Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VwkpRFPXwnogKAXqKpYX1NStJnE.roa
File: VwkpRFPXwnogKAXqKpYX1NStJnE.roa (raw, json)
Hash identifier: d5m3WqmyyvF2bpssSD+jRBMaVPMug2GfYvtWk7D6BnY=
Subject key identifier: 57:09:29:44:53:D7:C2:7A:20:28:05:EA:2A:96:17:D4:D4:AD:26:71
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A9081F4D602F281735568D791C1F5929B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VwkpRFPXwnogKAXqKpYX1NStJnE.roa
Signing time: Wed 13 Sep 2023 21:45:50 +0000
ROA not before: Wed 13 Sep 2023 21:45:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.130.0/24 maxlen: 24
5.105.129.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.135.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.100.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.238.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.241.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.196.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.27.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:90:81:f4:d6:02:f2:81:73:55:68:d7:91:c1:f5:92:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 13 21:45:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5709294453d7c27a202805ea2a9617d4d4ad2671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:09:27:7e:46:47:35:f6:e4:63:87:1d:e7:
24:e0:cd:5a:7f:cd:13:b5:dd:fd:14:9a:23:22:f3:
05:6f:ca:fe:09:fc:9a:82:dd:e4:05:19:90:2b:90:
03:b3:f2:ea:dc:76:a4:6c:00:7a:96:3d:17:91:97:
7c:ad:cc:dd:66:ba:44:14:a0:18:e4:a7:a4:55:67:
96:bb:0f:b2:a8:dc:2e:06:53:a0:fc:1e:75:9c:0f:
5c:12:a4:e9:2b:84:0b:66:ce:71:a4:0f:e0:33:77:
08:37:9b:b4:69:9b:21:21:e1:49:47:ea:48:84:e4:
c6:09:98:1e:f2:08:8f:b8:5a:c5:a9:f3:3c:32:bf:
96:00:d5:3c:21:ed:33:5f:d8:f1:d1:f0:c0:6a:e9:
5a:f2:5c:0d:b8:51:cd:a3:59:c9:77:8c:d9:42:10:
d9:1d:b2:66:7f:08:08:77:bb:f7:d2:7f:bc:f5:23:
ba:5c:6a:83:93:c9:34:18:7d:2f:58:d9:0c:70:e6:
e7:f4:98:91:b0:8b:75:d4:d7:28:e8:52:a9:27:3d:
36:8e:2f:20:85:cb:a9:74:e0:e4:62:0f:48:90:8c:
1a:9f:61:76:60:f5:df:4e:ab:46:cf:66:23:36:08:
ca:0f:77:54:59:fb:5e:3a:5c:83:d9:9e:0e:82:98:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:09:29:44:53:D7:C2:7A:20:28:05:EA:2A:96:17:D4:D4:AD:26:71
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/VwkpRFPXwnogKAXqKpYX1NStJnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.16.0/24
5.105.18.0/24
5.105.21.0/24
5.105.27.0/24
5.105.38.0-5.105.40.255
5.105.50.0/24
5.105.57.0/24
5.105.62.0/24
5.105.79.0/24
5.105.81.0/24
5.105.84.0/24
5.105.95.0/24
5.105.100.0/24
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.115.0/24
5.105.122.0/23
5.105.127.0/24
5.105.129.0-5.105.131.255
5.105.134.0-5.105.136.255
5.105.138.0/23
5.105.142.0/24
5.105.157.0/24
5.105.162.0/24
5.105.164.0/24
5.105.178.0/24
5.105.180.0/22
5.105.187.0/24
5.105.195.0-5.105.197.255
5.105.203.0-5.105.204.255
5.105.207.0/24
5.105.238.0-5.105.241.255
5.105.244.0/23
5.105.252.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
79:21:8f:21:a9:60:2e:2e:00:e2:37:69:49:86:f3:2c:cf:66:
91:88:09:fa:32:fe:13:29:12:58:57:63:8e:8c:10:63:26:4a:
56:5c:cf:f1:f2:a8:f2:62:61:60:fa:97:fd:e3:fb:dd:1f:4a:
ba:66:0f:53:12:23:60:0d:78:de:23:08:6b:1f:c4:81:50:02:
69:94:ce:c4:fe:a6:ff:66:11:bc:49:98:c7:aa:07:79:94:66:
a3:96:14:78:e3:2d:c8:c7:b7:c9:3e:05:b8:19:40:9b:42:96:
93:2d:20:6d:2b:21:7c:ab:30:b8:24:33:a4:fd:f7:51:b7:45:
dc:4a:ec:c5:e5:6a:34:2b:0c:a1:bb:03:8f:9a:8d:f2:52:fa:
f3:5b:06:33:34:89:21:42:fd:c7:ec:c9:f2:d2:af:03:cd:93:
48:56:80:4e:4d:90:02:58:8e:c6:70:15:0c:59:65:0e:6e:bb:
71:cd:22:9a:57:b3:d2:e4:3a:98:07:fd:20:32:9a:02:74:ae:
33:4d:ab:27:d2:4c:12:3e:0b:3e:ff:ea:7d:68:d4:8f:a0:35:
d2:60:30:f4:fb:a3:1e:81:63:7c:20:dc:ed:88:74:5a:ea:c5:
6e:55:f7:a0:92:fa:86:c0:d9:52:b2:4d:fe:ac:b5:59:a7:ff:
44:43:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:11 2025 by rpki-client