Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vFj4yuH-A7IVRbViYhwFKQzC6qI.roa
File: vFj4yuH-A7IVRbViYhwFKQzC6qI.roa (raw, json)
Hash identifier: GcVo85qUSkjk32YCrKOk30cMl3tGGB23vnJ2QqfZOIg=
Subject key identifier: BC:58:F8:CA:E1:FE:03:B2:15:45:B5:62:62:1C:05:29:0C:C2:EA:A2
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186A69813ADD6BD7FBDA2EA8EE507C98D1E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vFj4yuH-A7IVRbViYhwFKQzC6qI.roa
Signing time: Fri 03 Mar 2023 08:30:29 +0000
ROA not before: Fri 03 Mar 2023 08:30:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.42.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:98:13:ad:d6:bd:7f:bd:a2:ea:8e:e5:07:c9:8d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 3 08:30:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc58f8cae1fe03b21545b562621c05290cc2eaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0d:39:8d:e6:7d:87:56:27:c7:37:29:80:48:
e6:6f:aa:38:5a:ea:de:8c:21:31:27:54:4f:d3:6b:
29:e1:1e:5c:db:e0:07:c8:be:34:2d:51:4b:e3:65:
f3:0c:4a:37:c5:69:f9:ff:65:51:74:c9:e6:75:4d:
e3:72:08:b1:9a:99:e3:9e:f3:f7:09:ce:52:0d:cc:
d1:65:e1:01:55:b1:26:26:3e:3b:85:07:37:09:a4:
9d:4b:34:86:44:42:ad:be:7b:a4:dc:39:d1:d3:3a:
04:d4:0d:e0:e3:c6:6b:cc:85:d7:22:1b:d6:3e:3c:
77:d2:94:c6:f2:84:9a:f5:6f:b3:08:1c:6c:43:19:
d7:04:6b:a8:ae:00:b0:80:1a:0b:8c:5d:12:6c:02:
1b:3f:9c:7f:13:2e:26:70:dc:8b:5f:c9:cb:bf:55:
04:0b:1f:4a:12:04:98:36:1f:61:c3:17:f4:68:17:
2b:60:38:f5:c1:05:58:d6:8b:6b:83:65:65:52:20:
d7:45:25:17:57:1f:12:4c:f1:a8:af:95:75:f8:04:
ac:fa:ff:db:e7:f2:2d:03:8c:02:ec:b3:08:20:5b:
d9:dc:df:8b:9f:3c:db:5f:76:3a:9b:a7:4e:d3:57:
6c:13:c1:4d:a6:a9:bf:c8:60:47:6b:16:99:49:a5:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:58:F8:CA:E1:FE:03:B2:15:45:B5:62:62:1C:05:29:0C:C2:EA:A2
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vFj4yuH-A7IVRbViYhwFKQzC6qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.19.0/24
5.105.32.0/24
5.105.42.0/24
5.105.63.0/24
5.105.68.0/23
5.105.80.0/24
5.105.112.0/22
5.105.124.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.226.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
36:42:22:d9:1d:6f:d8:1c:54:e4:f2:b5:96:c2:c4:e0:93:92:
8c:22:98:12:ca:5b:94:a8:38:b5:ee:f2:e9:e7:59:ef:70:f7:
2a:d1:b4:5b:74:38:d5:e3:19:79:27:1f:9f:ec:65:64:fa:22:
88:e2:d5:45:77:1e:74:ca:44:97:40:e7:8e:9a:95:1e:b4:4e:
cd:88:fc:05:54:d7:e6:2d:ed:c6:b0:be:44:43:2e:b9:87:a9:
ae:5e:51:38:17:48:32:aa:54:55:42:fd:e1:cc:bf:14:f1:ab:
05:96:7c:1e:83:df:d5:9f:fd:91:17:9d:45:4d:e5:1e:d0:a7:
e2:2b:c6:55:d2:12:f9:89:d3:92:d1:37:7d:91:4f:c7:1f:91:
b9:e5:94:25:70:60:47:e3:8e:4e:98:94:31:1c:95:e8:94:c6:
1a:27:41:f9:45:99:d6:4f:93:65:67:1b:fd:e4:aa:48:00:48:
1b:c1:22:be:2d:17:6e:d7:33:40:6a:32:58:5a:94:3c:43:89:
5f:3c:88:41:97:52:47:1b:e5:bd:95:18:d3:99:ad:c4:4b:81:
69:7f:28:47:62:e0:8f:75:24:39:3f:af:55:0c:c2:e5:70:9e:
d4:09:df:a7:1d:c2:a6:6b:ce:ae:3e:42:67:fe:45:79:b6:b9:
48:9d:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:52:37 2025 by rpki-client