Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qMiiEDSIjTp3fW0fBjGqvZEziwg.roa
File: qMiiEDSIjTp3fW0fBjGqvZEziwg.roa (raw, json)
Hash identifier: Xr+9TTBYhfobpnefZKTtqEJIwgu8PWKA0Gv9xy47fJk=
Subject key identifier: A8:C8:A2:10:34:88:8D:3A:77:7D:6D:1F:06:31:AA:BD:91:33:8B:08
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018489E430E1DC90E2B840F78B1DC4845243
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qMiiEDSIjTp3fW0fBjGqvZEziwg.roa
Signing time: Fri 18 Nov 2022 08:39:04 +0000
ROA not before: Fri 18 Nov 2022 08:39:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.151.0/24 maxlen: 24
5.105.150.0/24 maxlen: 24
5.105.149.0/24 maxlen: 24
5.105.148.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.161.0/24 maxlen: 24
5.105.160.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.163.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.89.0/24 maxlen: 24
5.105.88.0/24 maxlen: 24
5.105.87.0/24 maxlen: 24
5.105.86.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.110.0/24 maxlen: 24
5.105.107.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.233.0/24 maxlen: 24
5.105.232.0/24 maxlen: 24
5.105.227.0/24 maxlen: 24
5.105.236.0/24 maxlen: 24
5.105.235.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.234.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.251.0/24 maxlen: 24
5.105.250.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.255.0/24 maxlen: 24
5.105.254.0/24 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.176.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.192.0/24 maxlen: 24
5.105.191.0/24 maxlen: 24
5.105.190.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.194.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.219.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.220.0/24 maxlen: 24
5.105.24.0/24 maxlen: 24
5.105.28.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.42.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.56.0/24 maxlen: 24
5.105.58.0/24 maxlen: 24
5.105.60.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.105.0.0/24 maxlen: 24
5.105.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:89:e4:30:e1:dc:90:e2:b8:40:f7:8b:1d:c4:84:52:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 18 08:39:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8c8a21034888d3a777d6d1f0631aabd91338b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:c1:86:d7:d6:2a:31:be:ad:68:19:26:03:
a0:0b:a1:66:27:be:92:3a:2d:94:5a:9a:6a:2d:bf:
a1:28:a0:cc:e0:75:04:b0:7b:ff:61:3d:b3:f7:34:
0b:16:23:a8:f3:63:c0:e8:4c:cc:94:a0:30:2f:f5:
b1:6d:63:81:fc:fd:ee:93:3a:63:1f:d7:83:d9:47:
3f:15:e7:2c:e5:5c:24:bd:c2:7a:b0:28:ea:05:a5:
11:e3:f1:c0:3d:42:f8:84:3d:9b:aa:c9:33:93:da:
1e:ea:f2:00:85:a9:2f:ed:28:cf:19:68:60:ba:57:
b1:f4:1e:ee:d6:4b:8a:33:d5:85:d8:03:b8:6b:a5:
4b:b3:ed:d9:bb:b9:ca:38:bc:18:70:ec:14:d9:e8:
51:f8:54:5f:ea:62:64:41:70:e6:b6:92:b7:80:d5:
4c:a9:fa:5d:be:85:50:22:ce:1a:8a:08:09:ce:78:
64:db:b2:47:3e:81:cd:73:c6:ce:26:7d:35:04:22:
d9:93:ba:ee:a3:48:bc:3f:17:30:d6:57:ec:c6:f8:
ab:ca:e6:1c:ff:fe:df:dd:90:e8:6b:bb:f4:b5:b2:
56:7e:40:6f:fb:f6:44:b7:7f:b9:c2:05:de:d7:64:
02:ef:63:2c:af:36:a3:cb:f7:75:94:15:a6:50:ba:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C8:A2:10:34:88:8D:3A:77:7D:6D:1F:06:31:AA:BD:91:33:8B:08
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qMiiEDSIjTp3fW0fBjGqvZEziwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.0.0/24
5.105.6.0/24
5.105.24.0/24
5.105.26.0/24
5.105.28.0/24
5.105.30.0-5.105.33.255
5.105.38.0/23
5.105.42.0/23
5.105.56.0/24
5.105.58.0-5.105.60.255
5.105.62.0/23
5.105.68.0/23
5.105.72.0/24
5.105.76.0/23
5.105.82.0/24
5.105.84.0/24
5.105.86.0-5.105.89.255
5.105.94.0/24
5.105.101.0/24
5.105.107.0/24
5.105.110.0-5.105.112.255
5.105.115.0/24
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.148.0/22
5.105.156.0/24
5.105.160.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.174.0-5.105.178.255
5.105.180.0/22
5.105.186.0/23
5.105.190.0-5.105.192.255
5.105.194.0/23
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0-5.105.221.255
5.105.227.0/24
5.105.229.0-5.105.230.255
5.105.232.0-5.105.236.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.247.0-5.105.251.255
5.105.254.0/23
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:24:25:b8:a2:3b:69:60:86:31:c8:96:05:af:89:e9:2a:56:
b9:a0:dc:01:3e:3c:2e:05:4f:b5:c7:ef:e7:9e:c3:07:5c:86:
45:9e:45:ea:8c:80:7d:5b:41:12:5d:4e:0c:e8:b8:a1:9e:73:
16:1b:30:44:6e:77:34:ff:15:5d:2f:9b:c6:7a:83:17:71:58:
aa:0e:84:e3:68:ad:ee:31:a4:9d:1c:34:3a:3e:71:e0:f4:b4:
8a:b3:49:cf:41:e1:3e:54:64:96:77:53:a0:45:e7:33:09:58:
19:25:6a:a1:63:cf:9e:6f:97:db:2c:e3:6c:6f:55:ce:77:b0:
7d:d7:c5:d1:e0:41:a6:19:09:c3:ea:2c:ed:8d:91:61:5f:57:
d6:ba:c9:be:32:3a:85:82:2a:a1:b8:7e:70:a9:9b:01:ca:fc:
f5:fd:14:5e:6e:da:5e:79:a2:80:93:ae:76:cf:08:78:77:79:
9b:2d:04:fe:7b:f4:a5:97:a2:13:fb:19:bb:11:da:68:52:83:
39:17:d9:32:4f:25:cf:4e:39:ee:65:7f:9b:32:3c:f7:57:e5:
0d:5b:25:7d:5d:f8:4d:43:70:0c:78:aa:aa:3c:33:5b:cb:06:
8b:bf:db:2f:a5:fa:29:1d:aa:d6:5a:68:cc:dd:e1:fd:05:79:
b6:5d:45:0f
-----BEGIN CERTIFICATE-----
MIIGyzCCBbOgAwIBAgISAYSJ5DDh3JDiuED3ix3EhFJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjIxMTE4MDgzOTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGM4YTIxMDM0ODg4ZDNhNzc3ZDZkMWYwNjMxYWFiZDkxMzM4YjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeLBhtfWKjG+rWgZJgOgC6FmJ76S
Oi2UWppqLb+hKKDM4HUEsHv/YT2z9zQLFiOo82PA6EzMlKAwL/WxbWOB/P3ukzpj
H9eD2Uc/Fecs5VwkvcJ6sCjqBaUR4/HAPUL4hD2bqskzk9oe6vIAhakv7SjPGWhg
ulex9B7u1kuKM9WF2AO4a6VLs+3Zu7nKOLwYcOwU2ehR+FRf6mJkQXDmtpK3gNVM
qfpdvoVQIs4aiggJznhk27JHPoHNc8bOJn01BCLZk7ruo0i8Pxcw1lfsxviryuYc
//7f3ZDoa7v0tbJWfkBv+/ZEt3+5wgXe12QC72Msrzajy/d1lBWmULqXMwIDAQAB
o4ID1zCCA9MwHQYDVR0OBBYEFKjIohA0iI06d31tHwYxqr2RM4sIMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvcU1paUVEU0lqVHAzZlcwZkJqR3F2WkV6aXdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB6wYIKwYBBQUHAQcBAf8EggHaMIIB1jCCAdIEAgABMIIB
ygMEAAVpAAMEAAVpBgMEAAVpGAMEAAVpGgMEAAVpHDAMAwQBBWkeAwQBBWkgAwQB
BWkmAwQBBWkqAwQABWk4MAwDBAEFaToDBAAFaTwDBAEFaT4DBAEFaUQDBAAFaUgD
BAEFaUwDBAAFaVIDBAAFaVQwDAMEAQVpVgMEAQVpWAMEAAVpXgMEAAVpZQMEAAVp
azAMAwQBBWluAwQABWlwAwQABWlzMAwDBAAFaX0DBAcFaQAwDAMEAAVpgwMEAAVp
hAMEAAVphgMEAAVpiAMEAQVpijAMAwQABWmNAwQEBWmAAwQCBWmUAwQABWmcMAwD
BAUFaaADBAAFaaYDBAAFaagDBAAFaaoDBAAFaawwDAMEAQVprgMEAAVpsgMEAgVp
tAMEAQVpujAMAwQBBWm+AwQABWnAAwQBBWnCMAwDBAAFacUDBAMFacADBAEFacoD
BAEFac4DBAAFadYDBAAFadgwDAMEAQVp2gMEAQVp3AMEAAVp4zAMAwQABWnlAwQA
BWnmMAwDBAMFaegDBAAFaewwDAMEAAVp7wMEAAVp8AMEAAVp8gMEAQVp9DAMAwQA
BWn3AwQCBWn4AwQBBWn+AwQCVf+0AwQAwS7SMA0GCSqGSIb3DQEBCwUAA4IBAQBe
JCW4ojtpYIYxyJYFr4npKla5oNwBPjwuBU+1x+/nnsMHXIZFnkXqjIB9W0ESXU4M
6LihnnMWGzBEbnc0/xVdL5vGeoMXcViqDoTjaK3uMaSdHDQ6PnHg9LSKs0nPQeE+
VGSWd1OgReczCVgZJWqhY8+eb5fbLONsb1XOd7B918XR4EGmGQnD6iztjZFhX1fW
usm+MjqFgiqhuH5wqZsByvz1/RRebtpeeaKAk652zwh4d3mbLQT+e/Sll6IT+xm7
EdpoUoM5F9kyTyXPTjnuZX+bMjz3V+UNWyV9XfhNQ3AMeKqqPDNbywaLv9svpfop
HarWWmjM3eH9BXm2XUUP
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org