Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/jh4RWGqGAywcF00_8MyFrhdcAxE.roa
File: jh4RWGqGAywcF00_8MyFrhdcAxE.roa (raw, json)
Hash identifier: SoY3Beh34H4LTWc+3651PFqJlNUtn6NKU8spRSSB5FI=
Subject key identifier: 8E:1E:11:58:6A:86:03:2C:1C:17:4D:3F:F0:CC:85:AE:17:5C:03:11
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A4A5FC4426B1CD5ABE41985EDE97AAB0C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/jh4RWGqGAywcF00_8MyFrhdcAxE.roa
Signing time: Thu 31 Aug 2023 06:55:04 +0000
ROA not before: Thu 31 Aug 2023 06:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:5f:c4:42:6b:1c:d5:ab:e4:19:85:ed:e9:7a:ab:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 31 06:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e1e11586a86032c1c174d3ff0cc85ae175c0311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:72:66:d4:77:7d:32:c6:63:ff:e4:f7:1b:
a8:1f:4e:95:4f:c2:31:52:11:4a:cf:56:a7:12:d0:
58:7c:ec:27:ff:34:be:ef:bb:32:bd:8e:e8:0a:3c:
65:b2:66:fe:9b:85:34:16:97:a8:d4:12:ea:cc:fd:
23:aa:2c:03:d0:95:04:a2:b8:60:71:ce:2f:80:c7:
58:23:e8:2e:88:60:de:13:9c:bc:a2:dc:33:35:e7:
34:44:e7:b5:47:92:7e:cb:e8:aa:17:2f:25:a7:6e:
7a:a1:fb:73:33:6f:02:24:2d:bf:f0:91:9f:22:cc:
7e:e9:28:d2:5a:00:14:42:dc:7a:72:7e:bf:86:5a:
9f:dd:ef:37:76:78:bd:7f:d8:28:26:d1:c6:b6:3e:
86:55:02:af:4f:99:b7:2d:39:d5:c2:a3:45:7d:ad:
15:62:15:09:e8:b5:01:16:20:29:29:84:74:6c:d2:
65:94:33:de:48:65:37:86:26:25:91:64:33:e2:08:
ea:5c:b4:c2:33:c1:94:35:80:c1:9c:94:f6:c8:c1:
66:a2:d0:2f:c1:2c:4c:27:a6:c7:7a:dd:4a:04:8e:
fd:a5:db:12:ca:ee:c5:29:4c:b4:e4:c4:07:f3:ec:
22:4f:e2:ce:c4:49:c4:a0:11:1c:f6:9c:56:0e:af:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1E:11:58:6A:86:03:2C:1C:17:4D:3F:F0:CC:85:AE:17:5C:03:11
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/jh4RWGqGAywcF00_8MyFrhdcAxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.16.0/24
5.105.18.0/24
5.105.21.0/24
5.105.40.0/24
5.105.50.0/24
5.105.57.0/24
5.105.62.0/24
5.105.82.0/24
5.105.84.0/24
5.105.114.0/23
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.157.0/24
5.105.162.0/24
5.105.203.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:25:f0:60:aa:9f:1d:77:7d:e2:de:d6:77:e9:d4:ad:76:58:
41:d4:a9:50:59:70:85:86:13:56:85:ea:9c:35:eb:47:7e:c5:
a3:73:8f:2d:61:42:01:7e:61:15:8e:01:b8:78:e7:e6:19:98:
d3:4d:0f:83:d2:4d:62:2f:7c:18:0e:56:df:72:50:1b:2b:ba:
b6:a3:d6:fa:b7:13:61:4b:fe:f0:d1:25:6e:5b:99:5e:d8:d2:
b3:3f:6c:9a:d6:59:54:8a:42:43:55:20:3d:2f:95:8b:23:d3:
92:99:63:dd:23:dd:a7:2d:88:09:ce:6a:9f:e4:ed:ae:72:4e:
ca:2c:d0:ea:b5:88:ef:cb:f1:46:c9:49:c1:e0:33:46:d5:14:
d7:c1:8a:62:d2:ff:7b:1e:c2:ac:87:25:1c:54:a2:05:f4:7a:
ee:66:06:e7:22:56:49:57:7e:da:71:de:c7:d1:10:d6:34:bc:
72:78:2f:10:18:1d:c1:8a:ec:2a:5f:b0:a9:81:51:07:1c:16:
ff:4b:8f:11:e6:57:e6:09:44:a4:a0:ca:dc:7a:c1:26:99:39:
60:54:6c:a9:e0:c5:87:d7:36:92:b2:d3:4d:87:1e:bd:7a:0c:
ee:40:c6:8b:42:c9:45:5e:a4:bd:62:88:d6:d3:79:56:23:20:
6a:81:f8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:44 2025 by rpki-client