Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Pq3eTX98SxRgX2os_isrNZxWifE.roa
File: Pq3eTX98SxRgX2os_isrNZxWifE.roa (raw, json)
Hash identifier: 7IK8Zx/B6d+8Sl1gO/kPnZUl8A2XfNANIfUZYl4PNUY=
Subject key identifier: 3E:AD:DE:4D:7F:7C:4B:14:60:5F:6A:2C:FE:2B:2B:35:9C:56:89:F1
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188BE30B9363A474988E91806E99ED9D7C3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Pq3eTX98SxRgX2os_isrNZxWifE.roa
Signing time: Thu 15 Jun 2023 08:34:04 +0000
ROA not before: Thu 15 Jun 2023 08:34:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.143.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:30:b9:36:3a:47:49:88:e9:18:06:e9:9e:d9:d7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 15 08:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3eadde4d7f7c4b14605f6a2cfe2b2b359c5689f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:d0:b6:c3:60:ed:25:74:14:28:08:3b:61:
d9:a1:c6:cd:69:9d:fd:d9:04:c8:f4:c6:24:ac:37:
e1:63:62:ff:23:b4:40:29:f7:c0:ee:a0:b2:e4:a5:
d6:5c:6b:2a:bb:04:6f:c9:f0:8f:d3:8b:07:b4:e4:
38:e3:b1:ba:71:0a:78:44:89:d0:10:45:ab:a6:6b:
2a:69:ba:00:7f:eb:19:e0:93:45:50:4b:35:f4:a4:
2e:a7:0a:d3:a3:14:3c:2d:1a:c3:5a:83:ff:2a:cf:
40:cb:74:12:d2:3e:3e:aa:c2:1b:bb:d4:19:f5:ec:
08:3a:54:b3:eb:9e:b7:c1:01:4c:31:50:96:74:b3:
fc:16:03:de:6c:08:78:8b:4d:9b:18:79:44:67:e1:
fb:c9:a7:41:74:7b:83:f7:a5:b5:9c:ee:49:33:07:
ea:47:9f:54:c4:fa:26:01:4b:dc:0f:40:c9:23:67:
15:b2:fa:29:5e:7a:d8:5e:ac:38:fc:8b:dc:16:7c:
d4:36:57:80:28:94:e7:21:4c:dc:c4:9b:11:1c:52:
b8:96:d1:49:3c:fd:4c:64:6c:c6:6e:35:b0:8a:0e:
ef:23:c8:31:a1:b1:a2:11:30:d9:f6:f4:80:38:25:
d6:f5:40:f7:95:20:ba:83:d4:32:eb:30:41:f3:3c:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AD:DE:4D:7F:7C:4B:14:60:5F:6A:2C:FE:2B:2B:35:9C:56:89:F1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Pq3eTX98SxRgX2os_isrNZxWifE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.5.0/24
5.105.7.0/24
5.105.18.0/23
5.105.36.0/24
5.105.94.0/24
5.105.113.0/24
5.105.118.0/24
5.105.143.0/24
5.105.162.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0-5.105.230.255
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ac:0e:79:d4:bb:f0:55:09:30:d3:0d:dc:2e:7d:e1:f0:9a:
1c:a3:1c:ea:39:0b:a4:ce:14:bf:bd:79:55:c5:df:0d:85:91:
f5:be:b4:67:a6:4b:61:56:3c:52:b8:9a:94:33:77:7a:7f:97:
f7:65:75:d9:0d:c7:05:1d:7b:21:68:c1:17:4d:5a:0b:b1:d4:
f8:f6:35:89:c3:13:78:38:99:e3:47:23:7b:da:87:5c:75:61:
fe:37:4d:36:ea:e0:5c:b3:fb:da:a7:4a:14:1a:d4:26:22:72:
d1:ca:0f:b3:ec:b7:8f:64:49:b7:52:06:8a:e5:f4:5c:98:6a:
20:19:b7:54:ea:f7:12:93:a0:88:4d:09:ad:80:e0:bf:08:89:
ac:f8:4f:f6:ad:4c:f5:dd:d0:25:74:13:c3:ba:06:fa:69:73:
9d:f5:7f:0d:ba:3b:da:86:39:cd:69:dd:32:95:08:0d:9b:c5:
5f:20:b5:71:d0:b8:8f:65:66:ff:43:ce:9c:a9:19:b0:64:07:
04:9a:0a:6d:51:9c:4c:d8:27:08:3b:64:b9:4d:43:ac:37:da:
3a:0f:03:a0:ac:05:d2:d0:c6:6c:53:22:61:35:11:fb:64:5f:
30:fb:c2:a2:aa:a7:23:3d:4a:e6:1b:e8:47:22:66:54:11:67:
d3:23:6c:6c
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAYi+MLk2OkdJiOkYBume2dfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjE1MDgzNDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWFkZGU0ZDdmN2M0YjE0NjA1ZjZhMmNmZTJiMmIzNTljNTY4OWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6PQtsNg7SV0FCgIO2HZocbNaZ39
2QTI9MYkrDfhY2L/I7RAKffA7qCy5KXWXGsquwRvyfCP04sHtOQ447G6cQp4RInQ
EEWrpmsqaboAf+sZ4JNFUEs19KQupwrToxQ8LRrDWoP/Ks9Ay3QS0j4+qsIbu9QZ
9ewIOlSz6563wQFMMVCWdLP8FgPebAh4i02bGHlEZ+H7yadBdHuD96W1nO5JMwfq
R59UxPomAUvcD0DJI2cVsvopXnrYXqw4/IvcFnzUNleAKJTnIUzcxJsRHFK4ltFJ
PP1MZGzGbjWwig7vI8gxobGiETDZ9vSAOCXW9UD3lSC6g9Qy6zBB8zwmFwIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFD6t3k1/fEsUYF9qLP4rKzWcVonxMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvUHEzZVRYOThTeFJnWDJvc19pc3JOWnhXaWZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBAAF
aQMDBAAFaQUDBAAFaQcDBAEFaRIDBAAFaSQDBAAFaV4DBAAFaXEDBAAFaXYDBAAF
aY8DBAAFaaIDBAAFaaoDBAEFaboDBAEFacYDBAEFacoDBAAFac4wDAMEAAVp1wME
AAVp2AMEAAVp2jAMAwQCBWnkAwQABWnmMAwDBAAFae8DBAAFafADBAEFafQDBAAF
tLADBADBLtIwDQYJKoZIhvcNAQELBQADggEBAECsDnnUu/BVCTDTDdwufeHwmhyj
HOo5C6TOFL+9eVXF3w2FkfW+tGemS2FWPFK4mpQzd3p/l/dlddkNxwUdeyFowRdN
Wgux1Pj2NYnDE3g4meNHI3vah1x1Yf43TTbq4Fyz+9qnShQa1CYictHKD7Pst49k
SbdSBorl9FyYaiAZt1Tq9xKToIhNCa2A4L8Iiaz4T/atTPXd0CV0E8O6Bvppc531
fw26O9qGOc1p3TKVCA2bxV8gtXHQuI9lZv9DzpypGbBkBwSaCm1RnEzYJwg7ZLlN
Q6w32joPA6CsBdLQxmxTImE1EftkXzD7wqKqpyM9SuYb6EciZlQRZ9MjbGw=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:42 2025 by rpki-client