Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/xtGq6EWe4w1thqqBsfkV_mNKTFg.roa
File: xtGq6EWe4w1thqqBsfkV_mNKTFg.roa (raw, json)
Hash identifier: /16rG4VX56k2M2+92ShwMgYRXy8vi9tPA7mbjn1B5B0=
Subject key identifier: C6:D1:AA:E8:45:9E:E3:0D:6D:86:AA:81:B1:F9:15:FE:63:4A:4C:58
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018401499D280D16FBE31D74AEDBC0B5362B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/xtGq6EWe4w1thqqBsfkV_mNKTFg.roa
Signing time: Sat 22 Oct 2022 20:01:52 +0000
ROA not before: Sat 22 Oct 2022 20:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:01:49:9d:28:0d:16:fb:e3:1d:74:ae:db:c0:b5:36:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 22 20:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6d1aae8459ee30d6d86aa81b1f915fe634a4c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:94:5c:fd:d5:1a:c6:b0:4e:80:7b:57:d1:
73:c2:92:4e:ec:fb:f4:6a:85:37:02:09:a9:58:1a:
a0:48:fe:55:35:74:6b:d5:08:82:f7:f0:ec:9d:a9:
41:b5:d4:d1:c7:d7:81:5c:a3:c8:05:30:2f:81:70:
1f:a3:f5:b2:7f:a2:85:04:ba:c2:c8:c3:2b:ba:23:
86:fd:61:5a:91:1e:4d:4b:67:fa:dd:03:6d:cc:c3:
72:c3:6d:94:10:02:db:2f:ea:da:b7:ef:b0:d8:4f:
82:ce:cc:d7:ba:fd:d7:ce:74:b6:7f:db:7e:9f:c1:
38:76:d7:e9:88:76:5b:da:a5:f2:f0:18:71:72:64:
9c:a1:8d:10:cf:f6:6b:13:64:e5:53:61:c2:70:ff:
da:94:21:7f:8f:2e:b5:3f:e5:f3:3a:48:22:75:e3:
d1:73:d1:67:f3:6c:9a:b1:db:98:0c:e8:89:e1:80:
10:aa:42:3c:8b:7e:76:ab:b8:23:cc:4f:f8:23:51:
09:8b:32:fe:ac:23:3d:dd:5b:6b:09:d9:f0:67:af:
ee:cd:e2:97:43:be:96:7e:82:21:86:65:ee:fe:51:
8d:4a:a7:64:02:75:97:c3:a3:b9:9a:36:7d:98:37:
98:cf:f5:bb:e1:55:91:09:b7:68:70:b4:72:0f:ac:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D1:AA:E8:45:9E:E3:0D:6D:86:AA:81:B1:F9:15:FE:63:4A:4C:58
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/xtGq6EWe4w1thqqBsfkV_mNKTFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.184.0/24
Signature Algorithm: sha256WithRSAEncryption
46:df:f6:88:56:66:2d:e9:35:87:64:17:63:b5:f2:8c:c1:88:
7c:3a:32:30:af:2e:7f:a4:88:87:ac:54:5e:a7:5a:a4:45:1b:
3b:fc:c8:22:24:4c:04:95:40:73:9f:af:7d:65:1c:7c:d0:67:
14:52:47:33:6e:34:c6:ff:1e:04:36:5f:38:31:f7:ab:aa:8d:
3b:6e:ec:b3:6b:16:95:c1:3b:32:51:e8:25:d6:12:ae:9b:de:
4f:6c:2c:f9:42:f4:77:8f:8f:ef:1b:b4:82:c5:56:a1:6e:48:
dd:e8:93:99:fe:3d:4c:bf:0f:95:89:f3:fb:7e:c4:97:5d:3e:
a9:7e:39:45:1d:98:fc:c6:73:a2:4c:f7:be:ca:e1:bc:a6:a2:
b1:8d:4a:47:b9:cc:73:52:13:47:bf:07:cf:9d:a7:04:83:3c:
86:4a:0e:fd:cf:ca:59:ee:b8:ee:09:d5:d9:fb:91:41:f2:08:
1d:09:85:e5:55:eb:f0:27:bb:57:e7:59:76:c6:f9:b3:2b:6d:
a7:a6:bf:1f:9b:01:a6:9d:54:7b:c0:ec:4a:74:8e:22:dd:8c:
c7:67:98:d1:2b:a5:9c:c6:62:60:59:22:b6:10:91:c7:02:d0:
c9:ad:50:d4:e5:fb:15:7a:23:43:a9:0b:0c:2a:05:eb:5c:43:
7d:a8:ca:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQBSZ0oDRb74x10rtvAtTYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjIxMDIyMjAwMTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmQxYWFlODQ1OWVlMzBkNmQ4NmFhODFiMWY5MTVmZTYzNGE0YzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKyUXP3VGsawToB7V9FzwpJO7Pv0
aoU3AgmpWBqgSP5VNXRr1QiC9/DsnalBtdTRx9eBXKPIBTAvgXAfo/Wyf6KFBLrC
yMMruiOG/WFakR5NS2f63QNtzMNyw22UEALbL+rat++w2E+CzszXuv3XznS2f9t+
n8E4dtfpiHZb2qXy8BhxcmScoY0Qz/ZrE2TlU2HCcP/alCF/jy61P+XzOkgidePR
c9Fn82yasduYDOiJ4YAQqkI8i352q7gjzE/4I1EJizL+rCM93VtrCdnwZ6/uzeKX
Q76WfoIhhmXu/lGNSqdkAnWXw6O5mjZ9mDeYz/W74VWRCbdocLRyD6wv9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMbRquhFnuMNbYaqgbH5Ff5jSkxYMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEveHRHcTZFV2U0dzF0aHFxQnNma1ZfbU5LVEZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWm4MA0G
CSqGSIb3DQEBCwUAA4IBAQBG3/aIVmYt6TWHZBdjtfKMwYh8OjIwry5/pIiHrFRe
p1qkRRs7/MgiJEwElUBzn699ZRx80GcUUkczbjTG/x4ENl84Mferqo07buyzaxaV
wTsyUegl1hKum95PbCz5QvR3j4/vG7SCxVahbkjd6JOZ/j1Mvw+VifP7fsSXXT6p
fjlFHZj8xnOiTPe+yuG8pqKxjUpHucxzUhNHvwfPnacEgzyGSg79z8pZ7rjuCdXZ
+5FB8ggdCYXlVevwJ7tX51l2xvmzK22npr8fmwGmnVR7wOxKdI4i3YzHZ5jRK6Wc
xmJgWSK2EJHHAtDJrVDU5fsVeiNDqQsMKgXrXEN9qMqY
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:50:07 2025 by rpki-client