Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/PFDqMP9AP3bKN9cXs8J26yDRLUc.roa
File: PFDqMP9AP3bKN9cXs8J26yDRLUc.roa (raw, json)
Hash identifier: rLhaJ13pv3mClQcoC5mUj7ycQFnKomR8u5j6rhCG1w0=
Subject key identifier: 3C:50:EA:30:FF:40:3F:76:CA:37:D7:17:B3:C2:76:EB:20:D1:2D:47
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188C4B6A4504FFDB8FE7CDD5597EEA8419D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/PFDqMP9AP3bKN9cXs8J26yDRLUc.roa
Signing time: Fri 16 Jun 2023 14:58:03 +0000
ROA not before: Fri 16 Jun 2023 14:58:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.143.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:b6:a4:50:4f:fd:b8:fe:7c:dd:55:97:ee:a8:41:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 16 14:58:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c50ea30ff403f76ca37d717b3c276eb20d12d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:59:9a:46:ab:ae:1c:87:67:02:a1:2b:15:
2c:59:ce:7b:f9:6b:c3:cc:0f:59:f7:2a:f1:5a:28:
29:17:82:76:4b:a0:4c:11:d1:c2:98:08:61:cc:6e:
b2:cd:9d:3b:cf:49:c8:93:2f:aa:fe:1c:57:e7:ae:
33:91:cc:9a:8d:46:86:46:74:2f:0a:24:66:f6:7b:
94:6e:ee:d1:08:ae:c2:c6:64:35:c8:3d:50:73:45:
fc:c1:37:9d:7b:91:25:38:7d:d5:c1:7f:59:8a:c9:
99:d1:d3:0a:a9:de:76:12:6c:07:f4:f0:72:09:a6:
33:f2:12:db:55:5e:f6:a9:15:87:92:b4:dc:d4:4b:
3a:ae:73:27:7c:67:7b:63:ff:72:aa:90:21:2e:ac:
6d:7b:bc:b3:b2:a2:d3:41:15:6a:90:bd:0b:0c:09:
b5:4a:3b:3a:bd:78:8f:69:8c:17:ef:42:a5:6f:2f:
38:49:60:c4:d3:db:dc:c7:76:a8:ff:55:54:89:9d:
a3:49:0d:d8:0b:f4:22:18:ee:08:29:6a:5e:4b:78:
a1:9d:20:f4:c2:12:f8:6b:71:b8:ab:ae:2e:a4:d5:
7c:27:ec:0c:32:34:50:e7:a2:e6:66:5c:b1:30:38:
24:ec:16:21:d3:51:e1:15:55:d9:7d:75:71:89:f0:
09:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:50:EA:30:FF:40:3F:76:CA:37:D7:17:B3:C2:76:EB:20:D1:2D:47
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/PFDqMP9AP3bKN9cXs8J26yDRLUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.5.0/24
5.105.7.0/24
5.105.18.0/23
5.105.36.0/24
5.105.59.0/24
5.105.94.0/24
5.105.113.0/24
5.105.118.0/24
5.105.143.0/24
5.105.162.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0-5.105.230.255
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:22:40:9a:15:3a:b2:4d:9a:82:b6:a1:03:88:4c:34:a9:ee:
fc:26:8b:be:51:b9:3c:2f:94:b2:22:b8:6e:9d:a8:69:17:41:
49:08:99:8e:22:00:65:d4:de:1b:d9:c7:7a:29:a5:2c:99:b7:
52:5c:5a:d2:9c:b6:a8:4b:35:db:99:74:15:f6:14:8e:04:f0:
f9:4b:97:5b:e3:a6:1c:ef:2b:3f:2c:62:a3:9e:ad:9f:b8:a1:
0f:08:bf:85:e7:dd:6e:7e:0c:b9:a5:d6:60:94:9d:38:3a:20:
9c:83:3e:fa:4a:7f:92:02:4a:9b:7f:1f:0b:27:07:26:23:37:
b7:e7:19:20:02:e3:82:fe:45:68:8d:fc:ae:37:22:88:fa:29:
e2:ab:13:3e:1d:00:69:e2:f3:d1:11:b8:80:1e:7a:ce:d0:63:
d1:e6:9d:68:85:e7:79:04:a3:2b:77:de:9e:43:f4:6a:b0:ea:
99:1d:4f:a2:02:14:4d:8c:40:fc:cb:ca:e3:d2:65:d8:95:89:
97:e4:b1:25:e6:18:ab:12:3c:3c:2e:36:a0:b6:fb:73:56:fd:
de:86:69:fe:d4:b6:e4:94:dc:18:bb:a7:33:6f:96:c2:4a:4d:
c2:a2:f4:a8:3e:aa:2a:53:e2:4a:f5:c7:93:83:7b:74:2e:7b:
0b:66:79:5d
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAYjEtqRQT/24/nzdVZfuqEGdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjE2MTQ1ODAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzUwZWEzMGZmNDAzZjc2Y2EzN2Q3MTdiM2MyNzZlYjIwZDEyZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfRZmkarrhyHZwKhKxUsWc57+WvD
zA9Z9yrxWigpF4J2S6BMEdHCmAhhzG6yzZ07z0nIky+q/hxX564zkcyajUaGRnQv
CiRm9nuUbu7RCK7CxmQ1yD1Qc0X8wTede5ElOH3VwX9ZismZ0dMKqd52EmwH9PBy
CaYz8hLbVV72qRWHkrTc1Es6rnMnfGd7Y/9yqpAhLqxte7yzsqLTQRVqkL0LDAm1
Sjs6vXiPaYwX70Klby84SWDE09vcx3ao/1VUiZ2jSQ3YC/QiGO4IKWpeS3ihnSD0
whL4a3G4q64upNV8J+wMMjRQ56LmZlyxMDgk7BYh01HhFVXZfXVxifAJPQIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFDxQ6jD/QD92yjfXF7PCdusg0S1HMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvUEZEcU1QOUFQM2JLTjljWHM4SjI2eURSTFVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDCBqQQCAAEwgaIDBAAF
aQMDBAAFaQUDBAAFaQcDBAEFaRIDBAAFaSQDBAAFaTsDBAAFaV4DBAAFaXEDBAAF
aXYDBAAFaY8DBAAFaaIDBAAFaaoDBAEFaboDBAEFacYDBAEFacoDBAAFac4wDAME
AAVp1wMEAAVp2AMEAAVp2jAMAwQCBWnkAwQABWnmMAwDBAAFae8DBAAFafADBAEF
afQDBAAFtLADBADBLtIwDQYJKoZIhvcNAQELBQADggEBAJ8iQJoVOrJNmoK2oQOI
TDSp7vwmi75RuTwvlLIiuG6dqGkXQUkImY4iAGXU3hvZx3oppSyZt1JcWtKctqhL
NduZdBX2FI4E8PlLl1vjphzvKz8sYqOerZ+4oQ8Iv4Xn3W5+DLml1mCUnTg6IJyD
PvpKf5ICSpt/HwsnByYjN7fnGSAC44L+RWiN/K43Ioj6KeKrEz4dAGni89ERuIAe
es7QY9HmnWiF53kEoyt33p5D9Gqw6pkdT6ICFE2MQPzLyuPSZdiViZfksSXmGKsS
PDwuNqC2+3NW/d6Gaf7UtuSU3Bi7pzNvlsJKTcKi9Kg+qipT4kr1x5ODe3Quewtm
eV0=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:11 2025 by rpki-client