Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_Hc4Q0PR2VNUpja8ROON7QHV1Zg.roa
File: _Hc4Q0PR2VNUpja8ROON7QHV1Zg.roa (raw, json)
Hash identifier: I5NKgaEK2oCWegrXuhW9Qf9DSgRWIwzex1lXxUWHSgw=
Subject key identifier: FC:77:38:43:43:D1:D9:53:54:A6:36:BC:44:E3:8D:ED:01:D5:D5:98
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018709BBACA80B475ED14EA239CBD651C4B9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_Hc4Q0PR2VNUpja8ROON7QHV1Zg.roa
Signing time: Wed 22 Mar 2023 14:31:46 +0000
ROA not before: Wed 22 Mar 2023 14:31:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15083
IP address blocks: 5.105.128.0/24 maxlen: 24
5.105.133.0/24 maxlen: 24
5.105.140.0/24 maxlen: 24
5.105.58.0/24 maxlen: 24
5.105.56.0/24 maxlen: 24
5.105.163.0/24 maxlen: 24
5.105.161.0/24 maxlen: 24
5.105.60.0/24 maxlen: 24
5.105.70.0/24 maxlen: 24
5.105.78.0/24 maxlen: 24
5.105.99.0/24 maxlen: 24
5.105.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:bb:ac:a8:0b:47:5e:d1:4e:a2:39:cb:d6:51:c4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 22 14:31:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc77384343d1d95354a636bc44e38ded01d5d598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:4f:75:9b:3b:79:e9:e4:88:e8:80:a0:9b:
5b:b8:06:c7:9f:12:f2:eb:1b:d5:bc:fe:1c:37:28:
a4:9f:20:2c:d5:3b:ea:72:74:4f:3a:48:0d:7d:fa:
8d:d1:79:38:34:35:b3:f0:21:bc:64:ec:f8:1b:97:
42:23:80:63:24:61:db:fa:10:e7:6c:52:97:11:7e:
ae:55:2d:2f:92:7d:c9:86:ed:d0:0c:fd:3d:9f:00:
c3:15:0d:5c:ac:67:ff:da:6b:44:c7:6d:6f:88:4c:
de:38:c3:b1:57:88:27:6c:4d:c3:5b:11:c9:aa:23:
50:1e:e8:64:f5:eb:d8:ec:75:f2:da:da:3f:9e:ea:
c8:3e:03:2e:24:cc:d5:16:2c:7a:a5:6f:3a:f8:72:
12:16:8f:70:57:b8:a5:6e:91:1a:e5:76:d8:52:56:
10:91:fc:d4:6a:3f:7a:a4:94:a7:8c:6a:47:3f:c8:
b0:fc:a0:b2:37:06:7c:cd:a7:e2:69:3c:ce:29:a5:
cb:c8:ab:28:20:42:62:70:5b:45:2e:27:2c:e9:2b:
52:53:8f:64:0f:94:83:07:64:16:ab:86:b3:c2:09:
a9:70:67:63:5f:2f:95:6a:aa:cd:cb:57:ae:1a:1b:
e4:7d:81:dc:ea:ba:92:32:d5:27:2b:aa:35:08:38:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:77:38:43:43:D1:D9:53:54:A6:36:BC:44:E3:8D:ED:01:D5:D5:98
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_Hc4Q0PR2VNUpja8ROON7QHV1Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.56.0/24
5.105.58.0/24
5.105.60.0/24
5.105.70.0/24
5.105.78.0/24
5.105.99.0/24
5.105.109.0/24
5.105.128.0/24
5.105.133.0/24
5.105.140.0/24
5.105.161.0/24
5.105.163.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9c:80:3f:e2:96:54:5f:fd:a4:33:a3:85:b2:33:a6:75:b4:
a0:8a:b7:a0:03:3a:e4:f1:09:ba:4e:22:b0:a7:90:07:2a:da:
ef:cd:f1:e8:9a:5e:12:44:01:65:d0:07:a0:97:8e:b4:c1:65:
c9:e4:22:30:8e:6c:e7:17:7e:06:06:d5:79:6e:c0:4f:02:81:
eb:76:7d:b7:0c:90:67:27:e6:b7:c6:17:bc:35:4a:bd:23:c7:
2b:9d:da:51:02:30:4f:35:3d:48:35:5c:a0:3b:d2:c9:e6:8e:
99:14:2f:77:b2:6f:2e:92:92:34:a6:91:87:72:99:09:3a:33:
db:45:0f:30:b5:5a:ac:aa:b5:6a:76:01:81:af:37:90:48:03:
16:0e:e8:6c:cb:93:bf:a8:97:9a:36:b1:5b:59:3d:9f:31:41:
b8:4a:4c:13:10:93:7d:f2:9e:a4:74:bc:4d:69:53:77:3e:ab:
9e:63:cb:2d:1d:e8:f0:92:2a:b6:a3:b5:0e:1c:e4:fc:b9:93:
9d:76:e2:c4:6c:3f:84:bf:84:12:50:33:e0:f6:11:0c:86:dd:
37:95:8e:c2:d0:e4:5f:f3:86:76:84:da:10:20:f3:ff:7e:0f:
a2:a8:b8:98:98:97:b3:36:67:97:16:d8:2f:6f:86:78:42:54:
12:0e:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:18 2025 by rpki-client