Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eBSrl9iO71JWiBmeZe0y4nRvjJM.roa
File: eBSrl9iO71JWiBmeZe0y4nRvjJM.roa (raw, json)
Hash identifier: q586UH4BUHNYEvzpT3BvxnTZV2tZ/blPj5XfHajQr5g=
Subject key identifier: 78:14:AB:97:D8:8E:EF:52:56:88:19:9E:65:ED:32:E2:74:6F:8C:93
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188F6BCEC9EE43897C8E46FD8A0EFD80F6C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eBSrl9iO71JWiBmeZe0y4nRvjJM.roa
Signing time: Mon 26 Jun 2023 08:05:56 +0000
ROA not before: Mon 26 Jun 2023 08:05:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.128.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
5.105.107.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:bc:ec:9e:e4:38:97:c8:e4:6f:d8:a0:ef:d8:0f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 26 08:05:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7814ab97d88eef525688199e65ed32e2746f8c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:91:33:89:b6:ac:2c:19:45:20:ec:d8:61:
51:a0:1d:a0:d6:53:d2:09:2f:e7:de:be:69:19:05:
25:69:44:7f:28:d9:52:e6:53:20:72:37:e5:fc:87:
0e:29:ba:e1:f4:50:f4:c0:23:bc:fa:e6:61:c3:f6:
c4:6d:7c:7f:b8:a4:ec:82:84:f6:a5:23:92:87:15:
2b:1a:66:02:30:84:b8:09:ea:ae:f8:21:e2:98:e9:
05:51:12:9b:90:e6:aa:01:d2:c2:dd:45:c2:eb:32:
07:42:03:63:11:cf:29:d7:05:d8:b8:7e:4a:94:d8:
97:cb:73:c0:82:ef:c8:a8:bc:8d:ac:12:ff:43:2b:
5b:5b:ca:65:32:2d:96:7e:91:b5:3d:5c:dc:96:a0:
04:fc:92:02:26:f1:b3:61:fb:46:4f:1d:fe:bd:d7:
59:9b:0e:57:00:96:23:6d:32:88:d0:d1:78:34:36:
bf:f5:33:37:0b:04:d6:d0:95:5a:44:72:d7:3a:a1:
20:9e:9f:b7:67:99:1e:24:9c:dd:7e:61:07:8b:f8:
6a:07:61:a9:2f:59:29:4e:14:4d:f6:68:fa:d0:d9:
9e:90:ae:5a:bd:3c:2d:e4:64:c3:3b:a5:3f:e3:d8:
b6:93:2e:35:95:5c:7d:88:db:e9:b8:e9:1f:7e:a6:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:14:AB:97:D8:8E:EF:52:56:88:19:9E:65:ED:32:E2:74:6F:8C:93
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/eBSrl9iO71JWiBmeZe0y4nRvjJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.5.0/24
5.105.7.0/24
5.105.18.0/24
5.105.21.0/24
5.105.36.0/24
5.105.63.0/24
5.105.75.0/24
5.105.94.0/24
5.105.102.0/24
5.105.107.0/24
5.105.110.0/23
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.128.0/24
5.105.162.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:62:05:69:cc:b8:c2:23:6d:d2:0b:a8:f4:80:ef:2a:f7:60:
8b:74:5e:8a:f8:15:ec:bd:46:e9:d7:13:5d:f5:a1:73:f6:3e:
65:12:0a:8a:b8:e9:9f:00:c8:20:19:bd:d3:2f:77:cc:0a:12:
ee:02:60:7f:46:28:14:89:eb:0b:70:8d:f0:8b:b4:74:4a:a0:
83:85:22:a4:4b:fe:1c:a3:db:c3:dc:61:1c:36:6c:e3:6f:e1:
29:95:98:ea:79:f4:dc:8f:82:79:ac:1e:61:a9:b1:6e:ad:38:
9b:4b:e5:8f:4a:41:44:d4:52:4b:70:b7:f9:5a:38:4e:1a:7f:
8a:96:fc:2b:05:33:da:82:b5:5f:a0:e7:dc:95:b6:ba:23:d9:
4f:fa:95:65:fd:ba:0c:36:93:67:5b:79:24:0b:c0:8a:8d:cc:
0b:a8:c1:63:0b:04:3c:10:9f:9d:63:cb:9b:d4:2d:8e:17:d6:
83:be:6a:fe:96:6d:45:ca:5e:ea:78:53:6e:e5:58:34:3a:bb:
af:74:66:76:5b:3e:30:3c:d3:25:81:f9:a1:41:72:ed:85:4c:
f1:0e:a8:e6:7c:c2:9b:f7:84:ff:cc:09:37:d7:54:34:7c:31:
f2:57:e5:19:82:ae:2d:12:10:e6:af:66:c2:8d:94:14:b1:62:
df:eb:e4:2f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAYj2vOye5DiXyORv2KDv2A9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjI2MDgwNTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODE0YWI5N2Q4OGVlZjUyNTY4ODE5OWU2NWVkMzJlMjc0NmY4YzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpqRM4m2rCwZRSDs2GFRoB2g1lPS
CS/n3r5pGQUlaUR/KNlS5lMgcjfl/IcOKbrh9FD0wCO8+uZhw/bEbXx/uKTsgoT2
pSOShxUrGmYCMIS4Cequ+CHimOkFURKbkOaqAdLC3UXC6zIHQgNjEc8p1wXYuH5K
lNiXy3PAgu/IqLyNrBL/QytbW8plMi2WfpG1PVzclqAE/JICJvGzYftGTx3+vddZ
mw5XAJYjbTKI0NF4NDa/9TM3CwTW0JVaRHLXOqEgnp+3Z5keJJzdfmEHi/hqB2Gp
L1kpThRN9mj60NmekK5avTwt5GTDO6U/49i2ky41lVx9iNvpuOkffqYtawIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFHgUq5fYju9SVogZnmXtMuJ0b4yTMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvZUJTcmw5aU83MUpXaUJtZVplMHk0blJ2akpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHdBggrBgEFBQcBBwEB/wSBzTCByjCBxwQCAAEwgcADBAAF
aQMDBAAFaQUDBAAFaQcDBAAFaRIDBAAFaRUDBAAFaSQDBAAFaT8DBAAFaUsDBAAF
aV4DBAAFaWYDBAAFaWsDBAEFaW4DBAAFaXEwDAMEAAVpdQMEAAVpdgMEAAVpgAME
AAVpogMEAAVpqgMEAQVpugMEAQVpxgMEAQVpygMEAAVpzjAMAwQABWnXAwQABWnY
AwQABWnaAwQBBWnkMAwDBAAFae8DBAAFafADBAEFafQDBAAFtLADBADBLtIwDQYJ
KoZIhvcNAQELBQADggEBAGxiBWnMuMIjbdILqPSA7yr3YIt0Xor4Fey9RunXE131
oXP2PmUSCoq46Z8AyCAZvdMvd8wKEu4CYH9GKBSJ6wtwjfCLtHRKoIOFIqRL/hyj
28PcYRw2bONv4SmVmOp59NyPgnmsHmGpsW6tOJtL5Y9KQUTUUktwt/laOE4af4qW
/CsFM9qCtV+g59yVtroj2U/6lWX9ugw2k2dbeSQLwIqNzAuowWMLBDwQn51jy5vU
LY4X1oO+av6WbUXKXup4U27lWDQ6u690ZnZbPjA80yWB+aFBcu2FTPEOqOZ8wpv3
hP/MCTfXVDR8MfJX5RmCri0SEOavZsKNlBSxYt/r5C8=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:38 2025 by rpki-client