Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qCkeaU7gopzXuGAx_thXJgqjre0.roa
File: qCkeaU7gopzXuGAx_thXJgqjre0.roa (raw, json)
Hash identifier: w82/8ukF+I8wrDIad44uQAoTn8XPANvI9D/PHrYacEA=
Subject key identifier: A8:29:1E:69:4E:E0:A2:9C:D7:B8:60:31:FE:D8:57:26:0A:A3:AD:ED
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187C6BD368094D2C08B78A4F96C71E675CA
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qCkeaU7gopzXuGAx_thXJgqjre0.roa
Signing time: Fri 28 Apr 2023 07:21:41 +0000
ROA not before: Fri 28 Apr 2023 07:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.85.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.23.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.44.0/22 maxlen: 22
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c6:bd:36:80:94:d2:c0:8b:78:a4:f9:6c:71:e6:75:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 28 07:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8291e694ee0a29cd7b86031fed857260aa3aded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:9f:f4:8b:26:56:89:cb:4d:cd:d7:b9:08:
cc:2d:5d:5b:ae:48:04:f1:ea:db:5e:17:22:06:b2:
ff:10:1f:63:a0:d5:7d:be:f9:4d:b1:83:69:ab:19:
0f:22:9a:41:a8:f6:03:8d:b3:0d:0c:6f:ca:b0:d2:
b0:4b:25:a2:b4:d3:84:12:c2:9f:56:d6:9b:5d:ca:
40:13:f8:7e:fd:5c:0a:bf:5b:e6:48:39:87:3b:9e:
c3:be:c7:46:15:ae:59:28:85:c2:cb:d6:1f:61:b7:
56:76:56:03:de:7b:c2:d7:1e:2b:fd:d0:bc:54:e6:
03:10:28:d8:3a:6c:d5:bd:f9:11:5f:43:e4:e2:81:
5b:bf:7e:36:5d:a6:43:9b:8f:39:7c:2b:06:c0:af:
b6:dd:a0:4b:d6:19:38:78:5f:e6:7a:4c:aa:ff:86:
91:98:6b:dc:19:e3:2b:06:ec:7d:78:52:1f:71:30:
4f:8e:29:8f:6b:61:1e:05:5d:8c:45:b2:74:e3:b6:
65:c5:1f:6b:b7:d8:1b:c9:41:b6:2f:e0:bd:12:38:
d2:34:85:26:96:0b:5d:4f:1e:f9:d1:df:05:2c:e9:
9a:19:06:fb:a9:cd:be:46:7a:5b:9e:a9:16:49:24:
43:d5:b2:51:94:ae:5a:4b:50:08:e6:d0:2e:f8:74:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:29:1E:69:4E:E0:A2:9C:D7:B8:60:31:FE:D8:57:26:0A:A3:AD:ED
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qCkeaU7gopzXuGAx_thXJgqjre0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.23.0/24
5.105.31.0/24
5.105.34.0/24
5.105.44.0/22
5.105.64.0/24
5.105.68.0/23
5.105.76.0/23
5.105.85.0/24
5.105.94.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1f:1b:ab:e6:70:f2:53:cd:fd:9a:a1:9b:cd:a7:9a:7e:db:
4a:c4:42:01:aa:0d:50:bc:8f:d1:27:77:26:51:14:d0:fa:3d:
f1:30:06:f4:b2:a6:b1:d1:54:96:5f:99:aa:52:12:73:fc:72:
20:b5:42:ae:5d:73:d4:b1:ad:7f:17:97:16:61:bd:ca:52:43:
31:30:5f:49:17:24:72:4e:f9:e4:e0:4d:b7:3e:53:cd:cd:88:
7d:b6:58:c7:61:e5:31:ac:2b:53:e9:37:b1:82:e2:be:2b:bc:
db:b0:4a:6d:bf:e0:e9:ad:ab:14:ab:43:29:a2:0b:af:1e:ee:
35:45:26:31:81:29:74:74:eb:36:ad:09:b3:bf:2f:68:dc:f5:
53:6b:22:5c:ac:55:75:91:1c:97:61:26:ea:13:6a:19:34:e8:
65:1f:ec:89:16:e1:3b:05:05:36:ff:a1:76:d7:89:45:6b:ac:
a7:da:bf:ae:51:a1:4c:4f:3f:62:48:ab:1f:f3:8b:09:f4:f8:
e9:b4:65:69:c2:5c:91:b4:55:e6:8a:cf:e2:fa:8a:38:26:57:
15:b0:2a:9d:5a:63:f8:37:0c:15:f3:58:24:9a:c4:47:2f:37:
98:09:6e:b3:50:5a:05:10:06:63:92:dd:fc:3f:29:de:05:d3:
f8:05:88:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:05 2025 by rpki-client