Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/SLZb0JZA5W-8BpBiyggjzT5m_4Y.roa
File: SLZb0JZA5W-8BpBiyggjzT5m_4Y.roa (raw, json)
Hash identifier: RVos+XQWLn4EV3LER6EVIOAEKLptt2GDoT13AortvUY=
Subject key identifier: 48:B6:5B:D0:96:40:E5:6F:BC:06:90:62:CA:08:23:CD:3E:66:FF:86
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01889287308DA1DDD3280DE5130CF9B34809
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/SLZb0JZA5W-8BpBiyggjzT5m_4Y.roa
Signing time: Tue 06 Jun 2023 21:05:13 +0000
ROA not before: Tue 06 Jun 2023 21:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 5.105.15.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:92:87:30:8d:a1:dd:d3:28:0d:e5:13:0c:f9:b3:48:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 6 21:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48b65bd09640e56fbc069062ca0823cd3e66ff86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:99:45:82:3c:9b:fa:0b:4c:08:6d:b8:e3:
47:1d:89:bf:04:57:fe:91:c7:ff:e4:51:a5:ea:88:
b9:4a:7f:07:7b:99:e3:06:3c:a1:e5:13:b5:1d:c7:
f1:06:ea:ee:2a:8c:e5:99:bb:7a:67:c2:98:c1:76:
a5:4a:42:79:81:17:b4:1f:80:08:f1:bc:25:fc:36:
a1:68:df:dd:47:85:00:9e:15:2d:71:29:46:eb:e8:
4a:dc:2b:ac:fa:b3:df:8d:03:ae:40:3b:20:bb:be:
4d:a0:0a:94:41:b6:2f:66:1d:8c:b8:9f:d5:ca:37:
61:9d:d0:c1:d9:27:99:f3:1c:95:f4:e1:d9:ab:3f:
c1:3c:5b:98:1c:b8:ef:f3:d7:78:40:0a:c0:04:78:
8d:03:1a:3c:f4:3b:d9:bf:36:4b:32:b0:be:88:44:
90:c0:16:bc:86:5a:58:13:68:59:31:da:da:e4:4f:
bb:c9:4c:46:14:05:80:62:57:ea:f2:eb:d3:ed:c4:
6c:e7:7b:9e:48:80:aa:e4:2d:bc:50:4e:f8:8c:b2:
2f:77:e2:bc:bb:97:b1:e4:17:03:41:b2:3f:1c:f4:
c4:df:64:08:3e:08:29:df:db:f7:5b:8e:99:18:e2:
b9:c3:84:00:50:a8:91:b0:32:3c:2d:6a:d9:c1:9d:
99:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B6:5B:D0:96:40:E5:6F:BC:06:90:62:CA:08:23:CD:3E:66:FF:86
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/SLZb0JZA5W-8BpBiyggjzT5m_4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/23
5.105.15.0/24
Signature Algorithm: sha256WithRSAEncryption
19:eb:c4:e1:e2:86:89:4e:a8:84:ad:2f:a3:0a:6d:93:2c:12:
bd:aa:cd:33:9c:77:5a:90:88:bb:af:3d:df:43:be:63:cb:88:
82:53:0d:69:69:3f:5a:23:0f:48:f5:4a:58:6d:63:4b:4a:10:
ba:01:5f:63:7e:5c:9a:32:79:9f:18:52:1c:a2:d5:d0:f1:1a:
28:d0:e1:83:c5:94:e4:ef:77:00:39:63:07:bd:fd:a7:e3:2e:
c8:2c:65:e6:cd:bd:b4:9e:9e:5e:00:f5:d8:8b:7e:1f:b4:34:
cb:a4:a5:9a:f5:ce:b2:ff:21:82:0c:1e:cd:e5:0f:34:35:d0:
44:df:b7:d7:16:f3:8c:bd:94:79:ae:f7:15:92:b0:06:e4:96:
95:b1:f8:2e:73:ec:4a:18:a4:2b:f3:c0:91:59:85:fb:7c:19:
45:26:35:19:93:13:7c:11:ad:94:6e:06:e0:b5:de:c5:ba:3b:
b2:8a:c9:37:ce:f7:26:64:ef:cd:87:cd:1d:70:e7:17:8c:4f:
98:f4:22:99:53:ef:55:87:50:2b:44:7d:c8:31:81:08:43:51:
c8:b6:1b:8b:11:ea:75:67:ef:6d:ac:1b:c7:de:14:e7:8e:3a:
a7:75:df:14:5b:23:4a:20:80:7f:64:ca:9d:17:67:ae:6d:4f:
23:2c:79:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:04:20 2025 by rpki-client