Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/h6hde8lVAfi6UVRLTbIF8qC8DUw.roa
File: h6hde8lVAfi6UVRLTbIF8qC8DUw.roa (raw, json)
Hash identifier: 8VrRYQLjG3pu2FxXQYfd4PsIKezEB9Xx7YRJ9vLNUik=
Subject key identifier: 87:A8:5D:7B:C9:55:01:F8:BA:51:54:4B:4D:B2:05:F2:A0:BC:0D:4C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01888D08EBCFE0FCD3016F33B225EAAF4BB4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/h6hde8lVAfi6UVRLTbIF8qC8DUw.roa
Signing time: Mon 05 Jun 2023 19:29:12 +0000
ROA not before: Mon 05 Jun 2023 19:29:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.158.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.164.0/23 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.71.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.98.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.188.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8d:08:eb:cf:e0:fc:d3:01:6f:33:b2:25:ea:af:4b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 5 19:29:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87a85d7bc95501f8ba51544b4db205f2a0bc0d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:48:23:75:a0:00:0c:0e:81:9f:6c:a5:c5:
fb:8f:b3:bf:55:60:c5:f1:76:67:70:7f:19:99:4c:
a3:fd:60:67:d6:ae:fe:9d:6e:e2:24:92:0c:26:bb:
ee:59:8a:ee:51:d8:9f:a6:92:7b:a0:12:7f:1f:23:
50:6a:b6:15:f3:9a:cf:43:73:a4:7d:3e:ad:d6:57:
36:25:95:0b:49:3f:81:e0:68:34:18:ed:6f:43:29:
4e:c7:05:47:fe:b8:21:e3:d7:6f:b4:50:7e:f2:16:
45:2a:0b:59:a8:3b:10:71:11:12:21:92:05:f5:ae:
ee:79:14:55:74:45:dc:14:4b:e1:f4:ed:7a:14:5a:
c7:ce:40:fb:2e:f5:fd:ec:65:3b:89:33:28:0e:1f:
c7:7e:ac:72:b8:db:ae:70:98:fc:d8:52:28:c1:dc:
85:11:93:f7:6b:8f:6a:20:3f:78:35:b5:9b:79:78:
54:3a:3f:e7:a1:7f:cc:99:c6:ff:35:2c:b0:1a:2c:
ac:f5:2e:11:26:ad:a2:2f:15:d8:33:8f:33:62:61:
4e:c0:be:f6:a0:0c:3f:13:cb:33:a5:c5:97:72:9f:
b2:8a:8b:a0:be:db:9a:23:9f:07:10:c4:4d:78:38:
5c:63:0b:f8:50:27:ac:79:ae:29:42:57:3e:24:80:
17:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A8:5D:7B:C9:55:01:F8:BA:51:54:4B:4D:B2:05:F2:A0:BC:0D:4C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/h6hde8lVAfi6UVRLTbIF8qC8DUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.31.0/24
5.105.51.0/24
5.105.64.0/24
5.105.71.0/24
5.105.77.0/24
5.105.98.0/24
5.105.104.0/24
5.105.118.0/24
5.105.158.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.188.255
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.221.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ec:a9:f7:7e:cb:ae:8b:7b:b4:83:21:3d:39:d5:0b:20:35:
3c:55:0c:1e:5d:ea:51:9e:6a:d6:bb:36:f8:dc:0d:0d:99:2e:
ea:cf:cd:fe:b4:05:12:47:07:a6:5b:96:1c:a1:7d:7a:a3:9d:
8f:e7:40:ce:6b:a9:1a:83:78:21:fc:17:49:62:35:f8:72:dd:
7e:4a:42:6f:7f:06:91:1a:c4:64:22:dc:f0:8a:64:e7:e7:ed:
0b:ce:16:56:23:72:44:e2:f8:b0:78:9e:ca:cd:ee:12:08:85:
64:4e:f4:47:f5:26:d3:34:42:ce:34:8a:ac:2d:a8:90:5e:b5:
ae:e5:a6:f4:5e:3f:9a:b0:32:12:75:9b:b4:d2:2c:fb:e7:8f:
70:cf:f0:e3:dd:ca:2f:3d:06:96:c7:27:1d:51:4b:d3:23:fc:
f0:ce:c6:7f:3d:a0:71:14:a2:d7:ed:9e:ae:c9:15:96:49:70:
7a:a3:aa:9c:76:d7:5a:9b:af:27:28:5c:1d:35:a7:12:62:54:
d5:cb:f8:c0:a7:36:d5:39:ae:a8:a1:43:16:15:13:5c:5c:0a:
ff:9c:38:42:18:ed:ff:48:1d:c7:77:d0:88:50:c2:0d:09:f3:
a9:72:54:96:66:eb:4c:6f:da:93:30:5e:bf:6b:17:3a:9c:24:
c1:5d:e2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:30 2025 by rpki-client