Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vPnf7eGz0jm8D-_UuoQf4QmO8Pc.roa
File: vPnf7eGz0jm8D-_UuoQf4QmO8Pc.roa (raw, json)
Hash identifier: ghxVrPvECfwh9P4Tk1JkTO6d8kUlM22U5CcP94Iv1ko=
Subject key identifier: BC:F9:DF:ED:E1:B3:D2:39:BC:0F:EF:D4:BA:84:1F:E1:09:8E:F0:F7
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01841AAEC2E463C36957FF882A3964C1B5A1
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vPnf7eGz0jm8D-_UuoQf4QmO8Pc.roa
Signing time: Thu 27 Oct 2022 18:22:51 +0000
ROA not before: Thu 27 Oct 2022 18:22:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137409
IP address blocks: 5.105.243.0/24 maxlen: 24
5.105.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1a:ae:c2:e4:63:c3:69:57:ff:88:2a:39:64:c1:b5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 27 18:22:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcf9dfede1b3d239bc0fefd4ba841fe1098ef0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:65:ed:5b:e6:f9:75:8a:c9:8d:01:5b:fa:
c7:d3:01:cb:b8:db:94:e2:e5:7d:37:76:ee:15:63:
e9:0b:a9:05:00:1a:2f:e1:40:f3:3d:f4:dc:fe:f7:
cd:54:a5:a7:54:d0:5b:d8:b7:fd:58:4d:5a:4e:31:
6e:f1:73:d1:c0:b3:1a:e3:f1:bb:3f:0d:46:39:45:
2a:41:af:d1:43:b0:28:7d:f8:73:65:2d:72:37:bc:
33:e3:cb:9b:0f:db:4e:94:dc:5c:6f:76:2b:cc:80:
b2:7a:c0:25:cc:68:e3:02:a9:2f:43:63:6a:43:77:
ca:8f:e1:18:e9:f3:eb:cc:8d:ab:bb:3b:74:4e:2d:
41:5c:2c:ba:65:4d:32:5f:6f:6d:c0:3e:73:fc:c1:
fc:79:89:02:51:8a:d8:c1:58:09:13:7a:81:11:4e:
a8:b1:ed:54:e0:a8:2d:9b:fd:16:ce:16:e4:50:b0:
f3:28:34:41:ca:8b:5d:73:41:56:63:9c:bf:b8:38:
53:33:ba:50:9f:55:af:91:c3:64:b7:6b:d6:30:30:
96:a1:13:84:7d:69:18:75:b7:61:f3:85:72:65:22:
3d:10:d8:d4:fe:8a:c3:08:69:06:f1:c9:87:29:54:
b6:a4:a2:14:8b:a5:3a:fb:eb:0c:c7:c4:28:f1:3c:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F9:DF:ED:E1:B3:D2:39:BC:0F:EF:D4:BA:84:1F:E1:09:8E:F0:F7
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vPnf7eGz0jm8D-_UuoQf4QmO8Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.243.0/24
5.105.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:70:e3:81:4e:e2:09:10:60:e1:c0:20:88:66:3f:99:f4:79:
f3:3c:89:15:22:63:a8:ac:e1:52:3f:02:b4:73:86:87:0b:85:
cd:80:cd:da:7d:71:ef:e8:75:01:8e:14:ae:65:1d:b9:85:98:
e2:ad:4f:41:f8:9e:a0:d8:c7:b4:d8:0b:bf:b3:bd:4f:d3:e3:
0a:45:26:bd:2e:88:ed:44:94:87:21:96:55:e8:4e:c1:60:78:
77:aa:a2:1f:2e:1d:12:c8:33:b1:7b:d8:d5:c2:7f:cd:37:b4:
22:15:42:97:e8:f6:f9:2b:da:dd:1f:78:31:5d:9b:74:6e:50:
6c:5e:85:cf:02:74:45:50:49:8c:53:f4:6a:a7:d3:e0:76:4a:
c9:1a:08:c7:b9:bb:2c:75:0d:bc:cb:db:72:d9:c1:dc:3f:fc:
37:9d:97:17:11:35:41:ee:7c:e7:73:46:d4:3f:95:cd:9a:6b:
fd:12:22:c7:80:ac:fe:3e:61:1c:f5:c7:84:39:d1:d8:41:04:
97:b8:3f:70:3a:6a:c5:53:35:8e:9c:e5:37:f0:05:f8:f2:60:
78:7d:42:96:09:1b:5b:af:75:19:df:32:ce:25:8b:08:d4:15:
f4:ff:94:3b:f0:57:e0:10:6b:bc:9f:bb:33:ae:4d:7c:fb:1e:
6d:ce:28:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:09 2025 by rpki-client