Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dyPR31ntgVnvxJgQeL15ti8PoKM.roa
File: dyPR31ntgVnvxJgQeL15ti8PoKM.roa (raw, json)
Hash identifier: zqyvn2DBFYB+rgBNzU4O7NKH1C0przjjZ2R4jy05sXw=
Subject key identifier: 77:23:D1:DF:59:ED:81:59:EF:C4:98:10:78:BD:79:B6:2F:0F:A0:A3
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018851F75A852D01107FE2BB0265272D0904
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dyPR31ntgVnvxJgQeL15ti8PoKM.roa
Signing time: Thu 25 May 2023 08:12:25 +0000
ROA not before: Thu 25 May 2023 08:12:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 5.105.84.0/24 maxlen: 24
5.105.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:f7:5a:85:2d:01:10:7f:e2:bb:02:65:27:2d:09:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 25 08:12:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7723d1df59ed8159efc4981078bd79b62f0fa0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:2c:6a:a8:fc:2c:ea:57:c5:45:ca:00:66:
ad:35:5d:f0:59:82:42:8f:a8:38:c5:83:3c:4c:89:
d3:02:21:d8:21:83:12:d9:a5:dd:16:f1:83:fe:65:
9a:03:9f:9e:2e:86:90:3c:97:7e:92:ac:d7:8e:d6:
ac:b7:c6:b3:e6:ce:2c:13:d3:0b:d5:51:99:d4:e3:
24:ac:43:ee:ed:0d:55:cf:d9:26:a1:45:77:a5:bc:
b8:a5:2c:9a:10:b8:6e:f6:50:a7:6f:13:37:7b:50:
2a:75:27:d2:44:d1:93:7b:da:b1:f5:5f:58:08:dc:
ec:a5:39:38:00:fc:28:3b:13:31:7d:7a:a1:aa:32:
e4:3c:fd:6b:58:85:19:84:36:d4:18:8d:a6:ac:5c:
51:38:ce:29:eb:ae:bc:07:1e:63:80:c2:16:4b:c5:
4f:62:3c:0c:8e:11:e9:28:be:7c:42:e8:31:97:a0:
ae:7a:d6:13:93:6c:e9:b9:66:a4:49:59:c7:26:77:
5a:a1:7c:d6:e1:8b:fd:5b:b9:2b:37:87:dc:ac:60:
40:df:fa:f5:46:60:af:02:93:6e:a1:fa:4b:5c:41:
57:e3:fa:0e:86:88:e4:5a:11:41:79:ca:74:b0:04:
62:50:91:fb:6d:38:f5:e1:2d:81:2b:c2:c4:95:02:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:23:D1:DF:59:ED:81:59:EF:C4:98:10:78:BD:79:B6:2F:0F:A0:A3
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dyPR31ntgVnvxJgQeL15ti8PoKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.84.0/24
5.105.105.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f0:01:17:1d:0e:e4:0b:f5:0f:18:53:1b:27:d2:0e:94:3b:
c6:bf:c8:47:12:e7:7b:1c:ca:96:64:10:bf:69:03:c8:0e:05:
cc:ce:cf:e6:c7:dd:7a:95:4c:fe:bf:3b:67:6b:ee:a9:1d:b3:
fc:ad:27:ca:e7:b7:87:36:36:93:c2:ee:13:78:98:6c:72:76:
2b:a5:a2:f2:f0:a8:d7:c1:63:44:57:e2:92:01:4f:25:14:7d:
fc:13:19:55:59:de:cd:25:0c:11:07:d5:e8:b7:83:de:34:b9:
89:8d:d5:f4:7a:d3:35:66:19:5e:9a:4c:a4:03:f5:82:df:6f:
16:0f:18:44:e0:c5:53:fb:c2:9e:8f:bd:63:16:3c:02:38:97:
c9:57:f1:ba:42:9f:cf:34:04:01:87:a5:a4:b4:af:7b:a5:eb:
69:ce:a5:e2:5d:36:c1:11:e8:76:d3:e2:b0:49:cb:34:8b:ad:
81:73:07:5f:21:5e:50:4e:4f:a7:4d:25:93:0e:45:8d:bb:89:
15:2a:f3:2a:da:ea:27:3e:c8:0e:b6:ec:fc:6d:a4:b1:4d:9e:
ba:ec:8f:5d:28:5d:56:80:62:9b:dc:5d:79:82:c9:f4:86:0a:
be:d7:b5:30:00:54:0d:1e:23:46:26:98:d0:75:f1:18:19:cf:
1c:f4:88:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:52:50 2025 by rpki-client