Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/deuIfnwvPAvK6Cwp4weUnMEJU14.roa
File: deuIfnwvPAvK6Cwp4weUnMEJU14.roa (raw, json)
Hash identifier: zvaulHJCudVVeep1d/VXj8IBdSZHoOgcvffGjka8px8=
Subject key identifier: 75:EB:88:7E:7C:2F:3C:0B:CA:E8:2C:29:E3:07:94:9C:C1:09:53:5E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188BE30B6FAD2AFB222A0E72E8802F3A7EB
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/deuIfnwvPAvK6Cwp4weUnMEJU14.roa
Signing time: Thu 15 Jun 2023 08:34:03 +0000
ROA not before: Thu 15 Jun 2023 08:34:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 5.105.160.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.250.0/24 maxlen: 24
5.105.251.0/24 maxlen: 24
5.105.255.0/24 maxlen: 24
5.105.254.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.191.0/24 maxlen: 24
5.105.190.0/24 maxlen: 24
5.105.192.0/24 maxlen: 24
5.105.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:30:b6:fa:d2:af:b2:22:a0:e7:2e:88:02:f3:a7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 15 08:34:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75eb887e7c2f3c0bcae82c29e307949cc109535e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:1d:81:76:85:2c:79:55:43:24:2a:b9:4f:
d5:92:36:b8:27:79:1a:68:db:02:fc:2b:fe:a8:0a:
63:bd:3b:83:32:1f:f0:fb:17:66:74:23:19:a9:73:
51:f1:92:97:f2:f7:41:d7:83:6b:a0:0f:9b:bc:93:
b7:c2:e2:1a:3a:d7:1b:3a:36:b0:f5:e8:1b:8d:5f:
99:49:53:57:49:88:65:5b:f9:2f:6a:f4:8f:92:b8:
3b:51:21:9e:e6:87:54:52:de:24:6d:ab:b8:49:58:
02:aa:be:92:13:f9:2e:12:82:6e:95:47:43:4e:4b:
92:52:83:1c:55:be:d9:e3:dd:c1:f4:49:99:7a:27:
dd:be:d2:eb:6d:2e:df:f5:91:a7:eb:5b:7b:7b:a4:
56:61:42:39:25:b5:c9:8a:31:2e:a0:49:f1:4f:e9:
17:ea:c6:d7:eb:a1:12:bf:0a:94:b2:3f:2b:d8:56:
d7:6b:62:a7:c7:15:10:3d:10:3d:e6:67:4a:59:c6:
35:5a:87:6e:4b:39:7a:ab:dd:88:c7:01:92:3a:c5:
da:e0:f4:ce:5f:be:2c:24:25:c8:0a:42:43:b9:4f:
da:7c:5c:c5:54:a4:84:9a:06:94:9a:25:01:f5:00:
53:84:34:94:cf:50:3f:dd:d1:f7:3a:29:e2:14:df:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EB:88:7E:7C:2F:3C:0B:CA:E8:2C:29:E3:07:94:9C:C1:09:53:5E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/deuIfnwvPAvK6Cwp4weUnMEJU14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.86.0-5.105.89.255
5.105.160.0/24
5.105.176.0/24
5.105.190.0-5.105.192.255
5.105.194.0/24
5.105.250.0/23
5.105.254.0/23
Signature Algorithm: sha256WithRSAEncryption
50:09:34:10:ff:d9:22:e7:d8:d7:8f:9e:62:ea:9f:b0:a7:04:
d4:a4:e8:b6:5b:5a:9d:45:cc:5c:66:49:5a:49:66:ee:ab:f4:
fb:85:cb:a9:7d:c3:f3:89:ce:ca:d2:de:b3:73:98:e4:c8:c2:
a2:33:c5:83:47:a9:98:ec:e5:7d:47:14:33:4a:cd:00:d2:55:
20:f7:23:88:9d:ad:ac:66:21:60:ef:7f:dd:74:e4:85:9f:07:
51:55:0a:60:39:70:5b:8d:1c:ff:06:e4:25:48:ed:ff:2e:84:
47:f2:76:e6:22:b5:bd:79:76:55:c4:a8:28:ad:cb:97:ef:29:
6b:d8:dd:f4:c3:e7:95:60:01:04:30:0c:49:66:24:b2:eb:61:
ae:c1:f9:12:fc:da:9b:d1:df:1a:0b:6a:1a:3c:a3:4a:de:a8:
78:6f:f9:ba:a3:fc:e8:2a:20:d7:e9:2d:53:27:03:b2:b6:be:
bb:52:86:13:be:17:f6:55:5a:f6:db:41:bc:60:60:ed:35:e6:
cb:ac:b6:83:9d:fb:ae:52:6b:4d:87:00:b5:32:26:28:af:31:
e3:ad:17:5d:ec:f1:d9:1b:9e:35:b0:7d:c8:26:2a:bf:1a:23:
77:93:4a:d4:eb:f3:f0:d1:59:28:53:45:1d:47:ca:b8:21:60:
96:ae:73:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:20 2025 by rpki-client