Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/kZZpvJHinCQgsaFnl6qXRiPh5J8.roa
File: kZZpvJHinCQgsaFnl6qXRiPh5J8.roa (raw, json)
Hash identifier: i7FAC9FvRGFXveWWA++rj92PRUxLPakcsUbQoQY8Gsk=
Subject key identifier: 91:96:69:BC:91:E2:9C:24:20:B1:A1:67:97:AA:97:46:23:E1:E4:9F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01874C426D5E5D1AD27A80AF6FCD4EB5C54C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/kZZpvJHinCQgsaFnl6qXRiPh5J8.roa
Signing time: Tue 04 Apr 2023 12:33:54 +0000
ROA not before: Tue 04 Apr 2023 12:33:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202218
IP address blocks: 5.105.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:42:6d:5e:5d:1a:d2:7a:80:af:6f:cd:4e:b5:c5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 4 12:33:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=919669bc91e29c2420b1a16797aa974623e1e49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:2c:17:39:93:4f:39:5c:a3:3e:97:62:cf:
6c:55:04:64:31:0f:c4:ea:60:8d:e6:b2:99:e2:6e:
ca:0f:47:84:2d:46:56:7c:30:b8:89:72:c7:bd:20:
ad:64:cf:1f:ca:52:e0:36:20:03:b2:0e:e5:c8:f7:
3a:35:07:30:9a:41:55:59:39:1b:68:ba:dc:5d:5c:
33:9b:b1:14:c5:7d:24:74:df:7c:40:6b:a6:6c:1e:
e0:f8:c0:47:66:03:a4:26:b0:8e:87:8a:e0:9c:4a:
dc:70:33:6b:f9:2e:69:be:1d:a3:5c:cb:5b:ea:1b:
73:af:94:95:7e:06:2d:49:41:af:b2:18:67:55:94:
8f:86:52:95:93:66:36:0e:e4:98:31:67:6f:ee:c4:
98:4a:dd:b0:cf:5a:65:34:96:2d:90:ea:22:3e:22:
3c:27:bf:e5:26:84:ce:93:ea:70:63:26:29:2e:2a:
c8:ce:6c:a6:8c:f0:ea:8d:26:49:01:c3:88:4e:7c:
4f:c3:a2:cc:7e:bc:a7:9b:6f:bb:75:20:be:f6:e6:
bf:b5:e6:44:ea:20:99:81:4f:43:34:16:bf:9b:ae:
bc:e9:43:1a:a8:0c:71:20:3d:b7:71:f8:5a:9f:99:
cf:c5:3e:1d:c9:fa:3e:cc:79:d1:e8:48:ad:e0:7c:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:96:69:BC:91:E2:9C:24:20:B1:A1:67:97:AA:97:46:23:E1:E4:9F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/kZZpvJHinCQgsaFnl6qXRiPh5J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.51.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:67:8a:08:76:f9:59:e2:a1:03:39:64:1e:a1:12:18:7a:0c:
97:54:d4:0a:ae:72:24:33:85:93:9b:de:a6:dd:a6:8c:2f:e4:
81:3f:1a:e9:c9:e1:48:e6:86:02:b2:a1:39:60:9b:fe:dd:82:
f5:7e:5e:4a:d6:da:42:58:60:39:6a:21:12:60:74:60:fd:e7:
26:ba:48:f0:35:c9:98:cb:c1:9b:f1:21:6a:63:9e:40:a8:43:
9d:41:19:df:d3:5a:1f:0b:75:cc:f9:70:dd:16:c8:4f:b0:db:
13:90:4f:b3:c0:46:49:8d:df:6b:74:83:a9:15:bc:b8:d8:de:
7a:bd:74:ed:bc:4e:d7:dc:45:71:a1:0b:10:81:ce:c6:82:29:
2c:60:0e:8f:fb:5c:6a:9e:4a:77:36:72:e9:7d:59:1f:fe:c2:
1d:ec:5d:e3:dd:bf:14:72:70:39:3e:41:a9:6b:95:3d:12:4f:
67:59:0d:c4:6f:ee:a1:c5:6d:9c:ef:9c:ea:0d:fd:4a:ac:39:
a1:77:36:7f:55:78:6e:77:cb:26:a7:24:d9:96:71:03:77:04:
80:78:d2:d1:3e:f4:fc:90:f6:f2:06:06:18:18:de:01:15:be:
8a:7f:2f:08:90:52:f7:57:cc:76:e3:7a:db:3f:1f:ea:5c:7e:
e2:60:01:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:46 2025 by rpki-client