Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dWSkbED5ZAYijHr4apaCwYRUEQY.roa
File: dWSkbED5ZAYijHr4apaCwYRUEQY.roa (raw, json)
Hash identifier: 7zYOsa3S+ovjIcr+str++QO/RWu6cox+2CzG5FS0Yoc=
Subject key identifier: 75:64:A4:6C:40:F9:64:06:22:8C:7A:F8:6A:96:82:C1:84:54:11:06
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01882EB68784993868315456BD6B55604876
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dWSkbED5ZAYijHr4apaCwYRUEQY.roa
Signing time: Thu 18 May 2023 11:54:54 +0000
ROA not before: Thu 18 May 2023 11:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.158.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.71.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:b6:87:84:99:38:68:31:54:56:bd:6b:55:60:48:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 18 11:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7564a46c40f96406228c7af86a9682c184541106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f1:25:33:ca:4c:40:50:97:a3:03:31:1a:cb:
c5:9d:61:a5:91:d6:c5:59:3f:66:92:88:0b:02:1b:
0e:53:ef:85:2f:f4:75:28:24:1a:3c:30:71:62:ed:
cc:51:57:85:5b:a4:cf:01:40:bc:6c:9e:cd:f2:99:
1d:4d:f3:02:d3:9a:63:c2:be:04:54:66:d3:89:01:
e3:7b:12:e5:ce:39:1a:52:8f:d1:c1:d0:4c:2b:f1:
ad:63:6a:88:4b:f0:9d:eb:34:25:10:d4:c9:2a:71:
cb:77:e6:f3:34:58:3c:6f:db:a5:25:c7:74:7c:0d:
59:85:0e:85:f0:24:3c:a4:b8:ec:2c:d5:0c:b2:03:
ed:39:33:9b:c5:02:29:87:5c:b6:bb:da:9f:7f:11:
33:bc:d3:ac:47:e0:cf:05:f2:30:8d:d8:a7:ce:3f:
8c:9e:ea:c3:e7:08:4c:9d:4f:ae:a5:2c:8f:bf:f9:
d4:21:be:70:a9:e8:16:fc:02:ad:1e:9a:5c:10:99:
02:44:80:04:57:0a:14:61:16:76:73:85:f1:35:2e:
e9:dd:9e:72:ec:ff:f8:85:36:f7:23:21:f3:12:b6:
10:f9:8f:b1:b5:6b:75:cd:92:cf:53:41:be:61:1a:
42:64:3b:c2:f3:9b:ab:ab:52:d2:ef:cc:b7:0b:59:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:64:A4:6C:40:F9:64:06:22:8C:7A:F8:6A:96:82:C1:84:54:11:06
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dWSkbED5ZAYijHr4apaCwYRUEQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.51.0/24
5.105.64.0/24
5.105.71.0/24
5.105.75.0/24
5.105.77.0/24
5.105.104.0/24
5.105.118.0/24
5.105.158.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.215.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ce:93:de:0a:fc:ff:23:3f:56:cf:8c:51:28:e7:4b:07:33:
8e:77:c3:6b:37:ad:2f:d9:77:e6:c5:8e:cc:89:e6:97:af:24:
76:25:45:e9:6e:74:72:57:55:b5:9b:7e:5b:f7:7e:ab:48:18:
5b:78:e4:27:57:00:3a:3e:24:ba:ca:d8:5b:40:70:b0:4d:8f:
92:06:99:91:af:35:63:c2:d6:e1:70:6b:7b:84:dc:b8:0c:6b:
23:9b:97:14:2c:70:0d:4b:bd:a6:95:bb:8a:8a:88:72:07:2f:
ae:da:e1:39:16:d2:9b:38:a1:9e:38:69:90:64:65:14:b6:9e:
61:43:96:0a:d6:eb:be:13:77:22:e6:98:1a:bf:79:7f:a1:b9:
c8:44:f1:29:4d:27:0e:f7:c2:72:48:2e:8e:47:4b:e8:d5:94:
ad:74:8a:44:07:66:73:a1:07:c6:64:05:5c:9b:b8:1c:31:80:
f8:dd:d6:ed:de:47:39:61:e2:31:89:42:db:b2:44:42:a6:84:
c8:38:2d:17:b3:64:93:c0:74:4d:36:d5:2f:85:67:88:48:b3:
d1:28:88:95:79:78:22:8c:a0:e9:54:8d:3d:48:73:76:5f:11:
a8:6e:8a:d7:ef:8c:01:88:d4:3a:91:e5:02:9d:2c:f2:92:7d:
e1:86:f7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:06:21 2025 by rpki-client