Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/s-M8nQKwSdAa3Na3zKkRvwj4pOs.roa
File: s-M8nQKwSdAa3Na3zKkRvwj4pOs.roa (raw, json)
Hash identifier: 7sUkUQ73bUEPZzKG1PuDeDBXoczzARPiPlmsQSY/NnI=
Subject key identifier: B3:E3:3C:9D:02:B0:49:D0:1A:DC:D6:B7:CC:A9:11:BF:08:F8:A4:EB
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01899B9EDE6D0C610120A78CCB7817AF8436
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/s-M8nQKwSdAa3Na3zKkRvwj4pOs.roa
Signing time: Fri 28 Jul 2023 08:30:27 +0000
ROA not before: Fri 28 Jul 2023 08:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.124.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.102.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.209.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.220.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.14.0/24 maxlen: 24
5.105.13.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:9e:de:6d:0c:61:01:20:a7:8c:cb:78:17:af:84:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 28 08:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3e33c9d02b049d01adcd6b7cca911bf08f8a4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:73:74:28:eb:4b:af:b4:c2:2f:22:6b:ab:36:
43:1e:4d:d2:34:aa:8b:77:5e:7a:57:bd:d0:8b:d2:
a4:6c:28:e2:4f:33:9a:ed:d0:fc:2a:f0:a6:5f:3e:
5d:89:3d:f0:cc:5e:aa:59:da:a0:e4:4d:3f:45:a1:
a3:93:9c:66:e4:01:09:4a:8c:c7:96:cf:25:6c:06:
cf:2e:25:16:1f:b3:e8:40:3e:df:f8:c4:bc:57:73:
c2:32:a5:8c:dd:fc:de:64:3a:9e:f0:77:ac:2c:b9:
88:a5:89:a5:a2:6b:25:fb:89:4f:09:7a:3e:e8:8f:
b6:a6:46:58:21:6d:b4:8c:a2:b2:03:dd:82:73:e6:
11:6e:c1:c8:56:a8:8a:c2:d6:fd:e5:a0:48:9c:c0:
d8:68:6f:ad:9e:c7:29:32:43:0d:37:02:ce:64:45:
49:3a:c2:f9:23:1b:43:e9:77:04:54:09:69:3a:c0:
41:63:3e:14:d7:fd:76:37:67:dc:06:19:79:90:82:
a7:59:7e:12:20:4b:e2:97:3d:37:2b:a1:b5:48:98:
e6:aa:cf:3f:3f:ae:99:8d:22:3d:00:79:72:8c:00:
2d:59:a9:54:d2:5c:4b:0c:29:ad:b9:10:bf:64:1a:
6e:69:01:96:d7:8e:04:1a:e4:ae:75:a3:00:df:92:
ac:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E3:3C:9D:02:B0:49:D0:1A:DC:D6:B7:CC:A9:11:BF:08:F8:A4:EB
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/s-M8nQKwSdAa3Na3zKkRvwj4pOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.7.0/24
5.105.13.0-5.105.15.255
5.105.18.0/24
5.105.21.0/24
5.105.26.0/24
5.105.30.0/24
5.105.32.0/23
5.105.36.0/23
5.105.45.0/24
5.105.47.0/24
5.105.49.0-5.105.51.255
5.105.66.0/24
5.105.69.0/24
5.105.94.0/24
5.105.101.0-5.105.102.255
5.105.111.0/24
5.105.113.0/24
5.105.117.0-5.105.118.255
5.105.122.0/24
5.105.124.0/24
5.105.126.0/23
5.105.134.0/24
5.105.136.0/24
5.105.143.0/24
5.105.157.0/24
5.105.162.0/24
5.105.164.0/24
5.105.166.0/24
5.105.168.0-5.105.170.255
5.105.185.0-5.105.187.255
5.105.198.0-5.105.200.255
5.105.202.0/23
5.105.209.0/24
5.105.216.0/24
5.105.218.0/24
5.105.220.0/23
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0/24
5.105.249.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:85:36:d4:68:22:8e:f6:09:2b:c7:d5:60:9d:f2:b5:dc:86:
be:af:24:45:32:02:8d:46:75:6d:40:cc:0d:3b:73:eb:e4:3c:
36:dc:24:ac:d4:ae:c4:98:60:4f:7d:fb:54:81:2a:40:dd:c3:
d5:a9:88:83:a5:21:9c:bc:59:f7:e8:e9:c6:f0:1d:ca:74:e5:
56:0f:3c:09:a0:ac:6e:bf:ac:51:5f:d0:d4:30:26:e7:c8:59:
ef:04:54:57:21:40:de:26:ea:05:6b:e6:18:75:6f:d6:e2:62:
eb:fb:f5:ea:69:8c:94:1c:b9:52:fa:82:f7:8d:e0:7b:56:1e:
3b:6a:20:2e:76:fd:04:26:60:72:cb:0d:d0:5a:35:3d:1d:5b:
30:f0:e3:78:e4:52:90:4a:6b:5f:18:d8:cd:74:8d:a3:8e:cd:
b9:e1:9c:9d:22:65:12:da:62:aa:c5:e6:b4:94:92:9e:58:93:
c1:49:1d:41:c0:7a:d4:43:67:e4:10:9e:0b:f9:17:4b:ac:27:
2b:22:59:58:28:6a:07:d0:2e:5b:dc:7e:12:a7:68:d6:c2:85:
82:d1:0c:98:f5:5d:43:00:63:65:9f:03:55:bb:65:30:98:92:
b0:b9:84:dc:b3:97:d1:9b:21:9b:26:04:c9:e0:43:f9:b9:10:
7f:63:56:c0
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgISAYmbnt5tDGEBIKeMy3gXr4Q2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNzI4MDgzMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2UzM2M5ZDAyYjA0OWQwMWFkY2Q2YjdjY2E5MTFiZjA4ZjhhNGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3N0KOtLr7TCLyJrqzZDHk3SNKqL
d156V73Qi9KkbCjiTzOa7dD8KvCmXz5diT3wzF6qWdqg5E0/RaGjk5xm5AEJSozH
ls8lbAbPLiUWH7PoQD7f+MS8V3PCMqWM3fzeZDqe8HesLLmIpYmlomsl+4lPCXo+
6I+2pkZYIW20jKKyA92Cc+YRbsHIVqiKwtb95aBInMDYaG+tnscpMkMNNwLOZEVJ
OsL5IxtD6XcEVAlpOsBBYz4U1/12N2fcBhl5kIKnWX4SIEvilz03K6G1SJjmqs8/
P66ZjSI9AHlyjAAtWalU0lxLDCmtuRC/ZBpuaQGW144EGuSudaMA35KsAwIDAQAB
o4IDVTCCA1EwHQYDVR0OBBYEFLPjPJ0CsEnQGtzWt8ypEb8I+KTrMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvcy1NOG5RS3dTZEFhM05hM3pLa1J2d2o0cE9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBaQYIKwYBBQUHAQcBAf8EggFYMIIBVDCCAVAEAgABMIIB
SAMEAAVpAgMEAAVpBzAMAwQABWkNAwQEBWkAAwQABWkSAwQABWkVAwQABWkaAwQA
BWkeAwQBBWkgAwQBBWkkAwQABWktAwQABWkvMAwDBAAFaTEDBAIFaTADBAAFaUID
BAAFaUUDBAAFaV4wDAMEAAVpZQMEAAVpZgMEAAVpbwMEAAVpcTAMAwQABWl1AwQA
BWl2AwQABWl6AwQABWl8AwQBBWl+AwQABWmGAwQABWmIAwQABWmPAwQABWmdAwQA
BWmiAwQABWmkAwQABWmmMAwDBAMFaagDBAAFaaowDAMEAAVpuQMEAgVpuDAMAwQB
BWnGAwQABWnIAwQBBWnKAwQABWnRAwQABWnYAwQABWnaAwQBBWncAwQBBWnkMAwD
BAAFae8DBAAFafADBAEFafQDBAAFafcDBAAFafkDBAAFtLADBADBLtIwDQYJKoZI
hvcNAQELBQADggEBAByFNtRoIo72CSvH1WCd8rXchr6vJEUyAo1GdW1AzA07c+vk
PDbcJKzUrsSYYE99+1SBKkDdw9WpiIOlIZy8Wffo6cbwHcp05VYPPAmgrG6/rFFf
0NQwJufIWe8EVFchQN4m6gVr5hh1b9biYuv79eppjJQcuVL6gveN4HtWHjtqIC52
/QQmYHLLDdBaNT0dWzDw43jkUpBKa18Y2M10jaOOzbnhnJ0iZRLaYqrF5rSUkp5Y
k8FJHUHAetRDZ+QQngv5F0usJysiWVgoagfQLlvcfhKnaNbChYLRDJj1XUMAY2Wf
A1W7ZTCYkrC5hNyzl9GbIZsmBMngQ/m5EH9jVsA=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:32 2025 by rpki-client