Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VelnVDcKj_OXOnsQgsWztuXpLJQ.roa
File: VelnVDcKj_OXOnsQgsWztuXpLJQ.roa (raw, json)
Hash identifier: O7SA9iwRiall+lITtoDsWFb4az4eaxqxFMZz6PqWTew=
Subject key identifier: 55:E9:67:54:37:0A:8F:F3:97:3A:7B:10:82:C5:B3:B6:E5:E9:2C:94
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185304992DE6FD60D4CDC59C35E5F51B1EA
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VelnVDcKj_OXOnsQgsWztuXpLJQ.roa
Signing time: Tue 20 Dec 2022 16:06:46 +0000
ROA not before: Tue 20 Dec 2022 16:06:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:49:92:de:6f:d6:0d:4c:dc:59:c3:5e:5f:51:b1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 20 16:06:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55e96754370a8ff3973a7b1082c5b3b6e5e92c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:d7:5e:68:a4:6e:de:b5:29:1e:f1:14:f4:
9f:ae:4f:6a:71:34:32:00:93:cd:4d:8f:99:ff:d7:
0a:ee:3f:94:37:18:6a:08:ba:2a:42:11:b9:91:c9:
1b:33:54:ae:ca:1f:d3:e9:14:6e:fd:bd:e5:a8:e6:
8a:cc:e3:0c:10:90:87:96:8f:d5:63:79:e3:f2:e0:
ca:f6:be:4b:fc:8e:fe:ff:bf:1b:49:aa:4c:05:39:
87:15:a5:31:8b:33:82:e3:11:7c:d6:4d:48:22:96:
1c:15:2c:d0:62:8f:c2:a2:d8:61:0e:f6:81:e9:55:
85:35:a4:19:31:d5:d5:54:04:b4:04:9f:37:8d:6b:
b3:1e:15:59:1e:40:5a:c6:87:41:1a:84:6d:1f:4a:
f1:20:79:6e:ea:6c:0b:c5:ab:fd:f9:8f:77:0d:cc:
cf:2a:d3:0d:50:c9:70:39:19:1d:74:33:74:89:3a:
0e:a1:f3:8d:85:25:69:96:bb:a9:59:46:69:33:29:
e3:d0:40:63:db:b0:05:5f:8b:2f:f6:63:9b:f8:71:
dd:bc:a4:f7:03:ac:64:7d:6a:ab:56:7c:fb:66:0a:
bc:a5:83:53:6d:58:d6:9d:bc:90:1b:ea:8c:b8:cf:
6f:0f:ed:49:d8:e6:86:ec:8f:8a:eb:32:08:24:24:
32:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E9:67:54:37:0A:8F:F3:97:3A:7B:10:82:C5:B3:B6:E5:E9:2C:94
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VelnVDcKj_OXOnsQgsWztuXpLJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.4.0/24
5.105.12.0/24
5.105.19.0/24
5.105.26.0/24
5.105.40.0/24
5.105.43.0/24
5.105.49.0/24
5.105.63.0/24
5.105.68.0/23
5.105.72.0/24
5.105.74.0/24
5.105.76.0/24
5.105.79.0-5.105.82.255
5.105.84.0/24
5.105.94.0/23
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.156.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0-5.105.230.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
68:44:87:f8:b7:ca:b8:03:e0:db:9d:d8:76:36:cb:b7:2d:8b:
fa:c5:24:b5:fc:86:66:fd:be:c7:b3:be:e4:c2:35:17:01:89:
3b:c3:af:69:c1:f5:b1:c7:bc:19:2e:11:58:67:9c:46:25:ad:
21:0b:ff:cb:0c:c1:b7:d5:d7:7e:0f:f7:8d:72:1c:ac:fa:b2:
6b:36:3a:09:52:ce:46:38:da:69:d4:ce:6b:74:19:4c:63:eb:
2b:fa:fb:82:4c:f1:0c:46:a0:5d:03:0a:c6:f7:0b:7f:d1:18:
de:19:5a:66:63:f2:79:8a:42:55:eb:cc:27:b2:47:7d:51:71:
98:ff:2b:df:93:c4:93:45:d6:cd:9d:1c:fc:47:1e:ab:0b:32:
b4:1a:75:31:6c:23:6c:41:80:22:df:47:9c:33:c6:3b:50:e9:
4f:10:44:47:b1:e6:04:02:0c:5e:73:d6:5e:25:35:cf:b1:8c:
6f:21:a6:08:90:17:f3:dc:51:91:ec:15:dc:0f:66:30:d9:a1:
86:be:8a:62:8a:4e:46:28:71:d4:28:de:15:d8:59:3b:73:26:
42:69:88:b6:d3:8b:74:19:f2:71:75:a2:4d:a5:49:ed:c4:e6:
77:b3:9f:13:6f:2b:f4:df:8f:66:34:df:81:ab:44:2d:32:6e:
24:39:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org