Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-IjNfoWzPiShtEZeUb26ETJ35u0.roa
File: 1-IjNfoWzPiShtEZeUb26ETJ35u0.roa (raw, json)
Hash identifier: Q0gJiwKYvTWvDuQD1IHcd7I3jdKH8Y52kETrUCkTowI=
Subject key identifier: F8:88:CD:7E:85:B3:3E:24:A1:B4:46:5E:51:BD:BA:11:32:77:E6:ED
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188ED0F813B3244F9B370C98E88F3FAD621
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-IjNfoWzPiShtEZeUb26ETJ35u0.roa
Signing time: Sat 24 Jun 2023 10:59:56 +0000
ROA not before: Sat 24 Jun 2023 10:59:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ed:0f:81:3b:32:44:f9:b3:70:c9:8e:88:f3:fa:d6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 24 10:59:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f888cd7e85b33e24a1b4465e51bdba113277e6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a5:0f:a9:08:2e:c2:38:6d:20:52:9e:b2:2c:
8e:7c:31:35:3a:52:ce:93:62:6a:30:2d:ed:d3:37:
ea:f7:02:16:20:7d:fc:61:e4:3c:11:45:31:08:71:
a2:cb:bb:7f:e6:72:78:73:d5:60:20:c7:64:f1:92:
a1:db:79:e9:86:e0:6c:59:9e:2e:0e:64:89:fa:1f:
a9:e7:27:2f:e3:03:83:17:ac:66:43:17:4d:16:13:
1e:59:2e:66:7d:97:43:43:43:c3:4f:5b:c4:9a:fb:
32:0b:d0:31:d1:07:b5:54:b5:ef:f2:b3:3f:83:ea:
cf:8b:75:86:3e:15:6b:ce:27:0a:05:ff:99:db:89:
e6:7c:a9:97:df:51:0c:b7:29:56:f4:e8:c8:c9:05:
b0:f6:2a:85:b4:ca:0c:fe:18:f2:eb:27:d5:c9:4b:
2f:ac:44:50:f7:96:f2:57:f1:23:7d:e0:6f:4f:0b:
dc:6b:49:84:90:b1:36:4a:4d:f0:75:b1:f4:71:91:
d9:00:60:59:a6:6d:bd:b3:a6:72:7d:18:6b:8e:ef:
44:93:b9:d9:be:53:d8:91:4a:05:93:a7:78:d0:cd:
18:92:31:79:27:e4:5d:e1:37:7d:ea:3c:bd:e7:ba:
63:02:c0:38:f0:f0:9d:45:9a:2f:eb:d7:ee:de:03:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:88:CD:7E:85:B3:3E:24:A1:B4:46:5E:51:BD:BA:11:32:77:E6:ED
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-IjNfoWzPiShtEZeUb26ETJ35u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.5.0/24
5.105.7.0/24
5.105.18.0/23
5.105.21.0/24
5.105.36.0/24
5.105.59.0/24
5.105.63.0/24
5.105.75.0/24
5.105.94.0/24
5.105.102.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.162.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:1c:36:e6:50:45:82:d7:a7:2e:5b:18:6a:d0:d0:2a:f0:7e:
5e:75:d5:70:72:0d:c4:ed:b5:b2:92:d1:bc:20:3c:18:6c:d8:
5a:8e:ef:ac:a9:3d:c0:a8:4d:86:c4:9b:c3:d1:a6:2e:4d:0b:
3f:8e:12:fe:e6:b8:83:fc:59:57:5d:65:46:c2:22:f4:fc:f1:
df:3f:ed:4a:55:55:87:d0:6a:50:75:cc:dd:54:22:13:c3:6a:
a0:f7:6c:e2:07:a9:ab:69:3c:c8:7d:dd:f0:f9:c8:7c:b4:ef:
2e:fd:60:c2:75:d2:27:92:83:e5:4a:f0:85:45:ca:21:92:c0:
c7:38:ae:c4:2c:3d:e7:3c:c8:8b:8c:f5:a9:b2:c6:8f:69:c2:
ef:32:b4:78:22:e4:ac:d7:f9:b4:8a:e7:8c:d9:03:ac:8f:78:
1c:1f:5c:09:00:61:62:90:95:82:bd:a5:84:9d:dd:83:28:a0:
5a:7f:f8:6a:3d:4b:40:b2:cf:95:af:c7:8e:85:2d:8b:53:cc:
4b:29:5d:1f:0d:44:bb:8b:2b:ea:8d:f6:65:2b:19:7d:19:5f:
7e:55:ce:f1:da:b2:f2:3b:36:9b:e4:03:00:69:e7:b3:b6:4b:
32:6b:0d:d1:76:1f:53:bc:b9:c1:c8:a5:ed:5e:eb:1c:ee:e6:
3c:9c:09:a6
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgISAYjtD4E7MkT5s3DJjojz+tYhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjI0MTA1OTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODg4Y2Q3ZTg1YjMzZTI0YTFiNDQ2NWU1MWJkYmExMTMyNzdlNmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqUPqQguwjhtIFKesiyOfDE1OlLO
k2JqMC3t0zfq9wIWIH38YeQ8EUUxCHGiy7t/5nJ4c9VgIMdk8ZKh23nphuBsWZ4u
DmSJ+h+p5ycv4wODF6xmQxdNFhMeWS5mfZdDQ0PDT1vEmvsyC9Ax0Qe1VLXv8rM/
g+rPi3WGPhVrzicKBf+Z24nmfKmX31EMtylW9OjIyQWw9iqFtMoM/hjy6yfVyUsv
rERQ95byV/EjfeBvTwvca0mEkLE2Sk3wdbH0cZHZAGBZpm29s6ZyfRhrju9Ek7nZ
vlPYkUoFk6d40M0YkjF5J+Rd4Td96jy957pjAsA48PCdRZov69fu3gPMAQIDAQAB
o4ICvTCCArkwHQYDVR0OBBYEFPiIzX6Fsz4kobRGXlG9uhEyd+btMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvMS1Jak5mb1d6UGlTaHRFWmVVYjI2RVRKMzV1MC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDUvOGZjNzQ2LWZjMDgtNDIxMS1iYTNiLTg5MzkwNmZiNzg1
OC8xLzNmaTBVbFRsUncwZFRNNXZ0OV9VME5nN1hWay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCB0QYIKwYBBQUHAQcBAf8EgcEwgb4wgbsEAgABMIG0AwQA
BWkDAwQABWkFAwQABWkHAwQBBWkSAwQABWkVAwQABWkkAwQABWk7AwQABWk/AwQA
BWlLAwQABWleAwQABWlmAwQABWlxMAwDBAAFaXUDBAAFaXYDBAAFaaIDBAAFaaoD
BAEFaboDBAEFacYDBAEFacoDBAAFac4wDAMEAAVp1wMEAAVp2AMEAAVp2gMEAQVp
5DAMAwQABWnvAwQABWnwAwQBBWn0AwQABbSwAwQAwS7SMA0GCSqGSIb3DQEBCwUA
A4IBAQDGHDbmUEWC16cuWxhq0NAq8H5eddVwcg3E7bWyktG8IDwYbNhaju+sqT3A
qE2GxJvD0aYuTQs/jhL+5riD/FlXXWVGwiL0/PHfP+1KVVWH0GpQdczdVCITw2qg
92ziB6mraTzIfd3w+ch8tO8u/WDCddInkoPlSvCFRcohksDHOK7ELD3nPMiLjPWp
ssaPacLvMrR4IuSs1/m0iueM2QOsj3gcH1wJAGFikJWCvaWEnd2DKKBaf/hqPUtA
ss+Vr8eOhS2LU8xLKV0fDUS7iyvqjfZlKxl9GV9+Vc7x2rLyOzab5AMAaeeztksy
aw3Rdh9TvLnByKXtXusc7uY8nAmm
-----END CERTIFICATE-----
Generated at Mon May 12 11:06:21 2025 by rpki-client