:ef:c0:c1:2c:22:3f:
0d:14:1f:d6:e7:1e:e1:c6:cc:59:34:a5:ab:5f:03:ab:f1:49:
02:86:36:aa:27:6d:ce:ae:aa:e2:66:2d:9d:ca:1a:4b:ee:d0:
44:a1:8c:81:1b:16:3d:63:21:fe:45:26:19:7b:55:2d:af:ac:
c0:15:43:78:1e:96:4d:c5:9c:18:3b:70:28:b0:fd:e0:b9:ef:
fd:cd:54:a8:71:94:e5:e0:30:d0:2a:62:5c:d5:0f:42:95:af:
1c:d6:1b:19:3a:f3:a5:6c:17:e4:b6:e8:6c:cf:14:84:02:cd:
96:d8:2f:17:e9:9b:d2:5f:42:72:33:8b:8b:15:16:0f:10:fe:
21:40:59:30:5c:d1:2c:36:c9:b2:ca:1b:a7:55:2e:fa:7f:ef:
2c:d0:66:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:28 2025 by rpki-client