Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wilyYgGruttM7TBPhRKMiO76XYc.roa
File: wilyYgGruttM7TBPhRKMiO76XYc.roa (raw, json)
Hash identifier: 0Q2te/hqKIY1OXnafW/azK4TU61Atf3AQdLzB7DvcdE=
Subject key identifier: C2:29:72:62:01:AB:BA:DB:4C:ED:30:4F:85:12:8C:88:EE:FA:5D:87
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018828B400923E05B2FFA5883E4F39D820A1
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wilyYgGruttM7TBPhRKMiO76XYc.roa
Signing time: Wed 17 May 2023 07:54:25 +0000
ROA not before: Wed 17 May 2023 07:54:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 5.105.123.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:b4:00:92:3e:05:b2:ff:a5:88:3e:4f:39:d8:20:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 17 07:54:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c229726201abbadb4ced304f85128c88eefa5d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:74:f8:96:c7:36:f2:32:0e:e1:d0:31:79:cb:
e0:a8:f9:2a:de:c7:c0:52:59:3b:7d:40:10:18:71:
70:4e:a2:5c:ad:aa:02:cd:36:59:1f:5b:3a:91:07:
bb:65:04:cd:13:2c:5f:7f:07:4f:f2:99:c7:06:c7:
46:6d:17:0e:d4:a3:59:49:b9:d5:84:fc:70:70:10:
29:10:41:e9:c5:2c:36:f3:2c:d4:2a:1f:f5:b6:fb:
46:eb:1f:34:ff:37:0e:da:36:ba:a2:22:e2:65:dd:
f2:b9:70:68:67:52:fb:42:d1:7a:6c:d8:e0:48:73:
8f:af:b2:fd:ca:0f:e9:9d:8a:f6:a8:4f:fc:3d:db:
e9:a5:44:cd:cc:d3:d5:9c:66:c7:b9:b0:0a:a7:d0:
9b:b2:e3:d2:e9:f2:9d:e6:cc:21:ec:8d:a1:01:c9:
8c:e2:be:17:36:0c:a8:c7:5b:cf:ff:88:ea:dc:f4:
2a:d9:a6:50:49:0c:d2:5f:d4:47:73:c9:59:f5:cc:
22:14:88:37:d9:c7:ab:27:aa:3b:65:6a:84:f7:e8:
15:d4:c9:d2:52:74:09:10:96:54:2b:55:50:3f:24:
36:4f:d9:1d:60:26:f6:bf:33:75:b5:8e:52:3c:6d:
0f:76:a9:51:64:be:e1:14:07:5b:da:49:9e:a6:51:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:29:72:62:01:AB:BA:DB:4C:ED:30:4F:85:12:8C:88:EE:FA:5D:87
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wilyYgGruttM7TBPhRKMiO76XYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.59.0/24
5.105.80.0/24
5.105.123.0/24
5.105.226.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:04:09:c6:e7:0f:6a:ee:6a:fb:6b:7c:97:29:12:68:f9:10:
7d:b2:65:d6:b2:d7:e6:bb:c5:1a:91:02:60:f3:68:86:e2:80:
1b:b8:5b:e8:0a:59:a5:39:82:d3:80:9d:c9:dd:79:37:5d:3a:
ff:b7:0e:ac:db:b2:25:97:71:3e:a0:0b:49:16:da:81:0a:7a:
8f:91:0e:e4:65:f2:64:85:2c:43:58:76:f8:0e:af:c3:08:0e:
74:3e:3b:a9:58:95:08:43:f1:98:6c:4b:6e:b6:80:93:83:c4:
9f:01:2a:b3:e1:b9:cc:32:23:0b:ac:4a:76:e9:ac:f4:58:89:
6e:a9:90:ed:7e:1c:4a:44:8a:c0:49:3a:ee:96:45:2d:07:b8:
90:79:2c:df:49:d0:c9:f4:c0:5a:fc:47:9e:f9:17:84:3d:d9:
ef:4f:66:89:42:bd:d3:f5:74:1a:6b:f4:c0:95:1e:b9:93:60:
2d:14:71:af:5b:b2:31:84:b5:7a:a5:5b:4d:4a:6a:fc:5f:af:
ba:75:62:83:a6:29:69:1f:81:cf:16:90:03:4c:47:ab:39:fb:
87:d7:42:dc:b9:d5:e8:56:c0:d2:23:55:6c:4d:d8:b2:90:37:
58:3b:95:86:71:85:af:7c:f5:5a:bb:30:a0:52:7e:e4:e0:3f:
09:c2:33:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:14 2025 by rpki-client