Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/X2Er_v3Z4hxDjsHfNdobSozfMEs.roa
File: X2Er_v3Z4hxDjsHfNdobSozfMEs.roa (raw, json)
Hash identifier: cMa/wASYaM3Zxe5H2JsyPJk+0nDy8KozKuGsxczYfYc=
Subject key identifier: 5F:61:2B:FE:FD:D9:E2:1C:43:8E:C1:DF:35:DA:1B:4A:8C:DF:30:4B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0184E6A5B1311FB0AD276ADEFA4F544F0A3C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/X2Er_v3Z4hxDjsHfNdobSozfMEs.roa
Signing time: Tue 06 Dec 2022 08:55:29 +0000
ROA not before: Tue 06 Dec 2022 08:55:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.151.0/24 maxlen: 24
5.105.150.0/24 maxlen: 24
5.105.149.0/24 maxlen: 24
5.105.148.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.233.0/24 maxlen: 24
5.105.232.0/24 maxlen: 24
5.105.236.0/24 maxlen: 24
5.105.235.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.234.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.17.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.105.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:a5:b1:31:1f:b0:ad:27:6a:de:fa:4f:54:4f:0a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 6 08:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f612bfefdd9e21c438ec1df35da1b4a8cdf304b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:23:4a:b3:b7:ed:89:b0:80:f4:c5:26:c1:4a:
6c:4b:e8:2b:be:7e:f6:a2:6c:58:e3:60:5f:03:5f:
4b:b4:45:19:76:d8:92:3b:86:3f:3b:92:5e:a0:98:
86:86:d2:90:12:b9:32:ec:04:9a:6c:39:ee:9a:28:
e9:a1:4e:be:dd:41:d8:f7:d2:b6:0b:98:2a:d7:5e:
88:15:c0:97:14:13:7c:f6:7a:34:4b:e6:d3:98:60:
4f:48:f3:c3:db:cd:91:ad:fa:78:9d:07:b0:c7:9c:
9d:72:51:21:3c:fe:c7:d8:15:47:33:04:08:c0:ed:
b0:43:1d:11:2f:75:64:c0:8a:64:70:d0:5b:25:77:
a5:ef:66:17:d1:7d:15:0e:13:ad:c5:17:f1:ab:2c:
f6:22:47:12:23:ce:13:6b:21:c1:aa:9d:68:ff:cb:
c4:c7:b7:36:18:66:d6:7f:41:65:a0:fe:ad:56:fe:
95:21:b9:94:c6:20:dc:68:ac:f5:f7:ac:ac:b3:30:
a4:c5:07:2e:5c:4c:92:5a:0b:0a:45:7c:8c:d7:c9:
6a:13:f8:c3:f6:f1:a3:cd:88:57:b1:2c:b9:fb:a6:
e9:84:b4:12:40:70:24:52:66:b9:59:8e:d7:6d:7c:
6f:b3:f2:15:12:1f:72:db:11:14:d7:0a:53:6b:f0:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:61:2B:FE:FD:D9:E2:1C:43:8E:C1:DF:35:DA:1B:4A:8C:DF:30:4B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/X2Er_v3Z4hxDjsHfNdobSozfMEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.1.0/24
5.105.12.0/24
5.105.17.0/24
5.105.26.0/24
5.105.43.0/24
5.105.59.0/24
5.105.62.0/23
5.105.68.0/23
5.105.72.0/24
5.105.76.0/23
5.105.82.0/24
5.105.84.0/24
5.105.86.0-5.105.89.255
5.105.94.0/24
5.105.108.0/24
5.105.112.0/24
5.105.115.0/24
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.148.0/22
5.105.156.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.174.0-5.105.178.255
5.105.180.0/22
5.105.185.0-5.105.187.255
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0-5.105.230.255
5.105.232.0-5.105.236.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.247.0-5.105.249.255
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
84:97:a6:9e:b7:46:41:b9:53:8b:d6:79:ef:aa:68:2e:3d:94:
fd:e8:d5:ae:98:bb:a5:d5:26:de:d6:95:bf:a0:07:66:c2:45:
77:c5:97:f5:9e:6a:b9:bc:51:58:69:90:fc:f2:0c:b3:d4:e0:
05:80:45:1d:77:3f:b9:d6:c1:46:7a:f2:bc:04:b0:fd:b2:51:
a9:32:b1:2a:42:ab:1f:42:37:81:84:17:78:aa:c1:0e:70:8e:
30:ad:23:92:f3:a7:e1:19:f1:0d:5c:00:0d:f7:99:42:4f:b8:
90:ff:31:90:1e:a9:22:7a:21:43:34:77:65:e2:16:38:99:37:
50:e3:e9:5f:b0:e7:30:50:6c:f6:b2:9e:07:e0:0b:0d:83:17:
80:77:55:9e:72:ad:0f:ae:1d:1c:1e:e4:43:8e:75:1e:4f:73:
6b:48:ad:bd:ac:7b:c0:10:ee:db:a5:e6:8c:7a:42:95:c6:f3:
e5:39:69:53:2f:53:a5:83:7b:c7:23:ef:e4:d2:66:8e:f1:e7:
e9:28:d8:b4:b8:ed:5b:65:86:83:d0:61:c5:99:c6:19:c8:25:
c6:af:fe:84:07:ea:02:ba:c0:6a:71:b3:0b:a0:5c:fb:9d:fd:
24:af:28:eb:4b:b5:0a:66:13:03:15:5b:42:09:79:c4:25:d7:
c6:02:13:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org