Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/y84NJbPqngBUPeTaImBxp_lzeKc.roa
File: y84NJbPqngBUPeTaImBxp_lzeKc.roa (raw, json)
Hash identifier: qOG7CF1+7v4XdSiubtvqG/pBjbGqhM5mQBARMlK9atk=
Subject key identifier: CB:CE:0D:25:B3:EA:9E:00:54:3D:E4:DA:22:60:71:A7:F9:73:78:A7
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0184F74933E4D6F6E6E543250498FDFD9E1E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/y84NJbPqngBUPeTaImBxp_lzeKc.roa
Signing time: Fri 09 Dec 2022 14:28:00 +0000
ROA not before: Fri 09 Dec 2022 14:28:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7046
IP address blocks: 5.105.151.0/24 maxlen: 24
5.105.148.0/24 maxlen: 24
5.105.150.0/24 maxlen: 24
5.105.149.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.233.0/24 maxlen: 24
5.105.232.0/24 maxlen: 24
5.105.235.0/24 maxlen: 24
5.105.234.0/24 maxlen: 24
5.105.236.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f7:49:33:e4:d6:f6:e6:e5:43:25:04:98:fd:fd:9e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 9 14:28:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbce0d25b3ea9e00543de4da226071a7f97378a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b5:b2:03:c0:b5:01:9e:50:e2:46:0f:27:80:
ea:a4:a3:7d:4d:d5:3a:eb:e1:f2:67:22:54:6a:d8:
c1:fe:5e:78:1e:38:1a:3e:59:0c:78:2d:5d:c4:3e:
dc:f5:11:bc:d4:a8:d9:3c:88:78:91:0a:7a:f3:e0:
06:07:1c:89:6d:fe:1d:49:bd:b8:46:0e:0b:9f:bc:
32:53:6d:69:c9:50:ea:10:ce:76:49:fa:75:58:e5:
99:58:20:ec:a2:e7:12:20:8f:cc:9d:8c:22:8d:17:
0a:fb:4c:95:da:03:a9:96:f8:3f:77:95:63:36:93:
56:40:de:8b:fe:27:69:e6:3e:40:ac:0c:30:96:64:
07:53:11:bf:0f:d3:99:29:91:29:bd:21:7c:79:10:
fc:58:f8:0d:6d:1a:54:50:86:8f:08:48:04:35:a0:
d9:84:b3:e2:82:f4:44:83:6c:37:69:c0:5b:51:05:
7a:f3:fa:26:1d:d6:ff:ca:b4:28:b6:81:92:69:10:
8f:37:0e:66:0b:04:ad:d7:cf:9d:1b:b4:49:c7:b4:
01:01:eb:00:34:ca:f0:54:07:87:6e:2c:11:50:84:
dd:5a:70:6c:8a:0d:74:90:a1:b8:9a:a3:55:3e:e2:
c1:b7:1b:78:b4:2f:9f:f6:19:28:a5:ad:0e:be:78:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CE:0D:25:B3:EA:9E:00:54:3D:E4:DA:22:60:71:A7:F9:73:78:A7
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/y84NJbPqngBUPeTaImBxp_lzeKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.86.0-5.105.89.255
5.105.148.0/22
5.105.174.0-5.105.178.255
5.105.180.0/22
5.105.232.0-5.105.236.255
Signature Algorithm: sha256WithRSAEncryption
ac:2e:84:70:db:3d:e9:c0:cd:42:5f:67:e6:2e:ec:d3:47:af:
20:bb:f0:bb:e8:2d:47:1f:de:27:98:51:ef:37:c6:bf:30:15:
ea:e9:c6:06:05:63:6d:0f:00:37:8b:50:68:a4:84:ca:29:a9:
f8:3c:ef:09:fa:b4:6f:81:33:cc:2f:35:98:eb:8d:62:38:ef:
ab:23:c5:f9:7d:cc:e8:e2:a4:d4:b1:31:22:0d:d1:cd:08:ee:
5d:49:e8:74:fe:e5:16:dc:a6:aa:fe:b1:df:19:39:31:b4:04:
27:4d:ce:d6:ff:9f:b4:ac:d4:74:f8:78:0d:c1:97:64:af:2f:
fa:3d:d5:d9:f8:d2:44:c9:fe:0d:b5:e8:17:1d:cc:ea:a7:31:
28:56:e5:41:79:f9:3c:15:61:32:70:ac:c4:0e:12:9a:d9:08:
6c:fd:1b:d5:d1:c0:0a:df:e3:c1:ec:65:85:c8:e9:39:7f:0b:
1a:7d:94:d2:76:9b:8a:6c:5f:5a:98:57:22:7e:6c:f4:7a:65:
99:3a:15:ae:c6:78:ae:e2:76:cb:9b:06:df:2c:53:1e:47:c7:
55:7c:e3:91:f8:38:fd:15:d5:5e:d6:b5:cc:e9:fb:71:08:c3:
bc:d8:4f:d7:65:20:a6:84:79:e8:c6:2b:50:f0:f7:88:7e:81:
bb:db:4d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:19 2025 by rpki-client