Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/T49IHepnxBT5lPfhVst5ijuvwQI.roa
File: T49IHepnxBT5lPfhVst5ijuvwQI.roa (raw, json)
Hash identifier: Kg6p/pVA/9gfTIhjBAfKZxaJpNjkieT5ERcg6lORL/o=
Subject key identifier: 4F:8F:48:1D:EA:67:C4:14:F9:94:F7:E1:56:CB:79:8A:3B:AF:C1:02
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185348C5923EDA8CD24F9B34393BAF3E69A
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/T49IHepnxBT5lPfhVst5ijuvwQI.roa
Signing time: Wed 21 Dec 2022 11:58:11 +0000
ROA not before: Wed 21 Dec 2022 11:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:8c:59:23:ed:a8:cd:24:f9:b3:43:93:ba:f3:e6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 21 11:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f8f481dea67c414f994f7e156cb798a3bafc102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:89:9f:22:1f:69:a9:f6:c0:cc:4b:5c:a9:ff:
ed:0e:b5:07:ab:56:dd:be:bb:a3:c6:9e:10:8c:84:
86:85:72:2a:72:f6:cc:a7:93:10:b4:38:3a:2d:5d:
6e:ba:70:e2:9f:b2:72:ad:b9:a2:8a:5e:84:06:7f:
7a:d9:5f:5a:cb:7a:8f:5c:40:1d:ce:a1:e9:f4:57:
46:c3:6f:75:ca:a0:b8:a4:85:af:64:39:7d:81:f5:
9d:04:60:90:59:47:02:d0:bf:bc:eb:6f:14:49:8b:
48:48:32:f3:9f:df:49:e4:2e:84:1b:92:19:96:58:
01:72:07:59:40:23:83:3a:fd:11:66:6a:8d:76:d4:
5d:c7:4c:b3:2a:1b:c5:47:b8:8f:5d:a4:64:91:95:
c2:b4:51:91:0a:21:cd:4c:85:75:0d:4d:e5:5a:3b:
5c:14:12:20:56:bf:67:54:93:df:3b:25:e5:9f:5e:
2e:ca:30:c4:d4:d1:48:52:46:ed:b4:71:69:84:94:
0a:53:d6:b6:5a:2f:e7:ce:69:3a:83:61:88:5b:ef:
86:c2:27:d9:3f:4e:3e:93:16:cf:5d:2a:01:73:c9:
01:c2:90:b1:af:1f:81:2c:6c:85:b2:ed:5a:b4:91:
b6:b7:91:2f:79:14:c2:f9:e5:6b:a3:e8:c3:20:f2:
a5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8F:48:1D:EA:67:C4:14:F9:94:F7:E1:56:CB:79:8A:3B:AF:C1:02
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/T49IHepnxBT5lPfhVst5ijuvwQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.12.0/24
5.105.19.0/24
5.105.26.0/24
5.105.40.0/24
5.105.43.0/24
5.105.49.0/24
5.105.63.0/24
5.105.68.0/23
5.105.72.0/24
5.105.74.0/24
5.105.76.0/24
5.105.79.0-5.105.82.255
5.105.84.0/24
5.105.94.0/23
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.156.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0-5.105.230.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:89:23:05:7e:eb:20:40:05:33:4d:11:80:d6:e9:40:32:98:
63:15:fc:40:33:af:1e:dc:e4:04:b1:58:90:f0:9a:71:d2:bc:
d2:72:06:bd:13:2d:b9:8b:ed:e3:ed:54:30:c2:cc:70:2e:fa:
2a:88:2a:f3:fa:53:5d:33:d7:46:4e:f0:41:c5:62:80:07:21:
62:59:c8:cd:ce:57:03:10:14:7c:a9:41:a4:77:67:ee:18:5f:
db:d8:8c:54:72:b4:d9:5a:44:20:64:29:e8:a1:c4:3b:c2:1c:
76:66:ef:67:de:13:b4:b9:fb:65:9e:28:bf:68:52:d6:f8:3e:
18:d1:04:06:38:51:ce:c2:70:95:cd:d7:28:c1:1d:ba:02:85:
24:40:b2:72:ab:97:2a:1d:1a:ee:49:17:78:92:3a:2e:bb:56:
98:23:85:38:2b:a3:85:f7:b7:62:cd:81:5d:0c:7e:65:17:98:
23:6b:10:e9:ab:a7:f7:19:b6:12:f3:c6:8f:dd:49:f4:b9:2d:
c4:e3:2d:66:67:a6:7e:3b:64:c9:b3:cf:ca:8c:64:c7:ef:86:
20:9b:be:7d:22:9e:cc:20:64:15:05:78:7b:6d:33:79:db:ef:
9d:ed:3a:2c:80:f8:1a:6b:d3:16:3e:1c:0e:f1:6e:e2:dc:55:
57:a6:9f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org