Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QO5RBtjZyVjEGg_YTIAOBaiaO9A.roa
File: QO5RBtjZyVjEGg_YTIAOBaiaO9A.roa (raw, json)
Hash identifier: 9LKQM0GsSrorioXvgCMlgeKNRufU3W66ftTlRZwVjT0=
Subject key identifier: 40:EE:51:06:D8:D9:C9:58:C4:1A:0F:D8:4C:80:0E:05:A8:9A:3B:D0
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018682B2B53B11EAE3AE3AFB546D056BEFCB
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QO5RBtjZyVjEGg_YTIAOBaiaO9A.roa
Signing time: Fri 24 Feb 2023 09:13:15 +0000
ROA not before: Fri 24 Feb 2023 09:13:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.227.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.137.0/24 maxlen: 24
5.105.44.0/22 maxlen: 22
5.105.52.0/22 maxlen: 22
5.105.103.0/24 maxlen: 24
5.105.100.0/24 maxlen: 24
5.105.219.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:b2:b5:3b:11:ea:e3:ae:3a:fb:54:6d:05:6b:ef:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 24 09:13:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40ee5106d8d9c958c41a0fd84c800e05a89a3bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:40:75:9a:59:a9:49:75:e8:51:55:c5:fd:
c9:ff:7c:e9:12:c4:33:6e:d6:2c:ac:30:c7:e2:8c:
0a:c5:21:b9:a8:05:73:69:ed:9f:6d:da:01:99:a5:
df:72:17:b1:a3:71:0b:00:28:5a:93:43:d2:09:de:
d1:23:bc:4f:c2:ee:42:97:b5:24:5f:f7:01:68:7c:
5e:b8:59:c4:1e:98:e7:52:6c:7e:5a:e7:ce:05:1a:
a2:c5:7d:b1:0b:48:c0:f5:3f:7d:82:a1:13:8a:d5:
4f:c1:d9:ce:51:aa:f6:52:4a:a5:10:00:63:a9:65:
a5:82:64:f1:44:70:95:06:0b:77:5e:5a:02:6c:94:
0e:1d:fe:d2:d7:5f:dd:79:ec:9d:82:66:ae:17:7a:
d3:46:5a:9b:39:9c:a7:d3:5d:c8:a4:23:d4:c3:0b:
e7:ca:7d:b9:49:35:8d:91:bd:78:1a:a1:1a:e8:9f:
35:b9:fe:55:18:37:eb:3d:0d:e7:7f:86:27:98:ee:
5b:6b:30:6f:9e:7c:2a:f2:6b:15:45:cf:00:65:1e:
21:5c:6c:fd:85:a5:5b:70:09:13:0d:6d:97:d4:ba:
f4:f9:ce:4f:61:6d:59:00:51:78:cb:56:2f:46:e2:
58:c1:32:2c:d3:56:86:bb:34:76:f7:93:56:89:59:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EE:51:06:D8:D9:C9:58:C4:1A:0F:D8:4C:80:0E:05:A8:9A:3B:D0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QO5RBtjZyVjEGg_YTIAOBaiaO9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.18.0/24
5.105.44.0/22
5.105.52.0/22
5.105.100.0/24
5.105.103.0/24
5.105.106.0/24
5.105.123.0/24
5.105.137.0/24
5.105.219.0/24
5.105.227.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:a5:15:9c:47:c2:67:06:ac:71:ed:4c:eb:b1:0d:f8:99:7f:
fb:03:8c:9b:3a:f5:65:ba:04:fb:b9:bc:e5:c2:23:3e:26:ef:
d1:95:a4:f9:9b:c3:7a:ff:79:40:f8:1d:6f:46:ef:cc:14:5e:
17:c5:f7:94:57:df:88:a1:5d:c8:35:05:fb:18:d4:53:ef:00:
48:6d:7a:52:ea:ff:9f:75:6e:ca:cf:20:54:2f:66:1c:4e:09:
8c:30:ee:35:73:3b:f8:3c:eb:88:9d:c4:90:c8:39:13:26:34:
f4:7d:8f:f1:65:69:29:a7:17:39:27:84:64:6f:60:30:53:ba:
01:e3:82:90:df:ce:37:4e:58:68:7c:28:06:fc:03:e2:40:bf:
93:33:4b:ce:ce:bd:79:f6:73:33:82:59:2e:b3:c8:70:a1:6c:
11:19:cf:36:22:43:28:6e:12:93:2f:01:98:b7:20:18:1e:a5:
76:d2:ae:82:76:68:e9:b5:25:bc:3a:04:fd:29:58:f5:db:df:
4b:06:ab:f6:ee:de:b9:c8:d7:38:a0:c1:8a:8d:62:39:be:e2:
1f:6b:12:9a:08:01:d8:4e:cf:29:ef:2a:6e:79:e3:dc:fa:e5:
ee:09:5f:32:1b:5e:83:1f:12:8d:d8:c4:c0:51:bf:b2:11:60:
b9:80:75:11
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYaCsrU7Eerjrjr7VG0Fa+/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMjI0MDkxMzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGVlNTEwNmQ4ZDljOTU4YzQxYTBmZDg0YzgwMGUwNWE4OWEzYmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNlAdZpZqUl16FFVxf3J/3zpEsQz
btYsrDDH4owKxSG5qAVzae2fbdoBmaXfchexo3ELAChak0PSCd7RI7xPwu5Cl7Uk
X/cBaHxeuFnEHpjnUmx+WufOBRqixX2xC0jA9T99gqETitVPwdnOUar2UkqlEABj
qWWlgmTxRHCVBgt3XloCbJQOHf7S11/deeydgmauF3rTRlqbOZyn013IpCPUwwvn
yn25STWNkb14GqEa6J81uf5VGDfrPQ3nf4YnmO5bazBvnnwq8msVRc8AZR4hXGz9
haVbcAkTDW2X1Lr0+c5PYW1ZAFF4y1YvRuJYwTIs01aGuzR295NWiVlCCQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFEDuUQbY2clYxBoP2EyADgWomjvQMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvUU81UkJ0alp5VmpFR2dfWVRJQU9CYWlhTzlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQABWkSAwQC
BWksAwQCBWk0AwQABWlkAwQABWlnAwQABWlqAwQABWl7AwQABWmJAwQABWnbAwQA
BWnjMA0GCSqGSIb3DQEBCwUAA4IBAQDFpRWcR8JnBqxx7UzrsQ34mX/7A4ybOvVl
ugT7ubzlwiM+Ju/RlaT5m8N6/3lA+B1vRu/MFF4XxfeUV9+IoV3INQX7GNRT7wBI
bXpS6v+fdW7KzyBUL2YcTgmMMO41czv4POuIncSQyDkTJjT0fY/xZWkppxc5J4Rk
b2AwU7oB44KQ3843TlhofCgG/APiQL+TM0vOzr159nMzglkus8hwoWwRGc82IkMo
bhKTLwGYtyAYHqV20q6CdmjptSW8OgT9KVj1299LBqv27t65yNc4oMGKjWI5vuIf
axKaCAHYTs8p7ypueePc+uXuCV8yG16DHxKN2MTAUb+yEWC5gHUR
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:26 2025 by rpki-client