Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oKYePACY07m2T8WPnOE1v803lTo.roa
File: oKYePACY07m2T8WPnOE1v803lTo.roa (raw, json)
Hash identifier: FOyj7c8VTb1h/fpbLI4428r0/QDVzaqlSIfAoH+zjyY=
Subject key identifier: A0:A6:1E:3C:00:98:D3:B9:B6:4F:C5:8F:9C:E1:35:BF:CD:37:95:3A
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01841D9F526D711212ECAEF14A4AD0E7E833
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oKYePACY07m2T8WPnOE1v803lTo.roa
Signing time: Fri 28 Oct 2022 08:04:51 +0000
ROA not before: Fri 28 Oct 2022 08:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.129.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.137.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.135.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.151.0/24 maxlen: 24
5.105.150.0/24 maxlen: 24
5.105.149.0/24 maxlen: 24
5.105.148.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.161.0/24 maxlen: 24
5.105.160.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.163.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
5.105.107.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.233.0/24 maxlen: 24
5.105.232.0/24 maxlen: 24
5.105.227.0/24 maxlen: 24
5.105.236.0/24 maxlen: 24
5.105.235.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.234.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.251.0/24 maxlen: 24
5.105.250.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.255.0/24 maxlen: 24
5.105.254.0/24 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.192.0/24 maxlen: 24
5.105.191.0/24 maxlen: 24
5.105.190.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.194.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.196.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.212.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.219.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.220.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.17.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.20.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.28.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.29.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.42.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.56.0/24 maxlen: 24
5.105.58.0/24 maxlen: 24
5.105.60.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:9f:52:6d:71:12:12:ec:ae:f1:4a:4a:d0:e7:e8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 28 08:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0a61e3c0098d3b9b64fc58f9ce135bfcd37953a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:43:ec:88:5f:02:47:98:8f:46:2f:27:44:
ec:01:10:c5:00:08:f6:9e:7d:07:3c:4f:92:3e:1b:
e4:65:07:6c:39:cf:6a:ba:5a:91:20:a3:e1:79:26:
50:b5:60:3f:85:16:e7:85:42:10:16:65:80:a8:b4:
31:66:d3:f1:67:83:15:0d:7a:11:a6:2e:6c:7e:f6:
0f:43:df:c0:9e:49:7c:6e:27:37:c4:0c:70:74:5e:
a0:d5:20:6a:e7:4c:d1:8c:ca:61:d7:78:46:1f:a4:
4e:51:b1:b1:2e:94:24:9a:67:c0:0f:cc:53:36:0e:
48:85:cf:34:bd:d6:a5:8d:2c:77:b9:ca:0d:f1:01:
52:17:f8:c2:3c:89:4a:d5:13:9f:94:08:95:1e:07:
dd:1e:4a:47:d8:ed:04:70:8f:21:45:79:61:d6:9e:
c2:f0:74:79:9d:9a:d1:b5:c6:46:a7:f9:53:05:ab:
dc:d2:f9:ab:39:89:e3:e7:2b:11:8e:62:db:d0:cb:
35:e0:ba:01:8c:47:6f:7e:35:a9:4a:a8:73:e4:ab:
61:43:fb:03:d1:7e:40:1a:6c:50:8f:77:c8:f0:aa:
4c:32:ef:c4:db:bf:b9:8e:c3:33:67:70:fe:4e:f0:
53:98:a9:7d:6d:d0:3b:7d:56:63:c0:93:93:22:d7:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A6:1E:3C:00:98:D3:B9:B6:4F:C5:8F:9C:E1:35:BF:CD:37:95:3A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oKYePACY07m2T8WPnOE1v803lTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.4.0/24
5.105.12.0/24
5.105.16.0-5.105.20.255
5.105.26.0/24
5.105.28.0-5.105.33.255
5.105.38.0-5.105.40.255
5.105.42.0/23
5.105.49.0-5.105.50.255
5.105.56.0/24
5.105.58.0-5.105.60.255
5.105.62.0/23
5.105.68.0/23
5.105.72.0/24
5.105.76.0/23
5.105.82.0/24
5.105.84.0/24
5.105.86.0-5.105.89.255
5.105.94.0/24
5.105.101.0-5.105.102.255
5.105.107.0/24
5.105.110.0-5.105.112.255
5.105.115.0/24
5.105.125.0-5.105.127.255
5.105.129.0/24
5.105.131.0-5.105.132.255
5.105.134.0-5.105.139.255
5.105.141.0-5.105.143.255
5.105.148.0/22
5.105.156.0/24
5.105.160.0-5.105.165.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.174.0-5.105.178.255
5.105.180.0/22
5.105.186.0/23
5.105.190.0-5.105.192.255
5.105.194.0-5.105.200.255
5.105.202.0/23
5.105.206.0/23
5.105.212.0/24
5.105.214.0-5.105.216.255
5.105.218.0-5.105.221.255
5.105.227.0/24
5.105.229.0-5.105.230.255
5.105.232.0-5.105.236.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.247.0-5.105.251.255
5.105.254.0/23
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:92:9d:6e:bb:f8:8a:46:94:1b:00:36:3f:a3:95:8f:8d:eb:
ac:c3:8f:51:be:bd:d1:0b:14:95:b6:e5:4c:1c:d6:09:3f:45:
58:db:03:d9:7f:ba:c8:69:17:96:91:0c:92:ce:11:e7:8b:ed:
1a:fc:bd:e2:6d:e9:00:31:5b:a6:75:38:9f:0b:e8:82:bd:6a:
38:f0:ae:36:88:30:86:0a:c4:28:da:95:02:13:10:31:ed:93:
82:32:3e:51:75:5f:e2:74:c3:8f:7b:9f:a8:f2:d4:3e:be:08:
6b:c6:d6:b2:91:9f:11:13:c7:65:27:5a:f5:05:f9:d0:3f:33:
4a:5c:a2:b0:88:25:f7:24:9c:73:46:f8:ad:ed:64:a5:87:88:
9e:d5:e0:01:13:19:75:5a:1f:1b:14:79:9b:77:5d:dc:f2:e7:
73:1c:b4:13:33:48:c4:72:de:ee:6d:ea:86:00:e0:c4:74:a7:
ce:4b:e0:24:03:d1:fc:1a:d7:e8:0e:1c:6e:fb:af:81:c3:06:
75:93:e6:2a:f5:44:8f:6b:73:ed:e9:3b:26:13:e3:28:6a:65:
d7:b6:b4:d2:e3:9a:30:dc:e6:4c:34:d3:52:8f:39:44:3b:7b:
bd:58:6e:b6:50:60:80:40:0c:6f:6c:19:02:89:b6:da:a9:2d:
49:91:1c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org