Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/np9AporBBXY3Yq3QNNZgdHYSYAc.roa
File: np9AporBBXY3Yq3QNNZgdHYSYAc.roa (raw, json)
Hash identifier: zY2FQ3udUqxXWbldrCilsE1F2gwoGHWAlWGn/CHP2Sk=
Subject key identifier: 9E:9F:40:A6:8A:C1:05:76:37:62:AD:D0:34:D6:60:74:76:12:60:07
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185F304106DD5BAAE35B387C4B1B8748359
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/np9AporBBXY3Yq3QNNZgdHYSYAc.roa
Signing time: Fri 27 Jan 2023 11:36:47 +0000
ROA not before: Fri 27 Jan 2023 11:36:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.130.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:04:10:6d:d5:ba:ae:35:b3:87:c4:b1:b8:74:83:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 27 11:36:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e9f40a68ac105763762add034d6607476126007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d3:18:3c:d7:96:42:f2:5f:10:65:31:7d:67:
9a:68:9c:f6:d5:d7:e3:47:ae:91:d8:cc:60:74:c9:
81:08:11:e4:37:c8:3d:15:e4:ad:d2:01:1e:a6:a8:
82:2c:55:3d:91:19:a5:f8:a6:e7:a1:36:44:e9:3b:
a4:77:ee:0b:8c:4e:5f:88:0a:d0:7f:ab:7e:55:22:
7c:28:da:1f:0e:fa:83:9a:c2:d5:5f:22:c2:1a:b4:
23:61:2a:6f:8c:3a:81:19:dd:43:4d:a4:87:37:bd:
5c:8a:32:53:af:b5:59:f8:bb:22:ef:ef:f8:40:04:
5e:5a:3a:08:7c:12:9b:28:51:51:0c:56:7d:b9:16:
8c:b1:92:17:5e:5d:5b:2a:c1:1b:88:cc:bf:e0:38:
93:07:8b:e8:c2:a7:3a:ae:aa:21:a5:0e:92:ee:bb:
5c:ea:23:9d:a9:51:f8:84:cc:17:19:92:24:af:7a:
a1:67:24:0c:43:ca:d2:c9:71:a8:89:41:89:87:73:
00:13:9a:6a:a7:8f:47:75:9d:3b:97:4a:2b:1f:ff:
b8:dc:59:15:4b:b7:02:93:56:f3:58:ba:b2:0f:31:
dd:53:37:9e:e1:62:7c:b1:44:2d:73:e7:c4:18:bd:
b5:f0:b0:15:81:be:67:73:c4:35:15:9f:d5:1e:51:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9F:40:A6:8A:C1:05:76:37:62:AD:D0:34:D6:60:74:76:12:60:07
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/np9AporBBXY3Yq3QNNZgdHYSYAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.7.0/24
5.105.30.0-5.105.33.255
5.105.38.0/23
5.105.63.0/24
5.105.96.0/24
5.105.130.0/24
5.105.136.0/24
5.105.184.0/24
5.105.200.0/24
5.105.215.0/24
5.105.226.0/24
5.105.247.0/24
Signature Algorithm: sha256WithRSAEncryption
04:5b:7e:a0:62:b4:ff:de:f3:d6:18:84:8b:37:d7:1f:a3:bc:
be:b2:5c:8a:e7:4c:50:15:f6:05:77:2b:b1:8e:fc:ab:64:c2:
55:46:15:6a:8b:78:11:e5:00:bd:b5:be:9a:5e:77:f1:29:2e:
5a:d8:a4:ce:e4:dc:94:dc:bf:44:7a:25:2e:a6:2a:6d:e3:f7:
b5:34:a3:0a:77:f3:c2:0b:0c:27:bd:0e:6e:3e:02:b4:f5:31:
e5:a4:1d:0a:7d:b8:dd:dd:69:a7:f5:bc:ac:7e:c5:c2:28:6a:
ed:75:51:ba:9f:38:f2:d6:ad:25:73:93:92:63:e9:d7:1d:ce:
b5:16:c3:a7:11:b9:8f:1a:f5:27:2a:16:c5:49:13:f5:5e:7d:
0c:02:15:ba:3d:07:db:d2:20:51:d7:0d:77:5f:ab:36:27:fc:
9f:40:c1:c1:49:4b:9d:70:77:42:09:c2:5b:1a:5c:60:a0:be:
57:0b:ef:45:07:7c:e8:d1:a8:40:81:33:48:fc:76:93:48:56:
64:94:cf:48:df:68:b4:84:91:d1:92:18:30:3f:a6:f1:6d:bc:
db:0b:85:63:9c:35:0b:22:2a:26:e3:22:8f:10:a1:e4:17:92:
bc:fe:da:ae:9c:a0:67:89:d1:86:4a:e2:bf:e2:e8:62:d8:d9:
b3:38:51:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:27 2025 by rpki-client