Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/hJ5X0p6Tc1DEWkBKfWLDMhWG5vc.roa
File: hJ5X0p6Tc1DEWkBKfWLDMhWG5vc.roa (raw, json)
Hash identifier: tb0Re3lYvK9EYjrir9GXB8asyB6n/XBcyvRCwQ8JZ+Q=
Subject key identifier: 84:9E:57:D2:9E:93:73:50:C4:5A:40:4A:7D:62:C3:32:15:86:E6:F7
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A3335355667EF6D50C8CB4557F6E0704F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/hJ5X0p6Tc1DEWkBKfWLDMhWG5vc.roa
Signing time: Sat 26 Aug 2023 18:57:19 +0000
ROA not before: Sat 26 Aug 2023 18:57:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 5.105.19.0/24 maxlen: 24
5.105.22.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:33:35:35:56:67:ef:6d:50:c8:cb:45:57:f6:e0:70:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 26 18:57:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=849e57d29e937350c45a404a7d62c3321586e6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:7e:07:1c:f2:97:bd:89:cd:5a:31:18:42:
2b:79:49:73:f3:aa:d5:5f:8d:38:c1:ce:f7:b3:a7:
cd:5c:65:1b:8d:e0:e7:cd:7a:33:dd:bf:f2:79:d7:
0d:e4:96:73:a1:4c:32:14:d7:94:9f:08:1e:08:04:
06:7d:45:bd:ba:ff:98:06:c4:f6:08:08:e4:b0:d0:
2c:7f:19:47:08:8c:34:67:f8:68:12:be:8f:63:68:
54:e0:4e:ce:52:f7:53:02:e7:e2:33:d1:18:3f:23:
a0:98:2c:54:77:7d:d4:46:fb:6f:3b:a4:db:27:64:
9c:71:55:3e:bd:1a:ee:5a:c0:ff:0f:94:9b:38:f9:
0e:72:c3:2e:8d:4a:7a:33:ff:63:f0:f4:32:4a:05:
4c:18:7d:f7:23:0b:ea:42:8c:2a:06:d5:a9:d6:a0:
91:e7:b5:0d:b4:8f:e9:e4:1d:79:ef:44:67:9d:26:
24:b2:a1:76:37:61:ee:7d:d2:e7:d8:07:79:47:5e:
93:d0:51:2c:bf:25:8e:43:09:ad:89:4b:7a:2f:97:
b3:d3:02:b6:f7:44:d0:f9:fb:1a:a5:26:51:d8:e3:
12:68:40:20:f6:b4:97:c8:c4:7d:a5:72:1c:1e:88:
1a:f8:9e:0c:8a:87:7a:ac:68:77:50:0c:34:cf:c3:
aa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9E:57:D2:9E:93:73:50:C4:5A:40:4A:7D:62:C3:32:15:86:E6:F7
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/hJ5X0p6Tc1DEWkBKfWLDMhWG5vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.19.0/24
5.105.22.0/24
5.105.142.0/24
5.105.207.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:ae:86:3b:a1:cc:8e:52:38:ea:d4:63:d5:f7:fb:e6:29:88:
9b:40:82:7e:41:e3:a2:20:f2:ef:29:89:69:3e:6e:99:37:1c:
61:1d:54:ec:1e:f0:4e:82:31:17:1f:da:6a:54:ba:22:e2:44:
f5:f7:fc:4f:19:c5:b1:96:cf:f0:3d:17:ca:4b:98:bb:91:b8:
a9:23:da:07:da:e3:be:8e:87:f6:1d:1c:1c:e4:7b:49:23:a5:
72:50:1b:58:c6:08:54:73:a1:28:e2:c7:82:23:74:c4:b6:d6:
cb:e9:47:eb:8f:4f:d2:b7:53:f6:d7:15:2f:f4:94:a7:3e:54:
c2:94:96:51:df:ff:23:46:ad:ba:a3:ed:8a:fd:aa:7c:6b:95:
b3:d3:14:a7:5e:95:91:09:9a:e4:e4:36:a5:cf:d2:f7:95:47:
71:10:94:f8:35:ff:e8:fc:13:d6:84:52:59:34:2b:6d:3b:b8:
7e:13:63:b3:d2:a7:2c:3a:ff:69:49:d0:08:87:72:29:94:c4:
87:f5:0d:03:3f:34:49:25:6a:d6:0c:62:fe:29:17:02:83:87:
c5:85:45:5d:98:bf:a6:eb:59:9b:9f:6d:48:47:d4:af:44:0f:
0d:6a:d1:b5:18:99:b1:3a:a8:98:6b:13:7a:56:1e:e3:e5:fe:
bb:46:cc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:37 2025 by rpki-client