Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wXPNIOtDWqEh0dlI6ER2f_GajoM.roa
File: wXPNIOtDWqEh0dlI6ER2f_GajoM.roa (raw, json)
Hash identifier: SefGoD8qv8F1kFgWvBG4MdFQepMEAyHy34ifp8R/4II=
Subject key identifier: C1:73:CD:20:EB:43:5A:A1:21:D1:D9:48:E8:44:76:7F:F1:9A:8E:83
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01852FD8F6F4262BB66AAF917D840F5A0767
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wXPNIOtDWqEh0dlI6ER2f_GajoM.roa
Signing time: Tue 20 Dec 2022 14:03:46 +0000
ROA not before: Tue 20 Dec 2022 14:03:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:d8:f6:f4:26:2b:b6:6a:af:91:7d:84:0f:5a:07:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 20 14:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c173cd20eb435aa121d1d948e844767ff19a8e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:1d:b3:0a:d0:cf:49:be:66:19:b1:16:5b:
ba:53:89:a6:d1:26:ca:30:4e:a3:3a:c7:b6:00:35:
48:11:cf:e1:c5:0b:43:b0:ad:76:31:90:33:16:55:
89:bf:f5:2c:ca:86:be:4d:6b:1c:e0:04:cf:cc:be:
0f:b8:ae:19:4a:b4:5a:af:82:2e:72:33:41:2b:0f:
0a:1f:3e:ac:87:55:27:19:06:5e:7f:40:11:7f:62:
4b:b6:b4:e8:5a:d8:a9:30:70:1a:1f:a4:cb:ca:64:
de:96:f8:66:db:0f:e9:19:e6:34:73:3c:30:3a:f5:
f5:9f:37:87:47:16:cc:3d:f8:05:1d:9b:bb:63:c5:
f2:b2:85:bb:81:67:b5:6d:a0:c7:b6:71:ab:da:23:
91:1d:4b:ba:7b:7a:4e:f0:ab:13:62:0f:b9:d1:e9:
f7:ef:44:08:3e:5a:21:43:36:5d:db:7e:34:33:10:
42:e8:fc:de:02:e4:a8:b6:84:3c:b1:69:08:8f:96:
13:12:f7:2d:f2:ce:eb:1e:b0:ef:f1:2b:0d:69:8d:
34:6e:36:4d:17:f7:73:e5:13:aa:63:42:6b:5f:7b:
b4:ed:d3:88:d2:29:cd:54:7e:86:d4:d5:b5:e9:33:
3f:eb:38:27:34:42:7c:7a:a8:7a:59:eb:09:4f:11:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:73:CD:20:EB:43:5A:A1:21:D1:D9:48:E8:44:76:7F:F1:9A:8E:83
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wXPNIOtDWqEh0dlI6ER2f_GajoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.4.0/24
5.105.12.0/24
5.105.19.0/24
5.105.26.0/24
5.105.40.0/24
5.105.43.0/24
5.105.49.0/24
5.105.63.0/24
5.105.68.0/23
5.105.72.0/24
5.105.76.0/24
5.105.79.0-5.105.82.255
5.105.84.0/24
5.105.94.0/23
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.156.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0-5.105.230.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
41:36:ae:29:6c:b5:13:c3:0c:fd:32:bb:6c:ef:0b:88:f8:ba:
ae:d2:34:6a:45:34:bd:32:c3:ee:0a:12:61:7a:55:f6:08:6f:
48:e0:09:70:9f:9d:c2:fa:41:2a:4e:ac:d9:48:b8:44:07:55:
c3:c3:8f:37:db:31:5b:90:74:29:da:69:b2:88:be:28:95:73:
2a:cf:ce:15:f8:81:0a:33:af:c5:b0:a0:eb:b2:a4:89:97:7e:
f2:54:c3:b4:0a:03:7d:eb:cf:be:35:a8:fa:e1:de:89:e7:51:
53:89:5f:48:b4:12:4f:f5:ee:eb:36:cc:16:7d:85:60:11:3f:
e8:7e:5c:e0:5a:23:a9:7c:c1:a5:e2:23:c3:53:39:f2:6b:0b:
e5:ba:32:ff:5d:92:08:bb:58:67:3b:e8:44:6d:0d:f1:44:0d:
d6:b8:ef:95:16:99:5e:33:16:31:2b:0f:8f:7e:6f:05:6c:8d:
5c:e0:36:c7:4a:44:21:ce:4e:95:36:99:10:3c:5f:58:3e:09:
53:bd:f9:3c:69:41:4a:85:af:aa:f2:8f:08:78:ff:0f:5b:a7:
02:d7:6b:d9:40:81:27:53:b0:e2:92:c7:b6:f8:9b:a7:c4:41:
e7:aa:43:76:4f:d7:23:f2:e2:0d:29:a9:03:15:40:8c:65:d8:
28:99:4d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:59 2024 by rpki-client on console-ams.rpki-client.org