Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XUjNrC02EFuGdnfBLAsOjpI5Vco.roa
File: XUjNrC02EFuGdnfBLAsOjpI5Vco.roa (raw, json)
Hash identifier: VRgHGtVLLp6AyI+PQ7oIwymVJBwsAGInWd3lVIKD7PY=
Subject key identifier: 5D:48:CD:AC:2D:36:10:5B:86:76:77:C1:2C:0B:0E:8E:92:39:55:CA
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186030D507FC556530C3F154B38F72598C2
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XUjNrC02EFuGdnfBLAsOjpI5Vco.roa
Signing time: Mon 30 Jan 2023 14:20:49 +0000
ROA not before: Mon 30 Jan 2023 14:20:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.130.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.4.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:03:0d:50:7f:c5:56:53:0c:3f:15:4b:38:f7:25:98:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 30 14:20:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d48cdac2d36105b867677c12c0b0e8e923955ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:16:9e:c7:f0:34:b1:76:45:69:32:49:46:
17:c1:8e:6d:7b:df:5d:fa:fe:ae:45:14:33:2b:8c:
b9:40:89:70:21:bb:45:1f:73:f0:59:ae:7e:ed:03:
b9:82:04:76:20:11:96:e9:5e:cf:3a:bc:79:6b:28:
ff:82:cc:8f:27:d0:f5:36:ae:ab:f6:69:28:44:fe:
9f:3b:8f:cf:c3:0d:15:f0:eb:74:53:a8:d3:4e:0a:
13:e3:f6:d7:72:90:d7:37:e0:db:f0:41:77:29:a3:
d1:82:a3:8b:43:39:9f:f5:e6:2d:2d:26:c1:5b:ac:
48:d7:e4:4a:4b:70:ac:be:63:a5:d8:49:00:1e:f2:
61:7e:01:cf:39:1e:19:c8:63:65:00:d0:f1:9f:78:
f1:4e:5f:57:39:15:59:f2:f7:16:ac:78:95:8a:a5:
f8:a9:ab:26:f4:58:d6:e4:03:05:50:ed:ae:45:fa:
54:a1:78:61:8f:54:bc:ae:35:f2:6f:1b:49:b7:34:
87:52:7e:86:a0:2d:78:01:4f:ed:fe:bb:e1:b7:09:
9d:dc:43:04:32:7d:de:59:32:ff:6d:f2:40:71:1f:
ae:30:31:78:2a:20:ba:1d:03:e3:e0:06:5d:fe:70:
3d:d8:79:6a:16:90:d9:45:53:66:73:4e:6d:38:32:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:48:CD:AC:2D:36:10:5B:86:76:77:C1:2C:0B:0E:8E:92:39:55:CA
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XUjNrC02EFuGdnfBLAsOjpI5Vco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.4.0/24
5.105.7.0/24
5.105.10.0/24
5.105.12.0/24
5.105.32.0/23
5.105.50.0/24
5.105.63.0/24
5.105.68.0/23
5.105.74.0/24
5.105.79.0-5.105.82.255
5.105.95.0-5.105.96.255
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0/24
5.105.127.0/24
5.105.130.0/24
5.105.134.0/24
5.105.138.0/23
5.105.142.0/23
5.105.156.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.168.0/24
5.105.172.0/24
5.105.184.0/24
5.105.186.0/23
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0-5.105.204.255
5.105.206.0/23
5.105.214.0-5.105.216.255
5.105.226.0/24
5.105.229.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ef:70:b6:10:ca:23:7e:4e:15:af:23:92:1e:e7:7c:ba:84:
dd:72:ec:42:63:e1:7d:eb:bc:d9:62:04:34:ae:f9:e5:5b:81:
fc:0d:c6:92:79:d7:a6:21:bb:b8:81:dc:32:8b:05:ff:17:5d:
98:78:b6:5d:30:82:a7:4b:6f:80:fa:b4:28:a4:b8:86:5f:c7:
c7:2d:f9:62:94:fc:77:da:4d:42:d0:de:e2:fe:e9:ca:6c:99:
c2:fd:8f:dd:51:a7:39:17:ff:56:94:97:5e:23:74:dd:75:e3:
90:43:fc:ca:32:60:60:4f:fd:73:89:ed:df:27:50:e6:1c:09:
73:72:ae:16:61:aa:35:dd:71:40:0f:0c:29:b9:2a:c1:a7:b2:
c1:76:d5:01:df:e5:51:0a:3f:47:4d:1d:b5:0b:a9:4c:4f:7e:
71:76:b2:17:6a:11:69:67:6f:f0:1e:60:2c:e8:4a:de:a2:94:
d9:e9:51:0b:ce:14:ce:be:8e:8e:3b:31:04:7d:71:95:0d:54:
93:2b:e8:ae:f1:06:8a:6a:97:d3:25:54:1d:f5:18:d0:39:10:
7f:7b:c6:48:83:8d:af:85:c9:65:fa:f2:55:35:14:4e:86:a2:
57:bb:a5:1f:ff:d7:70:fb:c5:96:f1:b5:c0:46:ec:f8:a7:55:
19:52:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:06 2025 by rpki-client