Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/FFBxDvskdpIXa8G_UKN_XsisLYM.roa
File: FFBxDvskdpIXa8G_UKN_XsisLYM.roa (raw, json)
Hash identifier: dOW4gQmFm4vdxTzSFrscZiBb7Z4dxD8EWuybieADnWg=
Subject key identifier: 14:50:71:0E:FB:24:76:92:17:6B:C1:BF:50:A3:7F:5E:C8:AC:2D:83
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018554CFCA26ED2DB3A8473C0D0A71F5D86F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/FFBxDvskdpIXa8G_UKN_XsisLYM.roa
Signing time: Tue 27 Dec 2022 18:19:41 +0000
ROA not before: Tue 27 Dec 2022 18:19:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:54:cf:ca:26:ed:2d:b3:a8:47:3c:0d:0a:71:f5:d8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 27 18:19:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1450710efb247692176bc1bf50a37f5ec8ac2d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:aa:f8:c0:b1:00:39:77:13:49:f6:24:c6:
77:93:bc:12:c3:a4:5e:f4:82:f5:91:dc:b7:61:16:
39:4b:45:5b:fd:1b:0c:0a:88:86:2a:a2:cf:13:5f:
b4:95:1f:05:79:f9:bc:97:7e:70:5c:a6:0c:c1:05:
3e:49:75:26:ed:5e:bd:5f:fc:b3:d2:58:ce:15:82:
d9:fd:8f:cc:41:9e:b1:53:fc:7a:50:df:bf:76:e1:
23:96:16:7e:83:d2:0d:ed:fe:ab:76:00:37:9f:b3:
d3:bd:fc:18:b7:9a:02:c5:b8:98:32:d7:83:22:a1:
9a:51:a3:30:dc:1f:3b:10:82:51:a2:be:4f:6c:50:
53:6f:9b:ac:2f:4b:25:ce:f0:f0:35:a7:77:d4:76:
e8:c7:ca:d7:1c:de:ed:88:b1:82:12:15:3a:39:6c:
91:22:cd:11:04:98:1e:f9:a0:8d:95:75:36:1c:6c:
7d:32:87:af:2c:3e:a0:1e:12:e2:6f:c9:26:b2:62:
f1:9f:7f:7c:5c:d6:8b:cd:c7:c6:fd:16:3c:53:b9:
f9:e4:6e:3c:f2:d2:e4:e7:dd:20:41:95:80:14:81:
96:3b:a0:04:dd:93:43:df:cd:d8:5f:15:de:d6:5d:
13:c3:e5:6a:2a:c5:6b:2a:e2:c6:fe:42:9f:5b:40:
4d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:50:71:0E:FB:24:76:92:17:6B:C1:BF:50:A3:7F:5E:C8:AC:2D:83
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/FFBxDvskdpIXa8G_UKN_XsisLYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.12.0/24
5.105.19.0/24
5.105.26.0/24
5.105.40.0/24
5.105.43.0/24
5.105.68.0/23
5.105.72.0/24
5.105.74.0/24
5.105.76.0/24
5.105.79.0-5.105.82.255
5.105.84.0/24
5.105.94.0/23
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.156.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0-5.105.230.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:d2:18:c8:57:c7:ed:cf:d7:08:54:32:a5:45:65:02:97:15:
53:78:e7:1c:9e:2a:13:63:f1:d6:00:87:12:02:a0:a3:81:46:
a4:c0:68:50:82:19:5c:19:bc:7e:7b:8c:13:4a:4b:06:05:dd:
30:e3:bb:17:e8:0e:ea:1a:7b:7b:e3:4a:48:ae:11:7d:00:53:
c4:3f:21:70:06:4a:9e:4d:c2:ba:0a:d5:00:cd:c9:d4:ca:58:
fd:5f:b1:1e:e9:22:85:06:2a:26:4c:68:f9:90:6a:c7:c6:f8:
07:7e:47:ea:63:12:09:f8:48:f3:4b:c0:3f:be:b1:60:2e:b1:
18:b3:11:89:d5:d8:87:40:0b:1b:9a:4f:85:ab:63:f2:d5:62:
5c:a8:cb:14:82:18:0c:0d:a6:7c:d2:14:30:3d:84:7c:c9:9a:
42:18:a4:22:e3:df:30:7c:6d:99:f1:ba:12:a7:84:35:0b:f7:
5b:cf:b3:86:1b:51:e2:bf:5f:a7:2a:4b:26:41:89:ef:53:b2:
9c:15:5c:d4:5b:e0:82:bb:6a:60:11:6c:0c:47:46:8d:ae:72:
91:f5:a0:87:89:88:29:33:e5:cd:a3:77:0a:c7:1d:0f:61:05:
f1:0a:fb:d4:17:5a:bc:78:ba:7e:5a:52:29:15:1c:cf:8d:fe:
ad:75:b7:7e
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISAYVUz8om7S2zqEc8DQpx9dhvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjIxMjI3MTgxOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDUwNzEwZWZiMjQ3NjkyMTc2YmMxYmY1MGEzN2Y1ZWM4YWMyZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp6q+MCxADl3E0n2JMZ3k7wSw6Re
9IL1kdy3YRY5S0Vb/RsMCoiGKqLPE1+0lR8Fefm8l35wXKYMwQU+SXUm7V69X/yz
0ljOFYLZ/Y/MQZ6xU/x6UN+/duEjlhZ+g9IN7f6rdgA3n7PTvfwYt5oCxbiYMteD
IqGaUaMw3B87EIJRor5PbFBTb5usL0slzvDwNad31Hbox8rXHN7tiLGCEhU6OWyR
Is0RBJge+aCNlXU2HGx9MoevLD6gHhLib8kmsmLxn398XNaLzcfG/RY8U7n55G48
8tLk590gQZWAFIGWO6AE3ZND383YXxXe1l0Tw+VqKsVrKuLG/kKfW0BNAwIDAQAB
o4IDYzCCA18wHQYDVR0OBBYEFBRQcQ77JHaSF2vBv1Cjf17IrC2DMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvRkZCeER2c2tkcElYYThHX1VLTl9Yc2lzTFlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBdwYIKwYBBQUHAQcBAf8EggFmMIIBYjCCAV4EAgABMIIB
VgMEAAVpDAMEAAVpEwMEAAVpGgMEAAVpKAMEAAVpKwMEAQVpRAMEAAVpSAMEAAVp
SgMEAAVpTDAMAwQABWlPAwQABWlSAwQABWlUAwQBBWleAwQABWlnAwQABWlqAwQA
BWlsAwQCBWlwAwQBBWl6MAwDBAAFaX0DBAcFaQAwDAMEAAVpgwMEAAVphAMEAAVp
hgMEAAVpiAMEAQVpijAMAwQABWmNAwQEBWmAAwQABWmcAwQABWmiMAwDBAAFaaUD
BAAFaaYDBAAFaagDBAAFaaoDBAAFaawwDAMEAAVpuQMEAgVpuAMEAAVpwzAMAwQA
BWnFAwQDBWnAAwQBBWnKAwQBBWnOAwQABWnWAwQABWnYAwQABWnaMAwDBAAFaeUD
BAAFaeYwDAMEAAVp7wMEAAVp8AMEAAVp8gMEAQVp9AMEAQVp+AMEAAW0sAMEAlX/
tAMEAMEu0jANBgkqhkiG9w0BAQsFAAOCAQEAvNIYyFfH7c/XCFQypUVlApcVU3jn
HJ4qE2Px1gCHEgKgo4FGpMBoUIIZXBm8fnuME0pLBgXdMOO7F+gO6hp7e+NKSK4R
fQBTxD8hcAZKnk3CugrVAM3J1MpY/V+xHukihQYqJkxo+ZBqx8b4B35H6mMSCfhI
80vAP76xYC6xGLMRidXYh0ALG5pPhatj8tViXKjLFIIYDA2mfNIUMD2EfMmaQhik
IuPfMHxtmfG6EqeENQv3W8+zhhtR4r9fpypLJkGJ71OynBVc1FvggrtqYBFsDEdG
ja5ykfWgh4mIKTPlzaN3CscdD2EF8Qr71BdavHi6flpSKRUcz43+rXW3fg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org