Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/cQzb_I83HkJ2o_F3Tn5jpVbqwXA.roa
File: cQzb_I83HkJ2o_F3Tn5jpVbqwXA.roa (raw, json)
Hash identifier: xt2HycxApEF/Py1xXoJEtjRWlUQFU/fyNFmzYBvTaWY=
Subject key identifier: 71:0C:DB:FC:8F:37:1E:42:76:A3:F1:77:4E:7E:63:A5:56:EA:C1:70
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5B86444F626656811A6640A3261E5
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/cQzb_I83HkJ2o_F3Tn5jpVbqwXA.roa
Signing time: Sun 01 Jan 2023 05:54:55 +0000
ROA not before: Sun 01 Jan 2023 05:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b8:64:44:f6:26:65:68:11:a6:64:0a:32:61:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=710cdbfc8f371e4276a3f1774e7e63a556eac170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:27:a2:e0:c8:3e:e9:b3:7d:47:47:45:cd:4c:
f2:0b:7d:52:51:a8:5c:80:91:98:d5:77:28:fd:7f:
7d:9b:10:a2:1a:09:72:92:c9:c4:08:fd:10:b6:a2:
eb:74:6f:77:85:44:5b:3d:86:6d:41:7f:75:eb:9e:
a3:f2:f8:76:f7:df:05:18:a0:07:68:4a:6a:35:05:
71:ca:c6:ea:d9:b6:cf:67:22:3e:15:80:ac:30:e8:
ed:24:37:ce:9d:69:3f:8f:54:d3:a2:73:42:d0:95:
fd:49:59:48:36:79:d6:2f:af:bd:dd:a6:5f:46:4e:
77:60:1b:6b:48:5c:49:3c:44:5c:61:c5:ff:86:0d:
37:af:ee:87:8c:00:c0:ce:ee:f9:67:5f:01:ab:3f:
0c:47:6d:28:c7:c1:1c:e0:5f:73:aa:0d:3d:eb:fe:
8d:ec:37:23:54:7e:0f:09:fc:89:5a:73:ef:db:54:
85:6b:f9:d1:02:6c:0e:5e:79:0f:78:18:84:63:89:
06:b7:68:47:94:5a:62:1d:52:f4:63:b6:ff:ed:91:
a4:33:eb:c4:d6:1d:6a:40:83:30:07:80:02:c1:1b:
bc:3d:17:9f:82:e1:59:d4:54:68:3d:cd:bf:2c:f4:
7c:3c:5b:8b:01:5e:6c:28:c2:d3:cb:93:63:ba:54:
66:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0C:DB:FC:8F:37:1E:42:76:A3:F1:77:4E:7E:63:A5:56:EA:C1:70
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/cQzb_I83HkJ2o_F3Tn5jpVbqwXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/24
5.105.57.0/24
Signature Algorithm: sha256WithRSAEncryption
97:5f:7d:5c:ba:7c:6d:8c:86:66:36:64:2c:29:30:5c:bd:4e:
a9:02:95:43:2d:47:0f:cf:52:c6:df:d5:83:de:6e:30:2a:06:
e6:3b:98:16:42:dd:b6:2b:83:7d:94:d4:17:4f:3c:99:32:1f:
c0:c8:0f:3a:b2:32:c8:d7:81:75:63:a4:54:08:0c:9d:74:52:
b5:ea:5f:8e:b9:ee:3c:c0:2a:23:a5:78:54:19:f5:c9:ee:59:
44:c0:9a:ae:e7:ae:0b:84:50:59:1d:67:bb:3a:77:b5:29:8a:
22:19:ff:94:0a:31:e3:39:be:af:ee:45:fe:6d:a1:84:d1:92:
df:c9:f9:ca:b6:a3:46:81:4c:67:b9:8c:a4:e5:5f:ec:9e:45:
a0:c7:8d:97:17:1a:2c:a3:c1:94:a8:9a:4c:b2:c2:cf:cb:35:
e7:46:bd:f0:60:d3:da:11:56:ef:d5:3c:85:53:fb:38:30:d7:
d7:cd:68:1c:5a:c9:ec:75:93:33:17:92:f6:54:b3:7e:f3:1f:
8c:94:da:56:82:99:10:d7:58:36:27:ee:14:34:2b:fe:61:a9:
39:82:c9:72:e7:39:7e:83:b9:87:ec:ed:68:f9:a3:de:ee:45:
64:47:5a:e0:8e:59:9a:83:65:c9:63:3a:21:b9:c0:00:f7:88:
e9:e0:79:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:25 2025 by rpki-client