Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Znow9b6GB5fA0DOIMfGrZQnV7Zw.roa
File: Znow9b6GB5fA0DOIMfGrZQnV7Zw.roa (raw, json)
Hash identifier: d0PDy20Ja7S0KiKl7QKXaOAACwkCab2WCN0Gp+bgwwo=
Subject key identifier: 66:7A:30:F5:BE:86:07:97:C0:D0:33:88:31:F1:AB:65:09:D5:ED:9C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018AAD00E0F2F85475191732E1351DACD8F0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Znow9b6GB5fA0DOIMfGrZQnV7Zw.roa
Signing time: Tue 19 Sep 2023 10:33:50 +0000
ROA not before: Tue 19 Sep 2023 10:33:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 5.105.209.0/24 maxlen: 24
5.105.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:00:e0:f2:f8:54:75:19:17:32:e1:35:1d:ac:d8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 19 10:33:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=667a30f5be860797c0d0338831f1ab6509d5ed9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:09:c4:37:22:c3:dc:ce:91:6a:9b:8d:b7:
01:34:c0:ed:75:50:97:8a:19:7c:39:91:9c:c1:b2:
c2:ff:fb:8b:47:ff:ca:1e:6d:8c:2b:b2:65:26:aa:
7c:9c:c0:b2:5c:24:86:a1:82:1e:13:6e:15:ce:e1:
30:c6:87:33:a7:02:ee:5e:9f:57:29:7b:88:df:e8:
52:c6:a8:e8:9d:95:f4:e3:83:61:88:cd:5b:b9:17:
a5:12:98:87:01:fb:d8:c7:46:10:36:6e:2d:75:1b:
66:e9:80:db:e3:19:67:69:3a:8f:9a:f7:5e:b6:dc:
cb:ca:68:94:89:9e:39:8a:a5:44:43:71:1e:68:64:
1b:5d:2c:b0:67:96:3a:d4:d6:ad:78:62:7b:9c:cb:
c2:9b:68:e1:c7:65:d8:bb:51:c8:a9:7d:06:de:49:
7f:20:6c:db:62:92:df:09:a3:2c:bf:06:b6:b7:1d:
8c:e9:bd:59:fd:a4:ac:ab:6b:a9:3b:70:8a:d0:13:
16:61:6a:5a:0d:3e:02:af:c9:d3:4b:9c:5b:56:50:
d9:af:6f:3a:ee:75:d3:cd:37:9b:44:b7:98:db:56:
14:3b:ed:67:a7:90:bb:14:85:b7:97:71:fd:45:07:
c2:8b:f5:2f:ad:3d:03:3b:01:ab:b7:a1:27:14:d6:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7A:30:F5:BE:86:07:97:C0:D0:33:88:31:F1:AB:65:09:D5:ED:9C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Znow9b6GB5fA0DOIMfGrZQnV7Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.209.0-5.105.210.255
Signature Algorithm: sha256WithRSAEncryption
45:fb:07:55:92:10:4c:3e:71:cd:3e:f2:3b:79:a0:09:50:91:
4b:64:95:0e:2e:19:6f:ff:91:e9:2e:dc:08:60:70:fc:43:88:
b9:c3:30:bb:de:b6:3e:30:9d:e4:b7:70:2b:51:88:b0:0a:2c:
36:03:d1:85:c9:7f:04:a5:2b:87:b0:b5:91:d1:b5:f5:47:16:
40:0d:36:e1:0c:52:7e:eb:20:13:cb:ee:82:66:44:51:b8:77:
54:f1:f2:83:58:d2:bc:d7:f0:3b:7b:47:be:35:16:84:64:60:
b2:35:f4:0b:4a:08:43:7c:5a:9b:50:95:f6:d4:63:f0:62:19:
c6:49:15:8f:bc:e0:c3:21:d9:a4:bb:d3:46:5c:7d:dd:58:9b:
33:f2:d1:bf:68:07:3e:43:53:2f:e9:5a:0d:2c:89:a5:9e:8a:
61:4b:de:e3:b8:39:bc:a1:8f:68:4f:06:2f:69:a1:c4:4f:d8:
de:d2:1a:c8:d3:49:80:17:98:ef:21:ae:a3:d3:dc:2d:7a:31:
10:a7:ec:fa:43:f2:ae:8f:1e:8b:9b:24:73:9c:36:eb:71:9c:
bf:80:d0:48:25:8d:e4:67:dc:cd:1d:7a:35:07:31:12:aa:eb:
81:b8:e2:91:6c:b6:e4:e7:ab:67:80:da:18:c9:e1:67:c2:bc:
ac:34:17:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:53 2025 by rpki-client