Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Oogl3-Zbav73kXc0oBpI5k-HV6E.roa
File: Oogl3-Zbav73kXc0oBpI5k-HV6E.roa (raw, json)
Hash identifier: 6F8JjpnTr1bqmMKQrCeXy2wDVj36QYmYXZAHE2+kQwg=
Subject key identifier: 3A:88:25:DF:E6:5B:6A:FE:F7:91:77:34:A0:1A:48:E6:4F:87:57:A1
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A4FBEE39CF4955FBF871C257D39966600
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Oogl3-Zbav73kXc0oBpI5k-HV6E.roa
Signing time: Fri 01 Sep 2023 07:57:04 +0000
ROA not before: Fri 01 Sep 2023 07:57:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 5.105.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:be:e3:9c:f4:95:5f:bf:87:1c:25:7d:39:96:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 1 07:57:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a8825dfe65b6afef7917734a01a48e64f8757a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:56:c7:2d:c1:58:41:70:5e:3d:b6:e2:ad:
7f:63:da:1f:54:97:5c:a3:13:ec:bc:5f:65:ea:b9:
19:c3:53:c9:29:7b:32:bf:cd:a8:d5:38:38:24:57:
46:14:86:98:d3:06:27:62:8b:1e:bb:40:ee:e7:e0:
ad:ea:cb:55:db:52:5f:32:dc:40:41:1d:60:df:cf:
55:e2:b4:5d:db:4b:70:91:2d:4a:d8:3b:9c:73:8e:
97:8b:fa:24:a9:2a:19:7a:91:02:04:6a:71:d0:60:
e8:76:52:5b:19:e2:0f:c0:c1:24:b0:d8:27:27:e6:
a7:d8:f1:a6:6e:48:19:ac:b2:d0:c6:a8:b3:4e:44:
2c:87:c3:8b:1a:60:30:87:ab:86:35:83:a0:ea:bf:
a4:73:36:91:49:16:ed:71:08:c9:0b:32:78:46:8b:
a2:82:84:11:1c:98:71:d7:48:47:01:16:f8:95:57:
22:cb:4a:c3:09:bb:2d:9a:e7:25:3b:29:29:b0:17:
01:1a:2e:39:b6:e6:bf:d1:36:21:ca:b3:44:03:2e:
cf:2c:46:7b:0f:ec:4e:8e:88:85:e7:86:71:86:d4:
de:06:bc:69:58:75:aa:bc:9a:aa:4d:48:e4:cd:4e:
70:47:0b:05:0a:4d:5e:c2:e6:fd:a5:6a:61:1b:31:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:88:25:DF:E6:5B:6A:FE:F7:91:77:34:A0:1A:48:E6:4F:87:57:A1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Oogl3-Zbav73kXc0oBpI5k-HV6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d1:c4:b7:5a:32:5b:9e:e4:bc:27:0c:1b:d7:ae:e3:fe:04:
14:25:44:f0:46:eb:60:e5:7d:22:3d:fc:3e:e2:8e:fb:cc:f9:
67:49:8b:b5:1a:9c:07:9d:26:16:86:b5:25:49:1e:48:44:84:
9b:79:48:15:f4:4b:02:e7:4a:ff:58:f8:6c:a9:58:ab:1d:69:
4d:48:9b:eb:8a:ec:33:37:7a:97:b0:6a:59:ab:84:c8:eb:7a:
19:c0:6c:12:f0:81:60:e9:8b:4d:8d:61:e2:13:4f:5e:43:13:
96:de:9f:e3:dd:5c:2b:85:6e:56:b1:3d:0f:5a:07:c9:1a:ef:
4d:5e:dd:e6:77:fc:ed:a0:a6:12:a4:8e:70:c4:25:4e:c1:05:
ed:1a:dc:e2:6d:97:7d:45:e7:27:ea:18:dd:0e:64:fb:24:77:
32:0c:5b:77:24:80:4f:ac:fe:80:99:ba:bc:a7:75:b3:e1:19:
03:44:c8:22:1a:05:b2:48:80:e2:13:a8:ac:4c:ed:88:79:03:
3f:57:05:52:2c:87:c4:aa:45:a4:df:2a:ee:f5:b2:7b:a8:64:
34:7a:f2:c8:ef:8b:f3:b4:93:db:3b:0a:e2:69:ab:8d:b2:ca:
f1:06:90:11:52:b2:0a:fa:6c:f0:44:be:f7:2b:e1:fd:a6:3d:
40:f4:49:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:12 2025 by rpki-client