Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oSUQAEpEwMTR3ac3WdbSdYb-z_M.roa
File: oSUQAEpEwMTR3ac3WdbSdYb-z_M.roa (raw, json)
Hash identifier: ta7SCebRzfI0/PtxMyMQNiPLbJBMETTVlITmqPjB7ok=
Subject key identifier: A1:25:10:00:4A:44:C0:C4:D1:DD:A7:37:59:D6:D2:75:86:FE:CF:F3
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189A85100E8C6010313C468EAC355A862F1
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oSUQAEpEwMTR3ac3WdbSdYb-z_M.roa
Signing time: Sun 30 Jul 2023 19:40:27 +0000
ROA not before: Sun 30 Jul 2023 19:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.124.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.209.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.220.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.14.0/24 maxlen: 24
5.105.13.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a8:51:00:e8:c6:01:03:13:c4:68:ea:c3:55:a8:62:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 30 19:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a12510004a44c0c4d1dda73759d6d27586fecff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:9c:ee:44:37:b4:05:6e:bb:6f:17:44:bf:
73:b1:cb:80:3d:ba:8a:98:1c:c4:0a:7b:3e:64:59:
ed:42:57:68:a9:78:26:76:bb:37:bc:c2:cd:de:8e:
e5:85:ea:3e:3d:08:a5:24:b5:02:71:bc:84:44:22:
97:b4:71:83:9b:f2:51:05:f5:fd:23:04:98:06:0f:
0f:d8:9c:70:4c:5e:fe:13:12:5d:71:83:eb:d4:46:
66:f6:59:ce:08:ca:74:95:38:eb:da:41:38:45:53:
06:ed:f9:c7:7d:7e:17:c4:1e:7f:94:9e:51:a4:1c:
cf:6b:7c:e1:e8:3f:1b:3e:e4:0f:34:85:ab:8a:48:
56:c9:bc:4d:a6:3f:e0:1c:31:5e:25:db:d8:27:e7:
aa:9a:96:f9:79:03:75:94:2f:54:72:d4:d7:26:cf:
e4:2c:99:31:9e:e4:d8:43:ce:a0:2c:69:22:b9:4a:
f5:ef:cd:a7:43:ca:82:5e:c5:ee:dd:96:c4:27:b7:
f8:d4:8e:42:04:18:e8:c4:ed:1c:9e:15:1e:5d:14:
66:05:2d:85:5e:bd:73:35:8a:c5:4e:df:f8:f1:2a:
7f:2e:f9:33:b1:1b:fd:da:17:3a:43:6b:b6:ee:1d:
90:69:01:70:58:c9:e6:53:21:7f:69:8a:24:57:1c:
67:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:25:10:00:4A:44:C0:C4:D1:DD:A7:37:59:D6:D2:75:86:FE:CF:F3
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/oSUQAEpEwMTR3ac3WdbSdYb-z_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.7.0/24
5.105.13.0-5.105.15.255
5.105.18.0/24
5.105.21.0/24
5.105.26.0/24
5.105.30.0/24
5.105.32.0/23
5.105.36.0/23
5.105.40.0/24
5.105.45.0/24
5.105.47.0/24
5.105.49.0-5.105.51.255
5.105.57.0/24
5.105.66.0/24
5.105.69.0/24
5.105.94.0/24
5.105.101.0-5.105.102.255
5.105.111.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.122.0/24
5.105.124.0/24
5.105.126.0/23
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.143.0/24
5.105.157.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.168.0-5.105.170.255
5.105.186.0/23
5.105.198.0-5.105.200.255
5.105.202.0/23
5.105.209.0/24
5.105.216.0/24
5.105.218.0/24
5.105.220.0/23
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0/24
5.105.249.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:dc:ba:6d:a0:af:4d:84:d8:d7:68:c9:b6:50:6a:54:f6:bf:
17:c4:ce:54:91:5a:1f:89:3c:02:95:e8:35:d6:79:72:80:7c:
18:07:7d:79:5e:04:75:ab:8f:8c:04:25:ae:25:58:d7:fe:be:
ab:ce:38:0b:0e:d4:1a:c1:29:64:c0:b2:98:54:56:d7:de:ee:
5a:04:d9:2a:18:3b:b7:44:ce:6a:2d:98:6c:2c:4b:e3:f5:3e:
ed:81:7e:e2:3f:1b:27:de:1c:ae:8d:ed:00:0c:c1:ff:8c:7f:
78:f7:ad:7e:fb:a0:a0:ee:af:05:a4:7a:42:4f:e2:51:24:6a:
f7:4f:46:91:f7:69:c6:6c:ec:77:45:c3:82:dc:ec:5b:8f:a3:
d9:97:6e:ea:fa:63:c8:c8:60:9f:a9:00:8f:e5:27:a5:71:3f:
f6:00:20:81:03:ca:0b:51:8b:76:7c:bf:a5:8e:2f:ca:19:34:
7b:6d:a3:77:9a:77:06:12:68:dd:6c:b9:39:5d:c3:33:c9:ce:
54:c6:15:d8:73:04:fa:70:8b:ac:e8:f1:10:3d:b9:c1:58:ae:
5e:66:98:a6:0f:8b:c9:6f:50:6e:98:20:3e:63:64:d3:05:b9:
cf:fe:a9:93:35:8d:10:95:b8:e7:43:0c:ff:d3:e7:d0:ed:ff:
c6:ba:51:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:27 2025 by rpki-client