Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/f0em0-Hs-VdDK4Nkkx4gPqBHItU.roa
File: f0em0-Hs-VdDK4Nkkx4gPqBHItU.roa (raw, json)
Hash identifier: qNfRDNRrQ4wvjyoKJRd28JDvoagBRKhjX4vp39frX2A=
Subject key identifier: 7F:47:A6:D3:E1:EC:F9:57:43:2B:83:64:93:1E:20:3E:A0:47:22:D5
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185463DED74CFF681D2D5B6527E2D177821
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/f0em0-Hs-VdDK4Nkkx4gPqBHItU.roa
Signing time: Sat 24 Dec 2022 22:25:41 +0000
ROA not before: Sat 24 Dec 2022 22:25:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:46:3d:ed:74:cf:f6:81:d2:d5:b6:52:7e:2d:17:78:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 24 22:25:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f47a6d3e1ecf957432b8364931e203ea04722d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:de:2f:d5:18:f3:4a:40:b1:a0:17:d4:e8:
57:87:32:59:36:32:77:c2:f7:de:cc:13:49:73:e2:
c0:f9:6a:ae:24:c5:4b:08:24:fe:11:e8:c5:2c:81:
a3:4f:c5:7d:47:15:28:4f:28:7d:e2:2e:ff:82:f5:
3d:9c:6d:ad:e6:ef:45:35:b4:4b:94:f8:51:7a:be:
42:c6:f8:d0:b5:40:e5:37:63:45:d8:87:43:c4:a8:
ce:96:d4:23:43:fa:55:db:78:6c:ff:ae:11:ac:df:
f1:7e:85:75:fa:08:c0:e1:d2:0d:ab:1d:54:d1:63:
65:45:26:86:83:6a:91:b7:d9:06:1f:ab:b8:e6:2c:
8e:ad:f2:0d:81:10:dc:a2:db:15:6a:c0:9d:29:2e:
17:63:c0:9d:a7:1e:c3:98:ce:80:09:74:fc:c5:c3:
93:7e:46:2f:e1:73:59:03:3c:86:9c:20:bc:d3:4c:
c6:84:39:77:3f:7a:7f:ec:fd:8f:26:1c:cb:f1:91:
f8:46:d5:79:c3:c9:6f:bc:18:30:bd:bf:3b:47:20:
5c:5a:cf:2b:14:c8:db:d2:58:cc:57:a1:20:90:15:
64:70:7b:87:0b:3e:94:d1:7e:b9:c9:bc:07:4f:19:
56:96:c6:cc:91:7c:e2:bc:4b:c1:83:53:67:76:07:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:47:A6:D3:E1:EC:F9:57:43:2B:83:64:93:1E:20:3E:A0:47:22:D5
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/f0em0-Hs-VdDK4Nkkx4gPqBHItU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.12.0/24
5.105.19.0/24
5.105.26.0/24
5.105.40.0/24
5.105.43.0/24
5.105.63.0/24
5.105.68.0/23
5.105.72.0/24
5.105.74.0/24
5.105.76.0/24
5.105.79.0-5.105.82.255
5.105.84.0/24
5.105.94.0/23
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.156.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0-5.105.230.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:b1:59:fa:64:53:d9:13:0c:84:b5:f6:bb:ec:b7:c1:50:50:
6c:7a:ac:41:0d:6e:c4:80:a8:91:10:2d:af:41:bf:13:c1:bc:
a2:ec:32:9a:0c:f4:73:57:79:06:11:37:db:14:80:c6:cc:72:
6b:21:e0:1c:22:18:af:3f:78:40:47:69:63:73:09:3a:30:f7:
68:2d:66:8c:27:e2:83:dd:45:89:5d:e1:9e:7c:13:38:4d:1b:
29:b1:e2:b7:23:a4:8b:e1:db:66:ad:f8:83:05:3a:dd:73:f5:
20:58:65:60:6d:03:2d:e8:52:4d:46:84:14:5e:90:df:c1:f2:
f6:30:38:d3:a2:7f:ad:7a:a2:2f:53:af:5f:44:ce:87:a1:82:
2b:09:f1:2b:a6:51:d7:15:42:a0:da:97:5b:d7:33:52:b1:20:
da:05:b2:87:21:7b:3c:a7:3a:df:f5:7f:d2:9d:fe:fc:4f:2b:
38:6d:cc:ac:ff:fc:54:a4:a1:b6:3e:4d:3e:01:76:7e:43:5b:
33:db:3d:f1:59:9f:66:68:79:68:37:80:d4:bf:0c:e4:b9:c2:
06:d8:0f:96:52:53:f8:d9:78:85:47:8f:58:a2:d3:b7:07:35:
0c:e2:ee:04:70:78:34:55:1c:65:2f:7f:87:a3:79:5f:da:14:
5f:85:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org