Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/aB9iTjOeLJP5h1thOnJnsj6Y1Kc.roa
File: aB9iTjOeLJP5h1thOnJnsj6Y1Kc.roa (raw, json)
Hash identifier: 45vcxllt/Q00NGin9vf+YdqaLO7+tbgxDpgvCJoHYIA=
Subject key identifier: 68:1F:62:4E:33:9E:2C:93:F9:87:5B:61:3A:72:67:B2:3E:98:D4:A7
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01835102E302C1855F650BADF5AA2B64CA29
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/aB9iTjOeLJP5h1thOnJnsj6Y1Kc.roa
Signing time: Sun 18 Sep 2022 14:31:27 +0000
ROA not before: Sun 18 Sep 2022 14:31:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 5.105.238.0/24 maxlen: 24
5.105.241.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:51:02:e3:02:c1:85:5f:65:0b:ad:f5:aa:2b:64:ca:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 18 14:31:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=681f624e339e2c93f9875b613a7267b23e98d4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:8d:23:82:98:23:99:12:ae:45:4e:04:96:
81:ec:dd:5f:13:70:40:b6:86:09:d3:fe:fd:74:be:
1c:3a:aa:41:3d:75:9e:e4:46:ad:94:be:1c:02:d4:
52:87:12:8d:66:cb:e0:5c:13:c6:67:ec:f4:5b:07:
c0:63:fe:d2:e3:ca:97:2f:41:09:d2:63:b9:1a:0d:
b9:22:e9:4b:6e:26:da:86:19:0e:b4:c0:09:db:13:
dc:36:94:f4:ba:7a:0b:8b:1c:6e:a7:8d:74:8a:ce:
3e:da:5c:6e:a7:bd:61:08:86:1e:7c:5b:56:b9:e8:
2f:46:84:91:cb:ce:05:dc:4a:03:c3:a2:71:6c:b6:
55:18:0e:36:95:a1:e5:3f:56:b8:08:2a:ef:be:9e:
66:3d:69:d3:a2:ac:ca:fd:75:ef:19:81:95:9d:0a:
ac:93:54:c7:f4:e1:a2:95:4a:18:a9:43:40:ad:9d:
b5:31:4f:30:44:f8:7d:72:c0:c8:44:ad:8c:81:aa:
04:b6:62:10:ca:30:07:6e:de:18:89:13:ca:33:8c:
44:28:80:d9:d2:4c:e6:20:f5:35:92:58:0f:14:36:
4e:0f:0c:09:92:fd:cc:b1:54:cd:a0:53:e3:cf:58:
86:a8:4e:87:4e:b7:4c:19:97:f3:01:13:f2:3c:cb:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1F:62:4E:33:9E:2C:93:F9:87:5B:61:3A:72:67:B2:3E:98:D4:A7
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/aB9iTjOeLJP5h1thOnJnsj6Y1Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.40.0/24
5.105.43.0/24
5.105.204.0/24
5.105.238.0/24
5.105.241.0/24
5.105.252.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:6b:59:db:42:1d:7c:44:43:3e:62:5a:49:93:67:98:43:59:
bb:61:91:1f:b2:b5:14:cc:7d:9b:32:66:33:a9:2d:a8:ee:0b:
68:75:de:8c:f1:a5:f9:36:6e:93:6d:2a:b0:7c:0a:03:e2:10:
6a:32:c7:45:f2:bd:a3:08:f6:2c:17:bb:05:01:f4:ac:b6:28:
bb:db:30:a0:89:38:8e:58:68:09:8e:48:cf:e5:84:dc:8a:a1:
54:63:5a:45:ae:1a:d8:7c:f5:b1:ca:05:06:8b:3f:09:f4:70:
c5:11:0b:73:54:e6:a6:6e:c2:36:26:05:32:49:c3:eb:cb:5f:
b1:93:8a:c4:74:3b:3a:bb:6b:35:f8:6f:bd:3c:41:9e:5b:7c:
f7:96:87:fa:0f:cd:69:aa:7d:7e:3e:35:32:90:06:68:93:39:
fb:5b:15:af:c6:51:5a:4c:98:9e:b3:b8:33:83:1e:ae:98:da:
c2:0a:0a:28:ae:95:62:8a:0e:b1:74:a5:6a:26:bf:c7:da:e7:
ce:85:84:b9:ed:9c:41:2b:a1:d0:ff:02:33:6a:be:fc:31:f3:
d9:6c:3c:59:df:04:b2:59:3d:62:59:d4:10:f1:4d:70:b0:68:
61:9d:e3:2f:f5:df:9b:f3:62:4a:eb:54:9d:61:63:d2:f8:61:
bb:1d:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:07 2025 by rpki-client