Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/V9uEiMaPzw86tvZ61aXHCKAcdXw.roa
File: V9uEiMaPzw86tvZ61aXHCKAcdXw.roa (raw, json)
Hash identifier: YHYVZo0uyMSLvT4lPeka5ZSt54+KlIDelRMVgR3Gz4s=
Subject key identifier: 57:DB:84:88:C6:8F:CF:0F:3A:B6:F6:7A:D5:A5:C7:08:A0:1C:75:7C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186EB163EB6337EAE5878B0A634EC084C7B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/V9uEiMaPzw86tvZ61aXHCKAcdXw.roa
Signing time: Thu 16 Mar 2023 15:42:28 +0000
ROA not before: Thu 16 Mar 2023 15:42:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 5.105.160.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.250.0/24 maxlen: 24
5.105.251.0/24 maxlen: 24
5.105.255.0/24 maxlen: 24
5.105.254.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.191.0/24 maxlen: 24
5.105.190.0/24 maxlen: 24
5.105.192.0/24 maxlen: 24
5.105.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:eb:16:3e:b6:33:7e:ae:58:78:b0:a6:34:ec:08:4c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 16 15:42:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57db8488c68fcf0f3ab6f67ad5a5c708a01c757c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:12:8d:af:d2:c1:a1:de:1f:6c:48:eb:18:67:
43:0e:5e:7d:e1:59:c3:18:c3:42:22:30:fd:a2:75:
43:fa:db:3b:c8:02:62:b7:20:55:6f:40:83:62:25:
95:17:9d:e9:e2:e1:fc:3f:46:09:a5:2e:75:4f:3e:
30:04:47:c4:45:f3:e7:11:57:27:5d:a6:09:c5:96:
ee:30:e3:2f:be:e7:b1:0f:4e:d8:72:22:90:45:25:
c6:f3:59:b9:c5:74:52:29:e6:f5:ca:9b:b0:27:13:
e7:5a:8f:82:f4:89:bf:da:03:9f:3f:19:6c:c0:a9:
cc:08:3b:2d:f4:72:5b:e6:5f:0d:1b:bb:f9:fe:ff:
9f:4a:57:9b:39:a6:9d:d1:cc:af:da:87:97:58:c6:
3f:d8:83:de:51:af:f8:30:af:07:9a:65:df:01:3f:
2b:25:83:c1:2d:99:68:73:01:4c:bb:c4:ca:d1:cc:
56:c6:97:c3:e4:60:53:c6:32:8b:38:ba:63:65:cf:
d7:1f:da:99:2a:61:d8:3d:b9:fa:8c:b8:04:3d:0b:
c6:50:c3:1c:b9:58:5f:70:2d:1c:31:26:85:52:a2:
84:f6:a4:48:a4:df:50:95:38:c5:54:3e:ef:ec:de:
ba:6b:a0:d3:89:46:cc:3b:1c:e7:1c:bf:35:16:25:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DB:84:88:C6:8F:CF:0F:3A:B6:F6:7A:D5:A5:C7:08:A0:1C:75:7C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/V9uEiMaPzw86tvZ61aXHCKAcdXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.86.0-5.105.89.255
5.105.160.0/24
5.105.176.0/24
5.105.190.0-5.105.192.255
5.105.194.0/24
5.105.250.0/23
5.105.254.0/23
Signature Algorithm: sha256WithRSAEncryption
78:a6:9f:b2:0f:5b:1e:cb:5e:d8:4a:6d:b8:79:7e:aa:f9:2f:
3a:94:5b:17:d6:a5:fc:07:05:06:eb:75:f8:bb:2f:94:4b:ff:
b4:85:cb:ba:c6:d6:63:5e:e3:c6:64:03:a6:90:04:29:ad:84:
8c:df:f5:ef:89:13:7d:a1:8f:80:5a:6c:97:68:b9:74:18:4f:
78:49:09:80:80:f4:d6:d9:a5:2a:ce:94:07:22:b3:2a:92:c6:
df:25:54:4d:2c:e9:08:0a:9d:53:ef:c4:92:67:7e:9f:1c:f8:
e6:46:63:e8:fd:98:c3:23:bd:18:26:b5:b2:61:26:79:03:bb:
bb:83:f2:6f:dc:8c:44:d4:2b:a3:68:d4:06:64:12:88:40:17:
18:51:22:81:04:09:da:f0:0a:7d:a1:3f:40:2b:85:d4:49:d2:
3a:16:ef:ef:f4:3c:9a:ec:eb:4f:9d:cb:2e:f3:8c:3c:a2:8f:
6d:6e:e8:3c:56:f3:0a:d7:f8:08:8e:3e:96:91:26:57:49:65:
e0:98:49:02:9b:53:ba:ed:23:bb:29:46:cf:13:e0:9b:9b:bc:
10:b7:ef:1f:5c:e7:20:ee:ee:71:c3:33:83:6d:c6:35:5d:8e:
0d:83:38:d1:d6:0a:7b:7d:52:f8:2a:7f:42:43:2d:02:50:57:
7e:06:40:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:30:53 2025 by rpki-client