Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/m_bL7feh6M4vo-UZjMnNO2Y1oys.roa
File: m_bL7feh6M4vo-UZjMnNO2Y1oys.roa (raw, json)
Hash identifier: Vhw0N+GS3lUUraRvo2+BLZ36O4cS3dEzdLseaoAB4/M=
Subject key identifier: 9B:F6:CB:ED:F7:A1:E8:CE:2F:A3:E5:19:8C:C9:CD:3B:66:35:A3:2B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01850ACEB0D073804A319325F6B05B3F12BE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/m_bL7feh6M4vo-UZjMnNO2Y1oys.roa
Signing time: Tue 13 Dec 2022 09:26:35 +0000
ROA not before: Tue 13 Dec 2022 09:26:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:ce:b0:d0:73:80:4a:31:93:25:f6:b0:5b:3f:12:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 13 09:26:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bf6cbedf7a1e8ce2fa3e5198cc9cd3b6635a32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2b:6e:2a:92:f8:47:39:6f:e0:16:13:76:a1:
dc:27:b0:bf:20:62:4d:2f:9b:5c:18:64:e8:ec:02:
86:17:d5:7f:d8:1c:90:90:6d:53:fc:21:c2:a3:58:
94:95:62:26:90:9e:88:8c:89:96:16:70:53:69:37:
7f:b6:1b:92:77:5f:46:1e:75:c1:a0:07:fe:c2:a0:
a7:87:58:5c:42:96:1a:c2:05:0e:e8:54:5f:c6:6e:
ec:a8:36:5d:b0:9a:45:a2:bd:96:d5:cd:63:39:20:
de:60:01:b4:6c:2b:58:cf:9b:ed:36:ee:64:22:be:
53:59:0a:3f:96:89:3c:55:1e:4f:07:7c:dd:99:9a:
8c:39:43:26:2a:56:7f:f5:0d:0a:6f:21:51:ea:e2:
9e:f1:a3:d5:eb:57:89:ec:46:f4:27:b9:93:8f:e2:
c3:56:d8:f1:e5:82:c8:11:bc:5f:9b:41:61:5c:b3:
6e:69:57:c5:f0:49:ee:14:dc:22:a3:28:f1:21:46:
39:06:88:a0:c0:a8:73:29:00:3e:fb:d7:83:1f:9e:
8e:79:a9:3a:db:66:3b:2b:16:ba:50:06:50:3b:da:
4c:5f:6a:64:ee:42:1a:68:b7:45:eb:e5:a3:b9:3a:
c6:4a:c8:f5:78:46:74:f5:3d:0b:68:ce:4b:ac:a9:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F6:CB:ED:F7:A1:E8:CE:2F:A3:E5:19:8C:C9:CD:3B:66:35:A3:2B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/m_bL7feh6M4vo-UZjMnNO2Y1oys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.1.0/24
5.105.12.0/24
5.105.19.0/24
5.105.26.0/24
5.105.43.0/24
5.105.49.0/24
5.105.63.0/24
5.105.68.0/23
5.105.72.0/24
5.105.76.0/23
5.105.80.0-5.105.82.255
5.105.84.0/24
5.105.94.0/23
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.156.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0-5.105.230.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.248.0/23
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4b:d6:46:89:53:51:8e:4d:f8:13:ae:2f:0a:70:0f:86:fc:
cb:d9:cf:cf:2e:e0:5a:69:68:5d:56:b2:10:04:23:17:12:f9:
87:a7:a1:89:11:10:db:2c:d4:37:2f:f3:3f:93:d5:d6:40:94:
00:63:35:27:f3:e2:be:6b:42:44:e3:44:57:2e:f6:52:75:b4:
76:7a:5b:64:35:23:78:2f:e7:0f:4f:e8:7f:38:ec:93:73:8f:
8d:43:79:10:b0:ce:e2:60:a1:6d:57:9b:c7:eb:5f:a7:9f:81:
93:bd:a8:d8:96:ce:da:b0:87:a2:54:cd:61:22:5f:b7:09:e4:
80:16:b8:be:f1:a2:49:3f:44:7e:57:f4:4a:b7:9f:92:2d:64:
61:ff:3c:25:5e:e9:d3:bd:30:ba:91:fc:77:17:62:85:11:12:
36:cc:6f:a2:ef:7d:30:89:ba:19:27:3b:51:d4:b8:f3:5b:40:
f8:e0:7b:a5:f5:4c:20:37:d9:7c:12:7a:d3:07:67:3a:76:6b:
1a:3e:42:5b:b0:7e:01:9e:95:64:a4:52:3b:99:f8:b3:f5:3b:
1f:a6:74:36:70:33:67:cf:b7:c5:91:95:b8:6d:7d:40:d1:e1:
ee:88:2c:fd:93:b3:8e:a1:35:5a:14:7f:2a:14:39:a5:fb:80:
6f:dd:69:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org