Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/tnae0wTxfhM432HrbMFTJlBI1eA.roa
File: tnae0wTxfhM432HrbMFTJlBI1eA.roa (raw, json)
Hash identifier: bXcltOI38rH81mWBf7PSARc0Mac4ajSGJbUmrsLhM6w=
Subject key identifier: B6:76:9E:D3:04:F1:7E:13:38:DF:61:EB:6C:C1:53:26:50:48:D5:E0
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01894A546278E4CB79DC16BF23CDBE2FBA72
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/tnae0wTxfhM432HrbMFTJlBI1eA.roa
Signing time: Wed 12 Jul 2023 13:39:51 +0000
ROA not before: Wed 12 Jul 2023 13:39:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:54:62:78:e4:cb:79:dc:16:bf:23:cd:be:2f:ba:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 12 13:39:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6769ed304f17e1338df61eb6cc153265048d5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:0a:27:1a:41:22:41:29:9f:dc:f2:25:e6:
9a:74:df:6b:fa:6d:1c:66:59:67:74:16:b3:6b:1b:
bf:5d:5b:de:93:a4:80:62:98:ce:52:4e:12:c4:ae:
30:91:d3:1f:34:e0:6b:ac:c3:39:74:62:2e:cd:1e:
c7:c4:79:12:95:d1:c5:e0:f6:ec:73:35:3c:83:94:
a9:c5:b0:12:d6:c6:57:89:e4:e8:fb:df:d5:90:70:
71:7c:5a:ec:7f:7b:e0:47:31:b1:a5:ca:ef:39:f4:
a9:57:c8:97:a3:fc:0b:0b:b3:11:be:c2:f3:17:3e:
33:0a:ba:85:43:b6:84:aa:37:9a:cf:14:f7:3c:28:
32:83:7c:5a:ad:57:29:f9:93:1e:f1:fc:60:10:07:
26:02:72:cb:0d:56:cd:79:88:77:ee:62:07:4e:87:
e5:65:85:a1:c6:bf:c3:ca:c7:fd:00:97:93:31:87:
8e:81:7b:f5:2e:4f:c0:7f:75:ef:dd:ff:07:ff:12:
da:ae:d8:e9:3f:14:ed:92:97:75:cf:5e:3d:af:85:
1d:1f:f4:df:d1:d9:fd:ea:56:8e:d4:1c:ce:46:ed:
d0:18:eb:c2:4c:6c:68:97:53:7f:8b:a6:26:be:f5:
b3:f5:d3:1e:d2:3d:0b:53:7d:ce:13:8b:60:36:fc:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:76:9E:D3:04:F1:7E:13:38:DF:61:EB:6C:C1:53:26:50:48:D5:E0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/tnae0wTxfhM432HrbMFTJlBI1eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.7.0/24
5.105.18.0/24
5.105.21.0/24
5.105.36.0/23
5.105.45.0/24
5.105.47.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.124.0/24
5.105.127.0/24
5.105.139.0/24
5.105.157.0/24
5.105.162.0/24
5.105.166.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0-5.105.200.255
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
90:19:34:26:13:11:46:b0:33:9a:d5:93:fa:ec:7e:2c:cd:a4:
13:ff:a9:82:e4:ad:6b:55:aa:61:9f:c0:70:77:93:e2:e0:db:
af:ad:a2:1d:0d:d4:9c:22:91:5e:c6:04:01:f7:25:9a:67:a2:
53:56:b2:14:88:84:29:32:0b:78:1d:36:6f:c4:6f:88:6b:22:
4e:99:e3:51:4c:8d:57:c3:cb:71:2a:44:60:f7:8a:0b:ad:45:
5f:f6:33:44:3b:8b:62:41:47:95:79:ec:44:8f:ca:0c:2f:1e:
5a:24:ed:25:47:47:03:66:8c:d4:da:7c:97:41:f6:ca:42:ec:
0e:7b:87:85:e4:48:bf:dd:b5:ba:64:b9:73:23:88:8f:8e:53:
33:36:a1:e0:3d:ed:ce:f5:5f:f5:0f:aa:0d:13:b0:eb:14:5c:
f5:40:c9:b0:63:7c:92:60:91:7c:7f:34:31:bb:28:88:d0:9b:
61:46:6c:43:b5:af:d0:26:72:dd:7b:2f:ec:e9:21:b3:51:b1:
aa:ea:a7:f0:95:8d:c9:05:c4:f6:a6:e4:f5:b2:1b:45:af:bc:
1a:98:44:e3:68:9b:d5:76:f3:42:75:9a:ce:71:9a:8c:37:22:
cf:5a:33:95:75:ea:a0:14:f9:9c:83:2b:e4:18:e8:cc:54:58:
d4:46:73:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:28 2025 by rpki-client