Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/UK4C992HnNrrtETeISv03Wci1Cc.roa
File: UK4C992HnNrrtETeISv03Wci1Cc.roa (raw, json)
Hash identifier: MaxnoSEx7pLdTIOPjKPuMMBeiH0rcKxQCfA3LyHob5E=
Subject key identifier: 50:AE:02:F7:DD:87:9C:DA:EB:B4:44:DE:21:2B:F4:DD:67:22:D4:27
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188A67BD08633A88BB1F06FC38ACA72715D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/UK4C992HnNrrtETeISv03Wci1Cc.roa
Signing time: Sat 10 Jun 2023 18:05:12 +0000
ROA not before: Sat 10 Jun 2023 18:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a6:7b:d0:86:33:a8:8b:b1:f0:6f:c3:8a:ca:72:71:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 10 18:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50ae02f7dd879cdaebb444de212bf4dd6722d427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:3a:57:e1:c4:bc:20:27:f8:37:82:8f:3b:
23:2a:86:40:63:a9:75:d5:3f:f9:97:18:31:1c:8d:
26:4c:37:9b:e4:ff:af:3f:8f:5a:37:d6:19:e3:1e:
74:2f:75:6e:12:7d:85:e1:c7:e8:9a:50:4e:72:d8:
90:f4:9f:62:13:5d:b1:a5:39:f9:de:21:28:6c:a9:
73:10:1a:9f:ed:7a:8c:60:bd:da:89:2b:12:98:14:
4a:9b:5e:f7:1d:c2:cc:29:54:ea:4e:dc:f8:a9:5d:
19:20:cb:23:18:08:3f:d7:2e:eb:e7:e5:02:84:1c:
de:ba:0a:80:d3:12:cd:cb:08:45:7e:31:bb:0c:37:
ec:24:b2:29:83:bd:18:e7:a8:b3:68:f4:a4:68:03:
81:18:0f:a7:fe:13:2e:11:f0:c7:e2:4f:68:1e:90:
f8:b7:bf:e7:77:bf:ed:77:bd:87:22:f8:32:c8:bb:
a9:53:57:da:4d:55:11:fe:29:51:2f:06:d0:30:e9:
b9:8d:f8:95:f1:b7:ad:a7:1e:9f:17:e0:8c:8e:bc:
d0:d2:1b:ee:ac:b7:39:36:a6:ce:a5:6d:5b:e1:08:
50:aa:2a:98:5b:bd:eb:bb:be:59:cb:8c:fc:00:a9:
90:a2:ea:29:fb:e6:72:58:11:d4:7b:47:df:5b:a2:
eb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AE:02:F7:DD:87:9C:DA:EB:B4:44:DE:21:2B:F4:DD:67:22:D4:27
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/UK4C992HnNrrtETeISv03Wci1Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.5.0/24
5.105.7.0/24
5.105.15.0/24
5.105.26.0/24
5.105.118.0/24
5.105.162.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.253.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:fd:82:3f:d8:07:91:d3:b4:5b:da:9e:89:81:36:bd:f6:e5:
7f:88:ab:6a:8a:e6:a7:86:f8:22:97:14:14:d7:68:54:cc:1a:
43:35:af:24:90:63:c0:4a:5b:1a:e9:ea:16:f1:0d:aa:2f:48:
86:e0:7f:6f:00:1c:4b:75:9f:3f:11:d7:1b:f6:ea:86:bc:f4:
4b:c2:f7:be:8a:91:2f:c2:92:23:80:6c:77:fd:d2:dc:0d:e9:
71:04:3f:a7:ac:dc:c3:21:41:68:84:40:0d:cb:e8:67:dc:1c:
03:af:e7:43:cf:e9:a9:cb:1f:ca:83:d6:a2:76:a9:62:3d:02:
0e:3f:b0:02:df:71:de:46:41:d9:20:af:c7:42:cb:0b:94:0b:
63:be:f3:b1:94:30:bf:41:0b:1a:58:85:6e:2c:5d:32:e6:dd:
64:f1:cd:ae:3e:39:b1:01:12:06:73:83:07:e5:5a:8a:d4:94:
67:2d:9e:cf:52:8b:3c:7a:81:31:e6:c0:50:0b:98:5a:74:c2:
c0:84:e3:7a:1f:00:a8:be:8e:34:28:6c:b5:7e:8a:af:e6:fc:
11:51:13:35:30:ee:56:30:47:7a:92:9f:e4:a6:29:4e:89:49:
04:79:55:ff:08:4c:ce:f1:8f:e9:6b:30:47:72:88:02:3b:7f:
e8:f9:63:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:58:01 2025 by rpki-client