Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-gUeUW_S4jxJyPdNqizWWcXDc9k.roa
File: 1-gUeUW_S4jxJyPdNqizWWcXDc9k.roa (raw, json)
Hash identifier: z20N6tr8tk1tEkn0qfvEGa5Hud/ISHvqe7o+maKKUOs=
Subject key identifier: FA:05:1E:51:6F:D2:E2:3C:49:C8:F7:4D:AA:2C:D6:59:C5:C3:73:D9
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185A705F84052E37C188B60525DEDC15DB2
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-gUeUW_S4jxJyPdNqizWWcXDc9k.roa
Signing time: Thu 12 Jan 2023 17:27:44 +0000
ROA not before: Thu 12 Jan 2023 17:27:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a7:05:f8:40:52:e3:7c:18:8b:60:52:5d:ed:c1:5d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 12 17:27:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa051e516fd2e23c49c8f74daa2cd659c5c373d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:2b:31:de:21:b0:b7:66:52:bd:c2:df:d6:
d6:86:ef:11:97:a4:da:b3:d9:b9:5f:fc:a2:22:d8:
53:c1:e3:87:7c:d2:13:8f:de:d6:7f:c5:c2:2d:e4:
a6:8e:72:4c:81:fc:83:6f:58:c2:24:a6:2c:b5:d7:
52:0d:e6:9a:db:ee:b2:14:db:32:b5:52:25:42:35:
b2:a9:f1:08:50:b4:1a:d0:fc:19:46:cf:a9:09:1b:
83:7e:80:8a:d1:53:19:8b:9a:a7:56:e1:15:ed:68:
aa:b8:e8:dc:80:40:29:4e:58:f2:ac:b4:dc:63:c5:
51:43:f2:02:e2:50:04:db:ab:f8:aa:d2:14:53:93:
67:e7:f3:2e:a8:a8:c2:70:a2:bb:e7:79:96:7c:f6:
1e:4c:55:6f:40:91:64:26:39:4d:0f:d5:25:da:88:
a3:19:f3:c8:38:7b:35:2b:7e:35:7e:d5:ba:47:12:
1a:d5:e0:86:1d:4c:db:c3:4c:47:df:c5:1d:57:51:
d0:f2:9e:86:24:b5:06:08:8f:7d:a1:9d:ae:24:eb:
1e:d8:e5:47:51:51:7b:aa:52:ed:01:8b:0e:72:71:
60:f8:37:c9:ec:81:8a:0a:fb:8a:f9:57:f2:35:44:
b8:55:f3:30:3f:29:76:45:cc:a6:0b:47:66:de:3c:
77:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:1E:51:6F:D2:E2:3C:49:C8:F7:4D:AA:2C:D6:59:C5:C3:73:D9
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/1-gUeUW_S4jxJyPdNqizWWcXDc9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.10.0/24
5.105.12.0/24
5.105.31.0/24
5.105.68.0/23
5.105.74.0/24
5.105.76.0/23
5.105.79.0-5.105.82.255
5.105.84.0/24
5.105.95.0/24
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.138.0/23
5.105.142.0/23
5.105.156.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.186.0/23
5.105.195.0/24
5.105.197.0-5.105.200.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0-5.105.249.255
5.180.176.0/24
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
40:51:e6:07:ea:f6:f6:b0:c6:4a:63:04:b5:e8:13:4d:3d:57:
0f:e3:78:b4:2b:dd:ec:d7:83:c7:21:bd:8c:67:46:22:a8:41:
d7:76:f2:ae:9c:6a:93:71:e1:fa:52:2e:08:0d:c7:b9:d7:65:
89:d8:39:f3:be:ce:b9:a4:af:6e:b5:10:4e:93:06:46:24:26:
2b:34:0e:d3:1b:76:0c:7a:9d:96:b7:21:d0:df:f7:e1:91:ba:
21:bd:82:a8:95:10:8e:69:82:9e:f6:f9:32:1e:4c:21:f8:00:
ca:2a:9e:b1:9f:f4:b1:1b:68:d3:75:85:e6:d8:bd:07:3c:25:
78:13:6a:c9:26:93:d4:49:eb:97:1c:af:a3:71:86:14:3e:0e:
30:68:51:df:8d:b7:32:ec:e0:5f:11:e3:8c:4a:7e:4f:e0:67:
78:0e:27:67:14:6e:90:c9:40:73:c8:99:ad:03:ec:ce:ef:77:
4e:4d:57:2d:03:c5:ff:c6:05:76:b5:ad:40:e6:d2:6c:11:9f:
5b:9d:53:6c:78:c9:c4:ac:b9:82:97:41:12:ab:a2:53:64:31:
ee:65:1b:31:ee:a2:76:e3:77:45:eb:02:5f:36:1d:13:f5:04:
e1:40:b8:53:1d:50:41:55:55:f5:42:b2:b2:4a:56:85:1a:e4:
0a:98:b6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:56:01 2025 by rpki-client