Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ieZvr-ttxhgiCmRPY0GDni8WSf4.roa
File: ieZvr-ttxhgiCmRPY0GDni8WSf4.roa (raw, json)
Hash identifier: pyup0JXp9+p8k20PYNVGSnYq/Rj2vQxJEdrzLda2758=
Subject key identifier: 89:E6:6F:AF:EB:6D:C6:18:22:0A:64:4F:63:41:83:9E:2F:16:49:FE
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01850B7C9AAF3EAEA628B03BD4647A26CDDE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ieZvr-ttxhgiCmRPY0GDni8WSf4.roa
Signing time: Tue 13 Dec 2022 12:36:33 +0000
ROA not before: Tue 13 Dec 2022 12:36:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:7c:9a:af:3e:ae:a6:28:b0:3b:d4:64:7a:26:cd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 13 12:36:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89e66fafeb6dc618220a644f6341839e2f1649fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:e7:3a:b2:26:53:6e:ff:9e:85:45:d2:91:
f9:8c:73:df:e4:fb:e8:93:04:b5:69:61:40:1c:64:
06:bb:9a:0d:19:c4:9f:fb:61:38:75:85:99:51:e3:
1e:e5:a5:87:9a:a9:fa:74:69:62:cb:ae:d4:22:fe:
ce:61:22:ae:55:54:9f:d6:c5:79:5f:40:04:99:28:
81:f3:63:af:c9:39:8a:bf:2b:ef:e3:a5:83:bc:6f:
52:d3:df:fa:5a:a6:97:e7:a4:9d:b1:2c:d4:a4:0c:
7e:4a:31:dc:06:43:32:fb:9d:e4:79:1d:7a:ff:1c:
93:62:e7:6d:e2:07:7e:a7:e3:fb:89:c8:2d:c3:12:
38:31:da:93:11:d3:3b:54:64:c4:23:12:18:1f:ca:
3b:97:d9:f2:02:97:23:8b:38:b2:cf:af:18:1b:61:
44:84:52:91:e0:05:62:f3:32:b9:23:35:61:b8:0a:
52:b5:dd:e2:87:ba:01:41:6d:78:3d:b0:79:9a:f7:
ba:20:3f:b5:b9:b7:6a:8d:69:86:7e:6b:7a:66:5d:
ca:dd:c2:b7:3c:41:30:68:77:2c:cb:f3:42:20:9b:
57:d6:f1:de:4c:d7:ed:16:9f:56:b5:b4:ad:ab:af:
55:ca:d6:7b:d9:75:07:28:4e:8f:ec:5e:ee:b8:c9:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E6:6F:AF:EB:6D:C6:18:22:0A:64:4F:63:41:83:9E:2F:16:49:FE
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ieZvr-ttxhgiCmRPY0GDni8WSf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.1.0/24
5.105.12.0/24
5.105.19.0/24
5.105.26.0/24
5.105.43.0/24
5.105.49.0/24
5.105.63.0/24
5.105.68.0/23
5.105.72.0/24
5.105.76.0/23
5.105.79.0-5.105.82.255
5.105.84.0/24
5.105.94.0/23
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.156.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0-5.105.230.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.248.0/23
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:8f:6d:fe:2c:25:e8:da:3f:30:10:07:12:35:2c:90:17:f1:
79:6d:2c:3a:4b:51:7f:9c:81:89:a9:71:e4:c1:61:c2:5c:71:
20:6e:25:b7:21:c4:a7:c8:72:0c:24:74:f3:1e:b9:da:b0:36:
80:42:6f:44:bf:85:9c:e0:e9:5b:a6:a0:25:8e:57:9d:04:b5:
94:c1:0a:c1:13:21:12:e6:c9:b4:51:48:84:06:71:ad:75:57:
2e:9c:42:32:b4:5d:92:ae:50:f9:30:0a:e1:45:17:39:1f:72:
0e:96:9a:b2:65:45:d7:f6:bf:8c:e8:53:bf:03:f8:f0:b0:84:
99:d2:64:40:4e:15:70:95:d2:89:88:64:e6:9a:a1:0d:cb:dd:
20:25:44:1c:c6:a5:56:f4:dd:fe:7c:c2:13:04:64:9a:23:0d:
ed:61:cb:a5:14:06:22:e6:66:8d:83:37:12:ac:f2:cc:ed:39:
fb:93:2e:69:db:0e:c0:1d:64:52:ca:95:88:98:de:36:c3:81:
c9:06:27:f4:1a:a3:c0:0d:a3:50:ed:ce:b8:52:7b:af:a4:52:
9f:d9:81:be:15:a0:d8:4b:ee:a8:84:3c:32:e1:de:f7:17:88:
6d:da:e3:a6:fc:82:4b:4a:1c:a4:fb:d8:2a:2a:88:ea:16:17:
99:78:bc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org