Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/k1ECOQNQo2fQ3Mqqi3IKYKCQelk.roa
File: k1ECOQNQo2fQ3Mqqi3IKYKCQelk.roa (raw, json)
Hash identifier: WAkcU+GBwFtAod3soRUGgO0B3WC6/bshJ8WoHMxtomQ=
Subject key identifier: 93:51:02:39:03:50:A3:67:D0:DC:CA:AA:8B:72:0A:60:A0:90:7A:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188DD38C3B59F45FF3703FAA6C2D3EAC598
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/k1ECOQNQo2fQ3Mqqi3IKYKCQelk.roa
Signing time: Wed 21 Jun 2023 09:11:04 +0000
ROA not before: Wed 21 Jun 2023 09:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:38:c3:b5:9f:45:ff:37:03:fa:a6:c2:d3:ea:c5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 21 09:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=935102390350a367d0dccaaa8b720a60a0907a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:16:58:5c:0f:c2:57:43:75:f2:52:a7:0d:
e8:d4:ff:89:d0:3c:08:ca:ce:6f:05:d5:94:15:7e:
d2:80:e4:b8:39:db:a3:6c:ab:31:11:d3:5f:00:a0:
77:88:dd:19:15:41:91:6d:05:4f:b2:08:83:99:11:
77:08:ff:f8:eb:61:a9:09:ad:68:97:0b:03:7f:9c:
0c:06:ae:a5:a2:7c:0d:bd:b2:64:f9:18:89:2e:a1:
3c:32:f2:e9:a0:4f:ae:b6:28:9d:e9:46:b8:ae:de:
e4:89:52:ee:9f:af:db:1d:c9:b8:54:f6:78:2c:95:
2f:db:62:5e:e0:e1:cf:b3:01:da:65:4d:38:aa:2d:
27:20:1e:72:b6:e8:4c:95:c5:6f:bc:6e:58:1d:56:
0c:a2:02:61:a4:dc:af:18:82:89:8c:3e:32:57:5c:
3a:82:b6:ea:27:3a:d7:29:22:c4:96:09:e9:44:77:
59:7a:00:2e:16:3a:8d:89:00:99:82:0b:70:8b:af:
66:00:44:db:70:46:fb:cb:93:1b:74:2b:10:de:8a:
ea:d4:d6:a3:e4:a9:9b:ef:8d:9a:14:f7:77:34:68:
03:8e:45:17:61:0b:dc:56:5b:ee:a6:20:b0:58:aa:
e2:88:6b:4d:73:a6:89:f1:1d:3c:de:cf:d7:29:90:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:51:02:39:03:50:A3:67:D0:DC:CA:AA:8B:72:0A:60:A0:90:7A:59
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/k1ECOQNQo2fQ3Mqqi3IKYKCQelk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.30.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ed:0b:c2:12:41:69:7f:f8:13:ba:b8:0d:af:ad:d5:9e:65:
96:1a:37:10:36:f5:16:f6:8f:ba:a4:0d:70:f1:77:5d:95:d1:
6b:3a:21:5d:51:07:c4:d9:2e:f6:a5:b1:b8:52:8c:5a:5a:33:
74:78:e6:05:49:81:39:79:5c:a9:c5:72:44:08:92:f4:35:34:
5c:cc:bd:bb:23:73:c5:9d:99:96:ae:51:83:cd:ec:2a:2f:49:
29:ec:f2:32:1f:f8:07:9b:5f:55:3e:66:89:58:62:69:8a:24:
4e:fd:99:cb:1d:0f:7b:fc:00:fb:32:12:c6:fb:97:3c:60:d1:
32:b4:92:a1:23:cf:cd:7a:b3:b5:ab:09:88:41:27:58:42:e2:
4b:98:46:c6:78:3e:70:62:32:02:d7:2c:49:81:25:7b:e3:00:
c6:99:3f:47:e0:6f:3e:8f:94:8d:f4:db:ba:dc:e5:cc:5d:9a:
cd:39:42:d6:a4:e3:72:87:5e:84:4c:11:aa:73:18:95:5a:f5:
22:2d:4d:5d:e6:fe:8d:aa:0a:f3:b8:4c:73:02:2f:fd:6c:a8:
a6:88:b0:e8:86:62:1f:52:f7:4e:30:65:92:47:71:1e:33:ec:
fe:d1:8e:4a:75:f1:7d:e8:a7:11:f8:b1:ac:14:47:a1:f9:c0:
3a:5b:3f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:15:24 2025 by rpki-client