Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/mDuy3LePYXcLwJqoyNNk0V5aR5k.roa
File: mDuy3LePYXcLwJqoyNNk0V5aR5k.roa (raw, json)
Hash identifier: 7IXl9sl2cYzd3gcSgQKDC825Fq9SWlbQEKIXFqagMVE=
Subject key identifier: 98:3B:B2:DC:B7:8F:61:77:0B:C0:9A:A8:C8:D3:64:D1:5E:5A:47:99
Certificate issuer: /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial: 01856DB886E2661C46BF87331CC770BAAEF3
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/mDuy3LePYXcLwJqoyNNk0V5aR5k.roa
Signing time: Sun 01 Jan 2023 14:24:47 +0000
ROA not before: Sun 01 Jan 2023 14:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 160.20.145.0/24 maxlen: 24
160.20.144.0/24 maxlen: 24
160.20.146.0/24 maxlen: 24
160.20.147.0/24 maxlen: 24
45.11.16.0/22 maxlen: 22
45.153.240.0/22 maxlen: 22
152.89.244.0/22 maxlen: 22
152.89.247.0/24 maxlen: 24
91.200.100.0/22 maxlen: 22
45.147.228.0/22 maxlen: 22
45.138.172.0/24 maxlen: 24
45.138.172.0/22 maxlen: 22
45.138.174.0/24 maxlen: 24
45.138.175.0/24 maxlen: 24
45.138.173.0/24 maxlen: 24
2a0c:6a41:f230::/48 maxlen: 48
2a0e:b540:ff03::/48 maxlen: 48
2a0e:b540::/29 maxlen: 29
2a0c:6a40::/29 maxlen: 29
2a09:38c0::/29 maxlen: 29
2a0d:4cc0::/29 maxlen: 29
2a10:9c00::/29 maxlen: 29
2a0e:5100::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:86:e2:66:1c:46:bf:87:33:1c:c7:70:ba:ae:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Validity
Not Before: Jan 1 14:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=983bb2dcb78f61770bc09aa8c8d364d15e5a4799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:b4:26:f0:db:05:0d:72:f2:aa:39:8b:44:
b5:d6:14:cd:df:f2:e9:32:5d:ab:c9:a7:a5:f4:0a:
a4:51:b2:f6:c5:76:7e:bd:3f:49:48:06:b6:88:e5:
90:ef:8c:08:1d:90:ca:1a:0d:75:28:75:2b:8c:2f:
42:ba:4b:28:63:e2:b3:ca:a9:a8:81:4f:37:2f:fd:
a6:9a:76:55:8b:20:ab:02:a8:68:51:f4:62:87:74:
23:41:a7:79:1b:b7:16:b5:63:d4:66:8c:a4:52:30:
3a:7e:39:23:2c:95:78:d8:25:12:f0:46:98:95:ad:
f2:97:2c:23:5a:7c:7f:ec:a8:b6:2c:9f:6e:b2:18:
b0:cf:fa:23:99:f6:e5:85:25:77:c9:52:8c:d3:d4:
e4:d0:ac:65:b0:97:b6:b6:8e:56:b2:c5:a9:53:ed:
73:e3:e2:4b:b5:5b:a1:18:76:29:71:8d:ef:21:d0:
b8:a9:18:39:ac:33:da:39:a1:23:ca:8d:2c:91:24:
34:15:63:29:93:35:a7:04:c5:fc:34:07:4f:b7:d1:
21:e3:c8:95:42:f7:85:ea:fc:89:3e:de:16:fb:34:
de:d7:c0:af:69:63:69:8d:93:79:b2:0e:44:0a:2f:
a1:90:5f:6b:d9:aa:22:24:2a:5f:df:1d:dc:dc:5e:
d7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3B:B2:DC:B7:8F:61:77:0B:C0:9A:A8:C8:D3:64:D1:5E:5A:47:99
X509v3 Authority Key Identifier:
keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/mDuy3LePYXcLwJqoyNNk0V5aR5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.16.0/22
45.138.172.0/22
45.147.228.0/22
45.153.240.0/22
91.200.100.0/22
152.89.244.0/22
160.20.144.0/22
IPv6:
2a09:38c0::/29
2a0c:6a40::/29
2a0d:4cc0::/29
2a0e:5100::/29
2a0e:b540::/29
2a10:9c00::/29
Signature Algorithm: sha256WithRSAEncryption
75:ee:45:3f:72:a6:ab:9e:d3:ed:f2:d4:e2:73:ca:17:42:21:
82:45:a6:0c:bf:17:d5:bb:fd:78:43:07:9a:4a:d3:f5:c6:cc:
c0:39:21:72:66:07:93:10:90:f8:20:0b:14:de:14:7a:c8:8c:
7f:d5:ee:dc:00:28:fd:de:ea:c9:80:9e:95:f3:30:f1:d6:2d:
50:68:a8:88:f6:b2:31:d4:e9:d4:79:7b:72:f9:1f:41:37:f4:
60:81:99:70:99:f3:87:26:5f:7b:aa:ce:f5:34:95:93:f5:0a:
57:b7:28:dc:0c:44:20:8d:47:bb:3c:f7:b6:c4:ee:3b:ab:4b:
29:49:46:01:13:c7:6b:9e:96:46:72:d9:31:97:25:a6:2c:0f:
69:5a:3e:a3:64:6c:90:9d:f6:aa:77:26:7f:ef:a2:70:fe:ac:
5c:54:57:58:3a:80:60:f9:d8:f9:36:2c:6d:36:b3:86:37:dd:
16:0a:67:b0:00:75:c6:a6:21:fc:36:82:36:e1:2a:8a:fd:9c:
c1:c4:bf:d1:dd:79:4d:81:57:a5:5c:06:0f:34:98:83:d9:55:
a0:5b:c8:d0:aa:96:5d:1e:63:7b:fc:b0:8c:c6:74:44:28:06:
70:33:17:82:27:5e:50:6b:34:77:3e:ea:d8:a2:b9:ba:e0:5b:
d2:03:42:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:34 2025 by rpki-client