Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/BUAUgjnTiBnOjv-TEvgGDOtb4JU.roa
File: BUAUgjnTiBnOjv-TEvgGDOtb4JU.roa (raw, json)
Hash identifier: 7yRN9tLecCUPcIKO6NRYIpjnUFypJ4xuA4qIzFr4Wfg=
Subject key identifier: 05:40:14:82:39:D3:88:19:CE:8E:FF:93:12:F8:06:0C:EB:5B:E0:95
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0184A35DAF6FCF293B15D14C5D25B4C65793
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/BUAUgjnTiBnOjv-TEvgGDOtb4JU.roa
Signing time: Wed 23 Nov 2022 07:22:16 +0000
ROA not before: Wed 23 Nov 2022 07:22:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.151.0/24 maxlen: 24
5.105.150.0/24 maxlen: 24
5.105.149.0/24 maxlen: 24
5.105.148.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.161.0/24 maxlen: 24
5.105.160.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.163.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
5.105.107.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.233.0/24 maxlen: 24
5.105.232.0/24 maxlen: 24
5.105.227.0/24 maxlen: 24
5.105.236.0/24 maxlen: 24
5.105.235.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.234.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.251.0/24 maxlen: 24
5.105.250.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.255.0/24 maxlen: 24
5.105.254.0/24 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.192.0/24 maxlen: 24
5.105.191.0/24 maxlen: 24
5.105.190.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.194.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.219.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.220.0/24 maxlen: 24
5.105.24.0/24 maxlen: 24
5.105.28.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.42.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.56.0/24 maxlen: 24
5.105.58.0/24 maxlen: 24
5.105.60.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:5d:af:6f:cf:29:3b:15:d1:4c:5d:25:b4:c6:57:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 23 07:22:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0540148239d38819ce8eff9312f8060ceb5be095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:0a:e5:86:12:e7:52:92:42:65:78:2d:02:
93:24:ba:4e:47:64:51:a0:79:e1:72:2b:6f:f9:d8:
55:77:4c:f2:48:bd:74:b6:18:73:52:cc:f4:d0:c5:
53:79:85:e7:63:dc:92:b1:ce:15:5c:96:bd:94:ff:
cb:0e:9a:f8:d6:5d:94:eb:6d:dd:da:ba:29:1c:ac:
ce:7a:17:96:e2:10:a5:f9:46:b5:31:83:cb:54:7d:
1e:39:2e:f9:21:1c:29:db:a5:6a:3e:5a:12:db:8a:
9d:b5:3e:59:61:4b:f5:65:64:b1:00:b3:b8:02:43:
58:ea:15:05:a5:9b:fe:5e:99:42:6c:4f:d8:82:c3:
5f:66:5b:3e:7b:22:ad:cb:39:15:aa:c1:bf:48:0c:
a6:29:b4:14:06:93:05:c3:d3:d1:d1:17:9d:2e:d3:
32:75:a5:a5:d8:16:f4:12:d6:fc:56:94:e0:0a:7c:
c1:dd:db:92:92:7d:68:a7:e2:d9:ec:88:9e:f3:2c:
1c:c4:3a:69:57:fa:72:a5:ce:51:32:fe:52:d1:b1:
3d:ee:e3:47:94:20:86:0a:4b:e7:7b:4e:2e:b3:cf:
78:d5:00:c6:e9:0f:58:0b:9b:b6:3d:7b:66:07:c7:
30:06:69:ab:54:a6:5a:45:57:23:02:f8:ce:c1:ba:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:40:14:82:39:D3:88:19:CE:8E:FF:93:12:F8:06:0C:EB:5B:E0:95
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/BUAUgjnTiBnOjv-TEvgGDOtb4JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/24
5.105.26.0/24
5.105.28.0/24
5.105.30.0-5.105.33.255
5.105.38.0/23
5.105.42.0/23
5.105.56.0/24
5.105.58.0-5.105.60.255
5.105.62.0/23
5.105.68.0/23
5.105.72.0/24
5.105.76.0/23
5.105.82.0/24
5.105.84.0/24
5.105.86.0-5.105.89.255
5.105.94.0/24
5.105.101.0/24
5.105.107.0/24
5.105.110.0-5.105.112.255
5.105.115.0/24
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.148.0/22
5.105.156.0/24
5.105.160.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.174.0-5.105.178.255
5.105.180.0/22
5.105.186.0/23
5.105.190.0-5.105.192.255
5.105.194.0/23
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0-5.105.221.255
5.105.227.0/24
5.105.229.0-5.105.230.255
5.105.232.0-5.105.236.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.247.0-5.105.251.255
5.105.254.0/23
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e7:15:58:f9:6c:bc:b6:15:0e:96:78:ab:d0:a4:d4:6f:d5:
49:c4:d3:47:b8:c8:0b:e0:ca:14:50:0c:d9:7d:46:df:00:6a:
c6:35:ac:19:d2:7c:7e:6f:78:18:72:27:b4:b6:7c:ad:5a:6e:
07:eb:c8:40:27:6e:63:6f:68:b9:65:35:99:5e:f4:97:9a:6b:
e3:f8:3e:7d:49:9f:ca:87:4c:db:0d:b1:b2:ac:0b:6c:aa:2c:
09:f1:d3:4a:02:cd:f5:c9:5b:d1:af:cd:ab:35:34:e7:6e:28:
6b:a4:a4:0f:b1:81:a7:e9:7a:71:e4:41:ed:7b:06:60:4c:d8:
b3:f6:77:33:ec:89:05:e8:71:6b:b9:51:4a:a2:b1:d0:b4:8d:
54:c4:19:8e:6f:de:69:9f:47:0c:33:0f:85:87:28:bc:3f:61:
54:0e:d6:f2:d8:cb:43:49:f2:db:34:7b:87:3e:64:2d:25:98:
78:68:30:50:89:2e:c8:af:09:83:5c:af:77:70:ee:c3:21:66:
67:b5:6f:c5:b4:5d:60:a0:be:0e:b8:99:0f:52:6a:b1:cb:4c:
05:ee:4a:c5:02:d9:03:7f:02:a8:a4:de:1c:03:df:60:eb:84:
13:86:c3:b0:14:5a:04:cd:d3:68:df:4f:bd:a7:e7:2c:e7:1b:
de:0a:8f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org