Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/gZxazBN0sdyuWbn0JaDFGTLdwV0.roa
File: gZxazBN0sdyuWbn0JaDFGTLdwV0.roa (raw, json)
Hash identifier: SzTDmfzXAM6oBLORUc5dFMDT9jfK4Bv2aq2QkTrE8xo=
Subject key identifier: 81:9C:5A:CC:13:74:B1:DC:AE:59:B9:F4:25:A0:C5:19:32:DD:C1:5D
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188EE90F0D1BAD9A0D6185926CE746601BA
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/gZxazBN0sdyuWbn0JaDFGTLdwV0.roa
Signing time: Sat 24 Jun 2023 18:00:56 +0000
ROA not before: Sat 24 Jun 2023 18:00:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ee:90:f0:d1:ba:d9:a0:d6:18:59:26:ce:74:66:01:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 24 18:00:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=819c5acc1374b1dcae59b9f425a0c51932ddc15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:d8:d0:42:bb:a6:ee:06:99:b9:f0:05:5a:
1b:60:e6:21:a8:ba:91:59:60:75:26:2b:07:d6:0a:
15:dd:73:75:ec:1f:5f:fd:3e:a3:28:53:44:94:6b:
06:0d:d6:56:28:ca:dc:a1:87:f6:d3:5f:3e:5c:12:
43:e6:a2:e2:54:9a:61:60:c9:67:b4:52:59:6c:bc:
49:ac:f4:4b:ca:14:4a:c7:69:62:4a:89:41:5a:03:
f7:8b:f8:e0:16:6c:a4:6d:f2:4a:5d:05:d0:43:9c:
e4:87:b3:ec:21:70:9c:ed:fb:d6:72:fd:e6:4c:d9:
8e:fe:6d:58:36:cd:7b:a3:53:21:9d:e7:b6:c5:16:
49:38:94:10:1f:00:25:1e:cd:6c:4e:3d:cd:dd:52:
cb:da:f0:3c:fc:2e:27:87:e2:3b:f2:86:51:81:59:
b0:29:df:0f:04:e4:f9:29:fd:89:5e:5b:d6:1f:82:
cb:c4:36:51:6c:bd:c2:12:f0:36:a9:85:ef:8f:57:
75:13:26:26:d6:55:4b:5a:ab:c0:63:d9:9f:3b:68:
21:b1:49:09:48:30:ca:ff:d2:c1:44:85:4c:38:ba:
b5:e0:6c:89:b8:f4:4d:b5:e2:a6:7d:e0:27:54:28:
86:28:4a:0e:93:d3:a6:63:8b:5e:0c:09:c6:fc:d9:
f1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:5A:CC:13:74:B1:DC:AE:59:B9:F4:25:A0:C5:19:32:DD:C1:5D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/gZxazBN0sdyuWbn0JaDFGTLdwV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.5.0/24
5.105.7.0/24
5.105.18.0/24
5.105.21.0/24
5.105.36.0/24
5.105.63.0/24
5.105.75.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.162.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
04:71:49:62:88:10:08:9b:c6:32:53:cb:be:19:be:e4:ff:b9:
f5:cb:b2:7e:21:ca:3e:af:7e:ba:43:0c:4d:7e:8d:fd:b2:b3:
10:84:cb:06:e9:6b:41:01:64:ce:1b:a4:8f:7d:24:95:cc:db:
0c:7f:ec:4c:28:e1:73:5f:5a:ee:e9:25:1c:68:62:41:1c:d2:
03:fb:84:1b:88:78:46:60:2f:59:66:e6:ca:9b:9e:49:19:41:
14:fa:2e:e0:27:7c:a9:a3:48:fb:bf:5e:b7:67:18:21:b3:20:
28:de:37:d0:5d:4e:5b:fd:8e:54:f9:54:63:7a:a2:3f:00:1b:
47:35:1c:52:72:d8:f0:05:8f:1c:f1:ed:84:ac:ea:e1:6a:81:
a7:18:5f:15:45:f7:14:5f:c6:5c:31:2d:9e:ad:6e:64:f6:9e:
95:20:f4:86:37:b2:97:d7:ee:95:69:8d:e5:b1:8e:f4:d0:3a:
dd:3d:e4:34:c1:91:2b:8b:d8:95:50:f8:37:61:6a:28:5a:3e:
76:84:02:48:4d:ac:35:f2:2d:0c:45:e0:5b:68:e1:6e:f6:cf:
4d:45:94:18:dc:96:c7:1d:40:7d:48:c5:69:2b:6e:d9:38:68:
af:64:31:81:c2:17:c7:fa:c4:3c:ae:85:1f:b0:1b:70:5c:41:
59:e3:3d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:30 2025 by rpki-client