Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Zl1GuM4-gM34rTxADtFouFx2xZw.roa
File: Zl1GuM4-gM34rTxADtFouFx2xZw.roa (raw, json)
Hash identifier: Au3Rson8QbFeugAD6HsGBHXw/+T+ds2IkkU0Seamswg=
Subject key identifier: 66:5D:46:B8:CE:3E:80:CD:F8:AD:3C:40:0E:D1:68:B8:5C:76:C5:9C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A3C2D5D1E2025E484D5E8A1A5678BA6B9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Zl1GuM4-gM34rTxADtFouFx2xZw.roa
Signing time: Mon 28 Aug 2023 12:45:20 +0000
ROA not before: Mon 28 Aug 2023 12:45:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:2d:5d:1e:20:25:e4:84:d5:e8:a1:a5:67:8b:a6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 28 12:45:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=665d46b8ce3e80cdf8ad3c400ed168b85c76c59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0c:6b:58:3b:80:30:b0:72:54:43:e0:c6:4f:
40:99:4e:a0:68:7c:b3:5b:c2:88:de:c8:22:f2:ad:
80:66:1a:5b:3a:fa:91:38:ed:3d:fd:3e:38:98:d5:
43:c1:35:fd:7e:7e:fa:d7:e3:bf:da:a0:88:32:64:
ea:e0:f9:ee:3a:99:79:66:a1:3b:ad:50:80:c9:2f:
a1:f3:66:35:f9:7b:0e:df:44:ed:27:a2:9d:69:17:
4b:91:34:b7:b7:5d:e7:f1:4b:01:af:c3:5a:7f:68:
5b:5e:ed:03:12:50:13:92:ce:2b:87:ff:b6:4a:d5:
11:a1:b8:00:2a:f7:73:35:5c:5c:45:20:19:b0:20:
d0:cc:cd:e1:44:00:31:9b:b9:1a:b8:2a:35:c0:27:
7e:c6:55:fd:c1:ab:87:d2:85:46:ea:98:0d:23:48:
36:8f:34:ff:97:ea:9b:54:fb:a6:8b:3b:bd:ed:1f:
06:4e:7a:6c:ea:a4:7a:cb:c7:f5:79:30:bb:08:76:
6c:5e:90:a0:bf:fd:0b:af:f0:31:4d:ba:75:2b:85:
18:05:1e:c4:de:98:8d:3e:51:5f:49:c7:af:0b:ca:
3a:09:f2:95:7b:0e:3a:c9:21:11:74:3f:4a:61:17:
f1:71:34:ec:a4:e4:f1:b9:60:b0:93:e6:ce:7e:af:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5D:46:B8:CE:3E:80:CD:F8:AD:3C:40:0E:D1:68:B8:5C:76:C5:9C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Zl1GuM4-gM34rTxADtFouFx2xZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.16.0/24
5.105.18.0/24
5.105.21.0/24
5.105.40.0/24
5.105.50.0/24
5.105.57.0/24
5.105.62.0/24
5.105.82.0/24
5.105.84.0/24
5.105.110.0/24
5.105.114.0/23
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.157.0/24
5.105.162.0/24
5.105.203.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0e:0c:d3:b3:2b:7f:eb:64:5a:04:bd:b1:87:a8:c4:05:61:
bd:92:63:95:d4:11:bd:1c:08:8e:7b:b1:47:85:ef:19:0e:b5:
01:7f:f2:91:d0:5a:51:be:e4:0a:5d:d1:e7:16:9f:0c:f3:55:
b1:c2:4b:70:82:33:35:54:80:88:75:b8:2d:2d:cb:83:80:63:
38:96:fe:1c:c4:e2:51:94:11:09:06:72:60:a5:97:26:db:85:
c4:eb:ad:34:b7:5f:c1:af:3f:e7:79:d1:1a:ba:64:95:ec:b3:
27:34:7d:25:eb:4f:d0:38:8d:91:f7:97:13:b6:81:ba:6c:8b:
76:d6:cb:bd:86:d5:f9:55:10:e8:98:23:03:38:21:41:d7:d0:
d3:e8:6d:d7:31:ea:75:dd:4a:f0:11:de:f5:4e:fb:13:2c:58:
c9:45:df:49:97:ba:cc:a0:28:8e:9c:9e:92:ac:c0:15:39:17:
6e:8e:0c:50:83:45:62:21:f9:65:d7:8d:39:d5:73:fa:07:60:
7e:2f:33:ae:0d:43:82:bd:5b:50:28:43:41:e9:e3:d6:a0:db:
67:65:b6:5c:65:d2:1a:3a:2c:0e:d6:b1:0f:a0:5d:94:ad:60:
2a:e4:2d:fc:a5:c0:4e:63:7a:f7:d0:48:ba:ea:8b:9a:ea:01:
be:81:ac:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:35 2025 by rpki-client