Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RHQ7mYjIBn6HuyFHIrXhMcDgUgg.roa
File: RHQ7mYjIBn6HuyFHIrXhMcDgUgg.roa (raw, json)
Hash identifier: KYbVvjK4mWXdOF4gPvbRCxFkAh+zIsDrW+r/Y0hPMPU=
Subject key identifier: 44:74:3B:99:88:C8:06:7E:87:BB:21:47:22:B5:E1:31:C0:E0:52:08
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0184C39D5D35E63965692339DB7AD4CDF571
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RHQ7mYjIBn6HuyFHIrXhMcDgUgg.roa
Signing time: Tue 29 Nov 2022 13:39:40 +0000
ROA not before: Tue 29 Nov 2022 13:39:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.151.0/24 maxlen: 24
5.105.150.0/24 maxlen: 24
5.105.149.0/24 maxlen: 24
5.105.148.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.233.0/24 maxlen: 24
5.105.232.0/24 maxlen: 24
5.105.236.0/24 maxlen: 24
5.105.235.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.234.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.24.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:9d:5d:35:e6:39:65:69:23:39:db:7a:d4:cd:f5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 29 13:39:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44743b9988c8067e87bb214722b5e131c0e05208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:94:52:b5:9d:e0:b8:69:a9:ad:dc:20:d7:58:
96:fc:13:7f:d6:e0:3d:b9:0e:46:51:91:57:a1:c0:
f0:71:55:a3:59:4f:cd:0e:2d:cb:79:22:7e:0b:96:
71:fb:0e:db:c1:83:6b:4e:cf:4b:ff:67:c2:b4:3f:
2e:c4:17:c6:8c:44:79:f4:c0:ae:aa:7d:d7:57:d1:
bb:05:4e:d3:c0:81:0e:bf:f7:72:ae:db:d9:4f:c9:
53:40:92:c2:2f:2d:fa:ba:a5:4a:4d:d6:90:f0:be:
82:58:f2:f5:4c:d1:46:58:b2:dd:11:a7:c4:65:10:
a0:78:2b:f4:6b:c8:6b:92:e3:52:df:22:c5:05:21:
5e:62:46:ab:85:a1:98:c7:6c:3f:79:b4:7e:00:5d:
8e:aa:61:7b:95:f0:ac:32:85:10:35:63:0e:ca:b4:
88:80:d0:ef:cd:96:f7:80:c0:d8:c0:90:10:af:4c:
38:2d:92:38:30:ce:5b:f9:b2:7e:54:e3:1b:33:4f:
be:90:d6:e2:f4:5d:e5:f3:dc:7b:06:de:f0:df:ac:
af:8c:c8:0d:53:7f:f4:2e:d5:8b:0e:fb:9f:1c:d6:
03:af:0a:f9:ea:40:fa:d3:a5:05:3f:0f:80:b9:d6:
19:eb:87:d9:45:2d:0a:52:a2:78:a9:8c:05:8d:ba:
d6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:74:3B:99:88:C8:06:7E:87:BB:21:47:22:B5:E1:31:C0:E0:52:08
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/RHQ7mYjIBn6HuyFHIrXhMcDgUgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/24
5.105.26.0/24
5.105.30.0-5.105.33.255
5.105.38.0/23
5.105.43.0/24
5.105.59.0/24
5.105.62.0/23
5.105.68.0/23
5.105.72.0/24
5.105.76.0/23
5.105.82.0/24
5.105.84.0/24
5.105.86.0-5.105.89.255
5.105.94.0/24
5.105.108.0/24
5.105.112.0/24
5.105.115.0/24
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.148.0/22
5.105.156.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.174.0-5.105.178.255
5.105.180.0/22
5.105.185.0-5.105.187.255
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0-5.105.230.255
5.105.232.0-5.105.236.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.247.0-5.105.249.255
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:69:21:cb:ef:e3:e5:1f:c1:f6:aa:d0:ee:60:45:3f:61:5a:
71:76:47:27:bf:92:db:7c:c2:c4:04:f3:f7:2a:00:fe:1f:ea:
01:4b:c4:94:16:39:10:0b:ab:54:f2:e0:dd:eb:f7:e2:60:f3:
90:f1:83:51:49:a5:d5:50:f6:44:b5:d0:16:bf:47:1b:e8:50:
80:96:95:59:bc:0d:77:48:6d:4b:23:ec:d2:f5:01:45:20:d7:
46:e2:97:66:44:6d:7e:30:7f:59:a1:a8:e1:6c:80:2b:14:73:
39:fb:d6:c9:70:ce:d4:82:b1:93:a5:27:07:dd:5d:d6:7c:e1:
e4:c5:51:7b:d3:30:2b:c4:00:9b:e5:ce:83:b0:30:6a:aa:77:
2e:60:1b:48:20:fb:62:6f:56:1c:9e:0e:02:7b:21:09:92:db:
63:04:3b:a1:d8:85:a2:07:ec:32:e0:6b:a6:b7:42:d5:ce:53:
c8:c4:e5:e2:5e:5f:fa:23:ed:9a:56:b0:a7:5c:ac:fe:67:e6:
6b:f1:47:6b:fc:7d:a0:3a:99:a6:f8:da:d3:a4:79:d6:c5:22:
52:9f:63:ac:b0:9d:4c:d2:c6:97:16:d3:77:ba:5a:e1:4b:fa:
0a:1f:97:d5:a4:05:c4:57:57:01:e9:a3:95:ee:11:34:f6:7a:
91:d9:b2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org