Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_orYrhgjTrlV22I71Z8o8sJDpbY.roa
File: _orYrhgjTrlV22I71Z8o8sJDpbY.roa (raw, json)
Hash identifier: Oe0ThGAHzmW5CYcDUZmt+eARN367gAESC+6jqz2ga7Y=
Subject key identifier: FE:8A:D8:AE:18:23:4E:B9:55:DB:62:3B:D5:9F:28:F2:C2:43:A5:B6
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01880F3C4AC1B95F7B6AC4B3802F344306FF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_orYrhgjTrlV22I71Z8o8sJDpbY.roa
Signing time: Fri 12 May 2023 09:13:09 +0000
ROA not before: Fri 12 May 2023 09:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.158.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:3c:4a:c1:b9:5f:7b:6a:c4:b3:80:2f:34:43:06:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 12 09:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe8ad8ae18234eb955db623bd59f28f2c243a5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6a:ca:a3:6f:b1:65:b4:e8:d6:3b:29:54:5e:
3b:6f:0d:ca:e1:aa:94:4b:60:9a:d4:c8:4f:41:3f:
34:11:cf:3b:a3:e0:6f:4e:4d:f7:64:07:7a:48:35:
62:0f:1b:1b:cb:56:1e:f2:19:f3:9a:c1:03:65:05:
38:7c:bd:4c:ec:d1:98:48:3f:3c:21:e1:09:6a:74:
69:db:9f:b7:5a:cc:75:fc:ef:7a:d6:f3:80:43:87:
8a:72:ba:c6:51:cc:f7:ff:26:43:a9:ea:7a:a9:4f:
58:65:9f:ff:de:9a:4f:c2:3d:aa:96:7a:74:da:8b:
e5:40:8d:9e:98:f4:62:2e:11:3d:93:3d:3a:6d:07:
47:cd:85:bc:87:18:c0:52:a0:48:a2:b6:95:46:19:
ab:5b:02:7c:d2:b5:df:48:74:3b:99:a2:2b:ba:60:
74:7a:44:3f:d6:e5:16:c4:25:bc:76:ec:82:d6:7a:
94:47:ce:8a:c6:0b:12:2d:31:88:31:58:01:4f:aa:
75:97:48:b4:7f:35:0b:9b:1f:cf:44:35:e0:4f:cc:
c9:0d:e3:ed:f0:63:66:ea:b2:84:90:09:43:d1:b8:
da:73:9f:9a:df:8e:1a:bb:04:80:4a:b4:39:d1:62:
bb:60:ec:6f:7b:ff:19:58:b7:58:ec:a6:bd:79:b2:
bf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8A:D8:AE:18:23:4E:B9:55:DB:62:3B:D5:9F:28:F2:C2:43:A5:B6
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_orYrhgjTrlV22I71Z8o8sJDpbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.51.0/24
5.105.64.0/24
5.105.75.0/24
5.105.77.0/24
5.105.104.0/24
5.105.118.0/24
5.105.158.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.215.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
15:54:93:a5:ac:7e:01:7c:b5:14:3d:66:a5:f1:77:a7:cb:43:
1f:4a:28:ac:02:9f:69:ad:a1:80:30:d4:58:db:ec:ef:aa:09:
a6:e6:91:62:c2:01:29:8b:88:29:9b:27:db:bd:cd:4b:7a:cf:
83:54:00:bf:65:a7:98:3a:0c:6a:75:12:8a:a4:d8:8c:82:27:
de:2d:89:86:77:1b:2d:fa:b2:12:52:b6:2e:50:38:a5:e1:51:
cf:8a:07:a6:b6:19:9d:6b:96:f8:25:38:d2:5e:19:30:a3:54:
d9:d8:cc:6f:c1:36:dc:c7:05:0f:7e:44:bb:5c:ba:a2:19:dd:
21:1a:67:96:69:26:30:96:dc:f2:a7:7f:f7:01:fe:77:ce:3f:
25:ed:f3:88:1c:10:da:98:d8:00:90:d2:0c:1b:f9:7a:1c:df:
34:ce:2a:16:a9:1e:8d:65:e4:33:97:9a:fc:7f:0e:36:2d:93:
21:34:72:0c:8e:da:99:6c:d5:72:14:c2:85:1d:cb:11:52:56:
25:9c:1f:46:3a:be:dc:12:24:23:d7:41:de:94:a9:dd:c3:0b:
0d:29:9c:12:37:57:38:d5:4e:4c:31:3e:85:fa:31:d1:0d:13:
10:5a:06:6f:1e:12:b4:b4:13:84:b3:88:5e:6a:6a:cc:dd:60:
7b:a5:59:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:44 2025 by rpki-client