Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7qQcyVcmSBkZFR3PfMY2DIAnfXo.roa
File: 7qQcyVcmSBkZFR3PfMY2DIAnfXo.roa (raw, json)
Hash identifier: 2aydJl/6l2n+4BIvNIDaBprj8JkM/CqYo7R4aeSyOF4=
Subject key identifier: EE:A4:1C:C9:57:26:48:19:19:15:1D:CF:7C:C6:36:0C:80:27:7D:7A
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0184BEF1AEC6D82C97E6F3D11756B4D80AB6
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7qQcyVcmSBkZFR3PfMY2DIAnfXo.roa
Signing time: Mon 28 Nov 2022 15:53:40 +0000
ROA not before: Mon 28 Nov 2022 15:53:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.130.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.151.0/24 maxlen: 24
5.105.150.0/24 maxlen: 24
5.105.149.0/24 maxlen: 24
5.105.148.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.233.0/24 maxlen: 24
5.105.232.0/24 maxlen: 24
5.105.236.0/24 maxlen: 24
5.105.235.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.234.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.24.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:f1:ae:c6:d8:2c:97:e6:f3:d1:17:56:b4:d8:0a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 28 15:53:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eea41cc95726481919151dcf7cc6360c80277d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:83:77:7a:93:ad:ef:db:ff:9e:ed:0d:a0:
54:cb:5b:72:65:bb:f1:94:ba:09:96:52:e9:00:bd:
b8:c7:29:58:43:90:64:ea:f8:44:94:76:35:10:17:
67:55:dc:e8:22:f2:54:d9:a9:1b:3d:49:c0:62:af:
1b:33:18:ea:9c:b0:67:8c:a4:e2:c0:aa:41:23:f5:
6c:5e:1e:93:6b:c7:a0:66:02:a7:85:10:1e:f2:a4:
1d:3c:ab:86:3f:a1:e5:84:fa:4d:29:97:6e:ce:2e:
fd:44:d9:3b:67:46:cb:e4:a1:eb:53:f2:6b:77:d7:
a3:63:b8:96:77:95:43:1e:5d:77:f2:72:bf:ed:fd:
87:cb:2f:02:87:24:d0:5f:c6:07:89:2f:2d:39:d5:
dc:1c:97:3c:0a:5a:94:17:89:e3:c2:2f:8c:01:10:
95:b1:5f:91:c9:79:07:5d:9a:51:ff:50:37:97:3b:
85:f2:10:a1:3a:d9:13:be:d0:24:41:c9:5f:f8:f3:
b2:64:96:c9:5c:93:4b:3c:1b:61:53:3d:83:a2:ef:
95:cd:e7:6b:d5:cf:2f:ac:fd:b8:a9:eb:e5:f9:d1:
b6:43:54:81:e1:07:f3:4e:e3:29:60:75:de:a6:6c:
6e:8a:b6:64:e7:e5:f2:94:dc:72:af:fb:c3:87:57:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A4:1C:C9:57:26:48:19:19:15:1D:CF:7C:C6:36:0C:80:27:7D:7A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/7qQcyVcmSBkZFR3PfMY2DIAnfXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.7.0/24
5.105.24.0/24
5.105.26.0/24
5.105.30.0-5.105.33.255
5.105.38.0/23
5.105.43.0/24
5.105.59.0/24
5.105.62.0/23
5.105.68.0/23
5.105.72.0/24
5.105.76.0/23
5.105.82.0/24
5.105.84.0/24
5.105.86.0-5.105.89.255
5.105.94.0/24
5.105.96.0/24
5.105.108.0/24
5.105.112.0/24
5.105.115.0/24
5.105.125.0-5.105.127.255
5.105.130.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.148.0/22
5.105.156.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.174.0-5.105.178.255
5.105.180.0/22
5.105.185.0-5.105.187.255
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.226.0/24
5.105.229.0-5.105.230.255
5.105.232.0-5.105.236.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.247.0-5.105.249.255
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
58:94:ff:cd:16:30:4a:da:52:2c:fe:dc:31:9d:44:0b:6f:73:
e2:4c:2b:f2:90:af:60:f7:d2:70:c7:80:19:ad:b4:58:e3:4e:
c6:64:01:c0:4f:dc:b2:f3:f4:97:2a:c1:8a:53:e8:de:0b:b4:
53:9e:cb:2e:3c:9a:5e:85:7c:46:09:9a:29:13:91:3e:6c:50:
43:14:32:55:6b:0b:93:38:ae:8f:49:ac:0e:fe:13:71:a0:48:
08:89:99:02:33:21:d9:ce:de:9c:9f:e7:c3:7e:f4:52:fb:b2:
67:7f:2d:8e:02:f0:b9:c8:bd:3f:0b:da:99:16:72:b1:99:1a:
9b:8b:9b:76:f0:fc:a2:f3:3f:d2:d7:15:53:4f:8a:d1:7c:6a:
e6:a7:2e:ce:f0:aa:c9:0a:94:76:35:08:f8:e8:c0:b5:2e:7e:
0f:0f:31:6e:c6:0e:2d:09:09:b1:f5:ad:d0:19:a0:fd:70:82:
04:5b:f0:75:e9:e6:00:e0:1f:b4:ab:b7:5d:e4:f2:e2:34:87:
de:0d:bd:f3:71:43:77:7f:62:34:0a:51:eb:19:ed:7f:12:45:
cb:7c:dd:9f:fb:85:ff:2b:09:9b:a9:be:12:90:2c:9a:79:b4:
6e:ad:40:0e:c1:1f:e6:71:6d:49:60:b5:30:37:d4:33:41:52:
c2:a0:68:e1
-----BEGIN CERTIFICATE-----
MIIGoTCCBYmgAwIBAgISAYS+8a7G2CyX5vPRF1a02Aq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjIxMTI4MTU1MzQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWE0MWNjOTU3MjY0ODE5MTkxNTFkY2Y3Y2M2MzYwYzgwMjc3ZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspODd3qTre/b/57tDaBUy1tyZbvx
lLoJllLpAL24xylYQ5Bk6vhElHY1EBdnVdzoIvJU2akbPUnAYq8bMxjqnLBnjKTi
wKpBI/VsXh6Ta8egZgKnhRAe8qQdPKuGP6HlhPpNKZduzi79RNk7Z0bL5KHrU/Jr
d9ejY7iWd5VDHl138nK/7f2Hyy8ChyTQX8YHiS8tOdXcHJc8ClqUF4njwi+MARCV
sV+RyXkHXZpR/1A3lzuF8hChOtkTvtAkQclf+POyZJbJXJNLPBthUz2Dou+Vzedr
1c8vrP24qevl+dG2Q1SB4QfzTuMpYHXepmxuirZk5+XylNxyr/vDh1djUQIDAQAB
o4IDrTCCA6kwHQYDVR0OBBYEFO6kHMlXJkgZGRUdz3zGNgyAJ316MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvN3FRY3lWY21TQmtaRlIzUGZNWTJESUFuZlhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBwQYIKwYBBQUHAQcBAf8EggGwMIIBrDCCAagEAgABMIIB
oAMEAAVpBQMEAAVpBwMEAAVpGAMEAAVpGjAMAwQBBWkeAwQBBWkgAwQBBWkmAwQA
BWkrAwQABWk7AwQBBWk+AwQBBWlEAwQABWlIAwQBBWlMAwQABWlSAwQABWlUMAwD
BAEFaVYDBAEFaVgDBAAFaV4DBAAFaWADBAAFaWwDBAAFaXADBAAFaXMwDAMEAAVp
fQMEBwVpADAMAwQBBWmCAwQABWmEAwQABWmGAwQABWmIAwQBBWmKMAwDBAAFaY0D
BAQFaYADBAIFaZQDBAAFaZwDBAAFaaIwDAMEAgVppAMEAAVppgMEAAVpqAMEAAVp
qgMEAAVprDAMAwQBBWmuAwQABWmyAwQCBWm0MAwDBAAFabkDBAIFabgDBAAFacMw
DAMEAAVpxQMEAwVpwAMEAQVpygMEAQVpzgMEAAVp1gMEAAVp2AMEAAVp2gMEAAVp
4jAMAwQABWnlAwQABWnmMAwDBAMFaegDBAAFaewwDAMEAAVp7wMEAAVp8AMEAAVp
8gMEAQVp9DAMAwQABWn3AwQBBWn4AwQCVf+0AwQAwS7SMA0GCSqGSIb3DQEBCwUA
A4IBAQBYlP/NFjBK2lIs/twxnUQLb3PiTCvykK9g99Jwx4AZrbRY407GZAHAT9yy
8/SXKsGKU+jeC7RTnssuPJpehXxGCZopE5E+bFBDFDJVawuTOK6PSawO/hNxoEgI
iZkCMyHZzt6cn+fDfvRS+7Jnfy2OAvC5yL0/C9qZFnKxmRqbi5t28Pyi8z/S1xVT
T4rRfGrmpy7O8KrJCpR2NQj46MC1Ln4PDzFuxg4tCQmx9a3QGaD9cIIEW/B16eYA
4B+0q7dd5PLiNIfeDb3zcUN3f2I0ClHrGe1/EkXLfN2f+4X/Kwmbqb4SkCyaebRu
rUAOwR/mcW1JYLUwN9QzQVLCoGjh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org