Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VQ3JGsCb3Zx2oJJ1uNmp5t2PiKg.roa
File: VQ3JGsCb3Zx2oJJ1uNmp5t2PiKg.roa (raw, json)
Hash identifier: q+MGzxANgkujheuPRCFV+s2hbpzb/h1pqLIalJ6dIjI=
Subject key identifier: 55:0D:C9:1A:C0:9B:DD:9C:76:A0:92:75:B8:D9:A9:E6:DD:8F:88:A8
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0184CE43CFA25092741BE71DEB357F0415F0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VQ3JGsCb3Zx2oJJ1uNmp5t2PiKg.roa
Signing time: Thu 01 Dec 2022 15:17:41 +0000
ROA not before: Thu 01 Dec 2022 15:17:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.151.0/24 maxlen: 24
5.105.150.0/24 maxlen: 24
5.105.149.0/24 maxlen: 24
5.105.148.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.233.0/24 maxlen: 24
5.105.232.0/24 maxlen: 24
5.105.236.0/24 maxlen: 24
5.105.235.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.234.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:43:cf:a2:50:92:74:1b:e7:1d:eb:35:7f:04:15:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 1 15:17:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=550dc91ac09bdd9c76a09275b8d9a9e6dd8f88a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9e:31:98:de:3e:f8:26:0a:e5:25:32:f9:b4:
9d:15:85:ed:5a:f6:b2:ac:3f:dd:08:b1:2c:a2:6f:
dc:4e:a3:f4:c2:7f:bd:5d:26:72:d0:3e:fe:ec:62:
9c:58:b6:d2:d8:58:3b:74:64:45:3f:f4:75:66:87:
b7:6e:8d:7a:f8:ec:da:0c:01:ff:e4:07:9a:59:77:
a3:8c:be:89:11:0c:91:b5:3e:fb:c2:be:52:18:21:
63:f7:b7:2b:85:0d:04:c2:91:2a:8f:7f:a0:8e:6b:
29:2b:f9:76:05:88:b8:37:23:eb:57:cc:dc:08:89:
20:45:58:d4:19:2a:fc:71:48:75:b6:4f:21:58:b9:
ce:31:96:d9:f3:9f:53:26:7d:1d:d4:47:db:5f:03:
f5:40:76:71:46:92:c3:ab:db:6f:47:88:f0:2b:11:
d9:31:3f:1a:32:59:fd:80:90:cc:54:f6:4e:5d:9b:
d6:00:e2:9c:d4:df:4e:02:3f:3e:44:bb:fe:2a:91:
c0:30:a9:b2:99:ac:76:1b:bd:ed:0b:72:2f:ab:eb:
bc:b4:af:4b:9a:7b:4e:36:2a:61:f1:4a:8b:40:34:
dd:4d:23:79:76:0d:e7:e8:89:50:16:64:cb:ea:b3:
15:c4:91:db:b8:e4:89:50:e0:91:fc:c8:9b:2f:97:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0D:C9:1A:C0:9B:DD:9C:76:A0:92:75:B8:D9:A9:E6:DD:8F:88:A8
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VQ3JGsCb3Zx2oJJ1uNmp5t2PiKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.12.0/24
5.105.26.0/24
5.105.43.0/24
5.105.59.0/24
5.105.62.0/23
5.105.68.0/23
5.105.72.0/24
5.105.76.0/23
5.105.82.0/24
5.105.84.0/24
5.105.86.0-5.105.89.255
5.105.94.0/24
5.105.108.0/24
5.105.112.0/24
5.105.115.0/24
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.148.0/22
5.105.156.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.174.0-5.105.178.255
5.105.180.0/22
5.105.185.0-5.105.187.255
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0-5.105.230.255
5.105.232.0-5.105.236.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.247.0-5.105.249.255
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
22:9d:0d:e2:eb:e8:4e:37:25:52:d8:b9:00:2d:6c:ef:b1:5b:
cd:3d:7d:c4:b7:43:80:1f:1a:ca:5b:04:48:2e:26:c1:e8:bb:
6c:45:b1:18:7f:40:23:69:2a:6c:b5:7e:a5:74:86:8f:75:07:
b9:ff:00:66:f0:71:6f:67:19:43:0b:c7:3c:df:e6:49:cb:b6:
7a:d8:54:22:81:ee:53:c8:79:e9:ef:00:1c:ca:02:52:33:52:
ce:48:cd:5f:88:9c:91:df:8a:8c:fe:af:da:73:7d:c7:2c:10:
22:78:d5:00:91:4b:d9:49:a2:da:da:aa:4f:d0:63:9b:15:1a:
f6:6d:25:85:8c:ea:0d:60:89:3a:5d:58:5b:4c:f8:25:79:ce:
24:37:01:e0:ed:d9:15:80:66:dd:aa:4e:e3:0b:ea:b9:b1:70:
6d:ab:9d:69:d4:09:bf:b5:2d:c2:f5:56:ab:52:cb:6f:61:40:
8f:45:1c:41:a9:62:a6:53:da:7d:0c:86:bd:22:3f:db:15:73:
12:d6:ef:05:89:1c:33:f5:ed:f5:95:c6:52:6b:8e:f7:fe:f5:
c5:c7:a2:93:d2:4a:a6:37:8e:bd:2f:d1:1c:bd:03:b2:5f:c6:
f6:fc:b2:32:c0:da:18:c8:e2:b1:14:55:51:39:48:58:ed:d6:
4a:c9:10:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org