Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Kp6RlOO1hm_lrGh8-Qfjsrf7kMs.roa
File: Kp6RlOO1hm_lrGh8-Qfjsrf7kMs.roa (raw, json)
Hash identifier: eFXbuTNEHBkCI+Um/sQf7gISjLdU1QPKiUHzQP6/BFA=
Subject key identifier: 2A:9E:91:94:E3:B5:86:6F:E5:AC:68:7C:F9:07:E3:B2:B7:FB:90:CB
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0184C7FFCC3C6F34E3694F44DAA27CD2F965
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Kp6RlOO1hm_lrGh8-Qfjsrf7kMs.roa
Signing time: Wed 30 Nov 2022 10:05:40 +0000
ROA not before: Wed 30 Nov 2022 10:05:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.151.0/24 maxlen: 24
5.105.150.0/24 maxlen: 24
5.105.149.0/24 maxlen: 24
5.105.148.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.233.0/24 maxlen: 24
5.105.232.0/24 maxlen: 24
5.105.236.0/24 maxlen: 24
5.105.235.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.234.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.24.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:ff:cc:3c:6f:34:e3:69:4f:44:da:a2:7c:d2:f9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 30 10:05:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a9e9194e3b5866fe5ac687cf907e3b2b7fb90cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c1:56:31:3a:f6:da:94:a1:ce:43:a6:00:3a:
85:24:fa:1a:12:93:f7:b1:66:ec:1a:4d:bc:66:61:
d3:80:46:87:80:d6:00:46:53:36:a5:f2:d5:29:b5:
21:c2:8c:7e:63:48:a6:5d:47:ab:63:ff:eb:39:5f:
6d:d5:8d:18:00:66:13:c2:31:5a:1d:0c:fd:2b:10:
d0:c7:d4:66:df:4f:3e:23:03:92:7d:ec:22:93:6a:
d2:69:b1:d4:9c:a8:4f:b6:90:75:72:a9:d8:22:81:
4e:88:d0:d9:92:d5:b2:b0:d6:d5:6e:bb:98:21:34:
48:b8:d3:dd:8f:d7:63:54:2f:14:eb:0c:96:cc:28:
d6:d3:3a:94:2c:5a:69:03:02:a3:f4:58:f8:03:8a:
0f:6f:2c:dc:bd:30:e5:1c:af:ed:e6:9c:ef:ee:4a:
44:39:04:7c:8c:e5:3b:86:51:20:1d:7b:29:ac:6f:
36:59:6e:7c:04:a5:92:48:3b:d7:9c:c7:46:87:e2:
27:42:59:73:a9:13:3c:57:17:7f:e1:51:da:f9:4a:
9f:08:cc:66:d0:93:43:9e:5c:0a:79:5a:e2:8a:ef:
46:47:41:4a:9e:e2:15:74:69:f0:76:1a:e9:38:ca:
0a:5b:3e:8a:66:93:95:e2:14:f4:d5:61:69:4f:d0:
02:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9E:91:94:E3:B5:86:6F:E5:AC:68:7C:F9:07:E3:B2:B7:FB:90:CB
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Kp6RlOO1hm_lrGh8-Qfjsrf7kMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.12.0/24
5.105.24.0/24
5.105.26.0/24
5.105.38.0/23
5.105.43.0/24
5.105.59.0/24
5.105.62.0/23
5.105.68.0/23
5.105.72.0/24
5.105.76.0/23
5.105.82.0/24
5.105.84.0/24
5.105.86.0-5.105.89.255
5.105.94.0/24
5.105.108.0/24
5.105.112.0/24
5.105.115.0/24
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.148.0/22
5.105.156.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.174.0-5.105.178.255
5.105.180.0/22
5.105.185.0-5.105.187.255
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0-5.105.230.255
5.105.232.0-5.105.236.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.247.0-5.105.249.255
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ec:4f:11:a1:5c:9a:06:19:f5:94:1a:76:2c:ce:2f:14:fd:
3d:23:ec:cc:c7:08:de:5e:da:f7:b9:a2:3f:3d:75:ff:60:e7:
9b:7a:d3:15:70:b3:07:8d:4b:09:81:1b:a6:25:6b:93:e8:76:
39:0a:c1:7b:ce:6e:e8:a7:cc:6a:53:f0:d8:86:db:b9:ed:50:
66:b7:50:fb:ad:f6:79:2e:69:86:a5:ed:e2:66:89:24:4c:e2:
59:f7:55:a7:a7:82:49:f0:75:22:8b:0c:60:3c:50:aa:93:91:
6c:99:41:06:52:07:b0:dd:85:83:e6:5b:cd:61:77:1c:4c:bb:
3c:47:40:8f:62:17:fe:d9:e6:f6:cf:1f:65:e9:52:c9:bf:b2:
ad:8d:e5:1c:ee:8c:c8:8a:0c:aa:6d:a5:09:2c:72:ea:1a:33:
93:91:6c:06:f2:fa:39:64:09:c8:28:6c:81:56:e0:e7:6b:61:
4e:9a:c9:3c:40:f2:3f:a0:10:34:38:61:4d:a4:fa:e0:14:72:
61:4c:e1:8a:a6:ea:13:d9:bd:19:cb:57:d5:53:41:1c:d3:f5:
9d:67:29:c1:22:8b:73:39:7e:16:3d:d1:f4:d1:7f:5a:e4:44:
c8:ba:fd:fc:6f:d9:03:9a:6c:5f:1e:10:62:c6:6d:67:b8:a3:
97:95:1d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org