Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/k1UOoMTNPVFFhHVniwEiZdWZfC4.roa
File: k1UOoMTNPVFFhHVniwEiZdWZfC4.roa (raw, json)
Hash identifier: FVUH771DKDnFJD1sCHhnH1XAoC78rq0hohrx6RD72oA=
Subject key identifier: 93:55:0E:A0:C4:CD:3D:51:45:84:75:67:8B:01:22:65:D5:99:7C:2E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186DF5019D8B47EF7CB35DBBEDC874A3F1A
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/k1UOoMTNPVFFhHVniwEiZdWZfC4.roa
Signing time: Tue 14 Mar 2023 08:50:14 +0000
ROA not before: Tue 14 Mar 2023 08:50:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 5.105.228.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:50:19:d8:b4:7e:f7:cb:35:db:be:dc:87:4a:3f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 14 08:50:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93550ea0c4cd3d51458475678b012265d5997c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:29:a2:6f:b0:8e:02:41:f3:0e:9c:99:1c:
21:f8:9e:de:9c:31:9d:7d:a2:6b:c1:30:5a:d8:53:
84:a6:12:de:a0:6a:c4:71:65:7b:bc:30:04:31:d2:
5a:a8:c4:20:97:d8:b4:92:fa:e2:6c:65:32:a7:02:
da:b2:30:8d:37:d5:a2:df:c2:ee:5f:02:f3:76:74:
c4:e8:5b:0c:45:61:e4:46:2e:88:91:a0:e2:d4:35:
3b:54:34:1a:82:3b:2c:bc:34:6e:5c:c2:69:e9:aa:
5e:cb:ac:8e:22:1c:e7:75:38:da:68:08:15:ba:67:
f3:49:d9:28:10:39:b3:0c:7d:8b:c8:93:bb:28:03:
f3:3d:bc:c7:21:b2:be:91:a4:6a:82:b6:ed:91:db:
94:7e:4a:43:53:ef:5f:a1:d9:27:a1:8b:66:2e:5e:
f6:e7:b5:1f:17:a5:7b:a1:3e:dc:b1:bd:fd:61:cf:
41:3a:c3:fc:3b:b6:4c:84:9a:6b:56:ca:d5:f2:b8:
a0:50:17:db:f5:8d:15:56:a2:da:5b:56:3a:ef:83:
a8:11:3a:39:d9:3f:82:35:f2:21:8b:3f:c9:fb:11:
e3:6d:0f:e8:20:7e:c8:1b:bf:f9:81:c9:72:35:ea:
68:20:1b:68:09:96:76:1f:4f:8a:6b:3d:92:22:e7:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:55:0E:A0:C4:CD:3D:51:45:84:75:67:8B:01:22:65:D5:99:7C:2E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/k1UOoMTNPVFFhHVniwEiZdWZfC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.51.0/24
5.105.66.0/24
5.105.169.0-5.105.170.255
5.105.185.0/24
5.105.228.0/24
5.105.242.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:aa:90:22:f3:03:59:91:64:49:25:a9:ab:dc:21:90:70:bb:
00:97:0f:b6:83:3d:f0:a3:b5:e4:94:6c:44:a0:3e:c6:3f:3f:
42:e9:8f:64:53:f5:08:59:da:a5:27:db:fe:06:8c:9f:07:d6:
b3:cd:c2:cf:13:91:ca:18:2a:0e:3b:f4:19:56:a4:e8:36:31:
d5:43:66:8b:a8:56:93:a5:e0:51:4f:9f:16:b3:4a:fe:29:b6:
24:e2:a0:5b:e3:93:32:3d:da:3f:79:39:77:86:14:2c:9f:ea:
7f:99:66:9d:f3:24:32:a0:f2:d3:a5:a1:b7:34:48:5f:a9:4e:
5d:dc:08:15:9e:7f:ce:87:7d:f2:7d:09:fe:11:b5:04:df:bb:
56:27:4c:ac:06:1e:2e:92:c3:c8:9e:c6:29:aa:4c:25:e1:41:
2e:8e:7b:8b:3d:d4:dc:b6:7c:89:01:19:c3:5b:7b:ef:af:0f:
56:72:a0:9c:5c:71:1f:65:cd:ab:bd:fe:d6:96:7d:7e:f4:50:
1e:99:94:9f:8b:d0:37:8e:12:90:0e:e1:fb:7f:2d:24:45:70:
08:65:14:92:92:20:ac:31:09:6f:5b:b1:5e:b8:14:a2:07:1e:
54:b0:e2:d3:03:2c:9a:7d:c4:02:a3:16:36:56:47:ad:32:58:
b3:f3:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:53 2025 by rpki-client