Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/2vw1HvbTr-ut1Hylt7Dnc8MuPik.roa
File: 2vw1HvbTr-ut1Hylt7Dnc8MuPik.roa (raw, json)
Hash identifier: VSuWyUgfeuUjUw9lIeImOajamrRJxlo05Flf3Oj86dY=
Subject key identifier: DA:FC:35:1E:F6:D3:AF:EB:AD:D4:7C:A5:B7:B0:E7:73:C3:2E:3E:29
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01829EF794BCDCC14A657362D127470599CF
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/2vw1HvbTr-ut1Hylt7Dnc8MuPik.roa
Signing time: Mon 15 Aug 2022 00:46:41 +0000
ROA not before: Mon 15 Aug 2022 00:46:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58305
IP address blocks: 45.43.64.0/19 maxlen: 24
45.43.80.0/22 maxlen: 24
198.105.96.0/19 maxlen: 24
155.254.32.0/22 maxlen: 24
155.254.32.0/19 maxlen: 24
155.254.48.0/23 maxlen: 23
155.254.63.0/24 maxlen: 24
155.254.61.0/24 maxlen: 24
107.161.160.0/24 maxlen: 24
107.161.165.0/24 maxlen: 24
107.161.166.0/24 maxlen: 24
107.161.161.0/24 maxlen: 24
107.161.162.0/24 maxlen: 24
107.161.164.0/24 maxlen: 24
107.161.172.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.169.0/24 maxlen: 24
107.161.170.0/24 maxlen: 24
107.161.171.0/24 maxlen: 24
107.181.128.0/19 maxlen: 24
162.220.240.0/24 maxlen: 24
162.220.242.0/24 maxlen: 24
162.220.240.0/21 maxlen: 24
162.220.241.0/24 maxlen: 24
113.20.156.0/22 maxlen: 24
107.161.173.0/24 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
162.217.250.0/24 maxlen: 24
2a05:9f40::/29 maxlen: 48
2a07:9944:20::/48 maxlen: 48
2a07:9944:40::/48 maxlen: 48
2a07:9942:39d7::/48 maxlen: 48
2a07:9944:2222::/48 maxlen: 48
2a07:9940::/29 maxlen: 48
2a07:9944:10::/48 maxlen: 48
2a07:9944:30::/48 maxlen: 48
2a02:2ca7:2e::/48 maxlen: 48
2a07:9942:39d6::/48 maxlen: 48
2a02:2ca0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9e:f7:94:bc:dc:c1:4a:65:73:62:d1:27:47:05:99:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Aug 15 00:46:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dafc351ef6d3afebadd47ca5b7b0e773c32e3e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:48:b7:6b:ee:29:8b:a4:20:80:1c:56:ff:
9a:7a:cb:91:a4:9c:bb:d7:2e:1a:87:98:bb:06:99:
92:71:96:87:2b:ec:06:5c:07:c9:60:e8:8b:6e:6f:
47:f8:a1:6d:53:f3:54:99:e8:8e:36:95:5b:d7:04:
de:13:4f:3b:9d:c4:e7:40:87:4e:66:8b:11:28:a5:
01:aa:b9:20:ee:9c:a3:9b:2a:24:84:11:a2:4b:cd:
e4:cb:56:28:a3:70:71:91:4d:ce:c5:56:ea:4b:89:
8f:da:0f:85:87:06:cf:1e:7d:d5:2c:19:50:9f:69:
af:48:fe:62:0b:22:fc:c4:2f:ec:ed:af:7f:14:19:
af:d6:41:0b:41:18:f4:48:fa:a9:c4:e0:07:d7:d2:
6f:90:69:2e:48:c7:97:2a:b7:0c:99:80:0c:01:c3:
43:3a:fb:fd:3b:2d:66:b7:24:c0:2c:b3:7c:1c:c4:
4c:fe:23:0c:6d:e3:a1:35:64:78:c9:e4:6f:79:e6:
9b:e4:44:aa:04:89:27:68:e7:21:ba:44:ad:49:95:
e0:56:58:8d:b2:67:e2:32:06:81:bc:e0:ac:d3:9f:
75:52:b4:78:04:69:64:ea:a4:84:b5:e4:d7:63:56:
ab:92:d7:b2:25:22:8b:a2:b9:0f:f5:67:32:e8:5d:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FC:35:1E:F6:D3:AF:EB:AD:D4:7C:A5:B7:B0:E7:73:C3:2E:3E:29
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/2vw1HvbTr-ut1Hylt7Dnc8MuPik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/19
107.161.160.0-107.161.162.255
107.161.164.0-107.161.166.255
107.161.168.0-107.161.173.255
107.181.128.0/19
113.20.156.0/22
155.254.32.0/19
162.217.248.0-162.217.250.255
162.220.240.0/21
198.105.96.0/19
IPv6:
2a02:2ca0::/29
2a05:9f40::/29
2a07:9940::/29
Signature Algorithm: sha256WithRSAEncryption
13:c6:b7:b2:d9:e8:e4:29:a0:76:29:68:b7:32:38:99:12:0d:
69:57:3d:b0:61:32:9d:98:a7:62:f0:28:0d:a6:31:28:28:34:
75:93:33:eb:f8:bf:0b:10:b6:93:f8:5b:7a:67:e4:6c:d4:89:
b2:ee:70:21:9e:92:0c:ef:cc:07:2a:dc:47:74:ad:7f:05:0e:
e8:30:1f:af:7b:6b:47:0b:40:d9:aa:06:f9:71:87:61:9d:32:
c3:53:a0:d3:b4:c6:bb:1a:40:e8:f0:af:ff:99:3b:15:c3:7e:
72:63:a3:bf:44:46:c2:11:a9:7f:5e:81:64:66:e0:51:38:ae:
11:ba:6b:59:b7:12:e3:88:ad:f4:48:12:89:2f:62:0f:20:ab:
6e:d7:e4:68:05:1c:a5:95:aa:80:e6:5c:15:83:16:f8:d1:2e:
a8:78:15:5f:34:08:c3:c5:63:1e:7b:fd:42:80:de:8f:3f:ff:
61:c1:50:c6:66:4e:b8:4b:77:50:5c:60:c0:9a:26:8c:69:1a:
13:b1:08:d8:2f:e0:92:ec:33:77:0e:d0:f9:b5:21:d8:7c:85:
85:ef:a2:30:73:5c:dc:e0:ba:e8:e0:43:41:e2:10:83:97:ea:
8a:7b:b3:24:49:bc:9b:1b:e3:4a:1b:ca:52:5c:3a:7c:22:8c:
0a:0c:5c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-fra.rpki-client.org