Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VlIvMFqsgWXgImPWvtkvyzkVRwo.roa
File: VlIvMFqsgWXgImPWvtkvyzkVRwo.roa (raw, json)
Hash identifier: S9QW69j3GOZMa9Xs30sUfHmossVSlA42BK5SQO715Ek=
Subject key identifier: 56:52:2F:30:5A:AC:81:65:E0:22:63:D6:BE:D9:2F:CB:39:15:47:0A
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189211D38D98FD9D93A6AF3743A08CE44FE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VlIvMFqsgWXgImPWvtkvyzkVRwo.roa
Signing time: Tue 04 Jul 2023 13:35:10 +0000
ROA not before: Tue 04 Jul 2023 13:35:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.128.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.22.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:1d:38:d9:8f:d9:d9:3a:6a:f3:74:3a:08:ce:44:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 4 13:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56522f305aac8165e02263d6bed92fcb3915470a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b7:d6:5a:bb:98:2b:b4:52:c9:3f:45:fc:19:
d6:40:cf:31:21:68:b9:97:e4:7f:84:1c:c6:c6:7d:
9f:42:d7:6e:c5:8b:09:c2:1a:26:bf:61:f3:61:c2:
64:32:c6:f3:7d:ec:eb:02:b7:fe:53:6c:28:c7:68:
68:a4:c0:fb:5a:77:ff:7c:e8:7d:ac:a2:f6:00:28:
49:23:39:13:0e:54:66:04:79:8e:07:c2:9c:88:f3:
fd:bf:cb:83:b5:2a:2e:dd:e5:bb:98:8a:2a:35:04:
07:35:64:67:26:ef:f0:5b:16:5f:cc:30:40:6e:28:
96:fa:2a:17:83:3a:65:0a:b3:d9:48:33:12:69:be:
ac:9d:46:90:12:19:12:76:51:5e:92:ef:23:23:54:
1e:99:da:2e:73:b8:a7:ae:6b:aa:95:ea:bf:b8:63:
3b:5e:11:13:95:49:cc:8b:fd:d5:b3:d6:41:27:1a:
a6:70:55:e8:49:43:7f:fc:c8:cd:bf:71:12:17:6f:
c1:c5:e2:c6:67:b8:e3:73:ae:e7:a4:b8:5a:bc:7e:
b6:58:08:64:31:f0:0e:6c:b0:c4:7f:56:e6:1d:bf:
29:c5:61:14:de:7f:ce:bf:97:8f:1c:fb:cb:b2:af:
ff:24:69:a3:a4:64:09:de:5c:a5:3c:bf:be:bb:1a:
36:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:52:2F:30:5A:AC:81:65:E0:22:63:D6:BE:D9:2F:CB:39:15:47:0A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VlIvMFqsgWXgImPWvtkvyzkVRwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.7.0/24
5.105.18.0/24
5.105.21.0-5.105.22.255
5.105.36.0/24
5.105.45.0/24
5.105.47.0/24
5.105.63.0/24
5.105.75.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.124.0/24
5.105.127.0-5.105.128.255
5.105.157.0/24
5.105.162.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0-5.105.200.255
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b3:42:7a:b1:5d:54:76:f3:a1:f2:d4:0e:ae:7a:24:ee:da:
5f:72:be:14:81:f9:96:3d:79:06:82:94:82:fe:6b:28:9c:00:
0c:53:71:fa:e0:9b:3b:d0:1a:86:21:6d:ac:c3:51:43:0c:1e:
b0:bf:9a:b5:2c:29:c7:1a:eb:59:54:bf:3c:9b:b2:a6:f0:21:
34:c7:75:01:d2:aa:6d:bf:14:c7:4a:23:3c:77:de:da:b7:55:
62:4c:28:83:48:06:3c:6a:ea:21:7d:7d:b2:7d:f0:4a:40:08:
7a:db:85:5c:f0:95:4e:98:d4:15:ba:c5:60:5b:94:52:36:3a:
32:30:d3:93:99:71:78:e0:ea:9b:99:8c:d9:d7:3d:bd:6d:24:
39:70:a9:f1:f1:78:fe:82:f8:1b:19:1e:06:a8:85:72:4c:f7:
f0:3f:6e:61:f5:fd:57:3b:c0:df:01:4b:ca:af:ad:aa:ce:bf:
0c:be:20:2e:a3:b8:15:2b:d3:c8:1b:5f:fa:be:d8:8f:f6:88:
eb:78:be:3e:1b:5c:5f:23:86:c2:4a:fd:8c:53:20:82:e0:43:
4c:28:cd:df:84:93:24:22:6e:90:f0:e7:0a:83:a4:71:3a:56:
d0:12:b9:ed:2f:fb:96:6a:a3:88:57:5b:dd:6b:6c:98:0d:44:
9e:de:2d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:59 2025 by rpki-client