Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7dWGyUvV9vVFukSXc3nHlM6JLUU.roa
File: 7dWGyUvV9vVFukSXc3nHlM6JLUU.roa (raw, json)
Hash identifier: VbkpWfv+wsK7a9PijCPb50GqH/2XmjuznO0NTPYlzbo=
Subject key identifier: ED:D5:86:C9:4B:D5:F6:F5:45:BA:44:97:73:79:C7:94:CE:89:2D:45
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0184AE48B4FC52D5BFF4E17D1D44CA4F1593
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7dWGyUvV9vVFukSXc3nHlM6JLUU.roa
Signing time: Fri 25 Nov 2022 10:15:11 +0000
ROA not before: Fri 25 Nov 2022 10:15:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.151.0/24 maxlen: 24
5.105.150.0/24 maxlen: 24
5.105.149.0/24 maxlen: 24
5.105.148.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.233.0/24 maxlen: 24
5.105.232.0/24 maxlen: 24
5.105.236.0/24 maxlen: 24
5.105.235.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.234.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.24.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ae:48:b4:fc:52:d5:bf:f4:e1:7d:1d:44:ca:4f:15:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 25 10:15:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edd586c94bd5f6f545ba44977379c794ce892d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b3:ea:14:0e:b8:26:98:f3:3c:fa:c4:d2:51:
67:20:ab:5f:68:e1:4f:5d:fa:2d:61:1a:02:e1:a6:
6e:ed:17:31:32:f3:fe:60:0f:7e:ac:b1:12:83:ae:
53:f8:f7:11:5c:e4:b2:68:af:8b:1e:45:36:29:97:
05:4a:7b:3d:1f:78:da:82:b7:f8:b3:be:3e:da:a1:
67:cf:89:cb:9b:fc:0c:4f:f9:67:6c:96:99:d5:d0:
b4:55:51:ff:73:e6:81:7c:73:8f:b5:50:54:b3:6a:
4a:f2:58:14:81:dd:2a:02:e7:7b:0c:36:a9:f3:71:
4f:cc:e9:6a:66:1b:11:93:95:1a:ed:ab:ce:c3:95:
e2:77:17:2d:4e:e9:49:78:0b:eb:b4:36:2e:a5:0e:
20:93:b3:62:77:8f:03:24:88:3a:02:84:cd:29:b6:
f3:3f:e4:cd:01:39:05:b0:25:a7:56:7f:d5:f2:8e:
de:4d:1c:7a:f0:30:6c:a0:dc:f7:47:e8:04:9e:67:
a3:69:73:ec:1d:a3:31:1c:9e:b8:38:ce:4b:a6:ba:
ba:8e:23:89:1e:08:f9:92:76:a2:f1:89:bc:f7:d5:
cb:98:b3:82:c5:dd:51:21:47:a1:0e:b6:86:1b:69:
ba:ce:2a:d9:fd:b0:d7:f4:e1:22:7a:95:3e:81:42:
1d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D5:86:C9:4B:D5:F6:F5:45:BA:44:97:73:79:C7:94:CE:89:2D:45
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7dWGyUvV9vVFukSXc3nHlM6JLUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/24
5.105.26.0/24
5.105.30.0-5.105.33.255
5.105.38.0/23
5.105.43.0/24
5.105.59.0/24
5.105.62.0/23
5.105.68.0/23
5.105.72.0/24
5.105.76.0/23
5.105.82.0/24
5.105.84.0/24
5.105.86.0-5.105.89.255
5.105.94.0/24
5.105.108.0/24
5.105.112.0/24
5.105.115.0/24
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.148.0/22
5.105.156.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.174.0-5.105.178.255
5.105.180.0/22
5.105.185.0-5.105.187.255
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0-5.105.230.255
5.105.232.0-5.105.236.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.247.0-5.105.249.255
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b0:aa:30:0b:89:df:04:1a:85:b4:77:9d:a5:df:93:a0:e7:
d8:1b:a0:5f:61:0c:10:a7:2a:70:e1:39:74:76:4f:05:00:9c:
6d:4d:53:b6:7a:ad:dc:c0:73:9a:2e:7b:ad:ec:c1:cc:4c:61:
a2:8e:7a:37:d0:de:16:64:a9:13:83:b0:2e:a4:d8:46:bd:51:
fb:29:05:fb:27:ec:67:6b:de:97:79:69:29:58:b1:9f:b3:46:
a9:cb:49:2b:67:64:8d:25:36:01:24:7b:33:5a:aa:1f:2d:ba:
f3:11:31:ae:b5:b0:fc:01:56:4e:ae:44:f1:71:72:f7:94:ee:
98:ab:81:f0:99:ac:82:6e:42:e7:54:bc:b3:af:8f:74:ff:1b:
f3:c6:ce:88:bc:cf:44:75:f9:05:ce:41:2a:b0:f8:bf:2a:df:
fb:91:95:5b:2b:2d:8c:59:e0:51:52:15:e9:e0:76:c3:6d:ca:
f3:57:11:6b:21:37:a4:34:3a:25:5f:95:78:ed:f8:30:3f:84:
ea:a2:62:cf:9f:e1:69:f6:76:89:71:64:be:af:62:d4:b2:15:
10:82:b7:ea:ff:a6:cf:75:5f:c2:12:26:97:a8:d8:2e:21:39:
c0:a1:03:c1:11:c8:8b:96:03:79:1d:29:9d:71:af:2a:09:c8:
67:19:14:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org