Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/MaWeSdwabO4NCf62cOafwGiwULQ.roa
File: MaWeSdwabO4NCf62cOafwGiwULQ.roa (raw, json)
Hash identifier: oRdfVYCLKZae+UnG5nLunIuW9bhsn/YSWEpMGF6rLJ0=
Subject key identifier: 31:A5:9E:49:DC:1A:6C:EE:0D:09:FE:B6:70:E6:9F:C0:68:B0:50:B4
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0189CA4CD04DBAD1690B2FB03F60D768433E
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/MaWeSdwabO4NCf62cOafwGiwULQ.roa
Signing time: Sun 06 Aug 2023 10:02:58 +0000
ROA not before: Sun 06 Aug 2023 10:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 176.46.133.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
109.203.160.0/22 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
37.49.144.0/22 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.148.0/22 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:4c:d0:4d:ba:d1:69:0b:2f:b0:3f:60:d7:68:43:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Aug 6 10:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31a59e49dc1a6cee0d09feb670e69fc068b050b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:aa:e6:ca:ce:bb:ac:7e:46:26:69:8e:f0:
25:38:72:5d:29:21:79:dc:7b:88:73:be:e4:93:93:
fe:74:d6:07:ee:2f:47:b5:34:55:c9:ab:c3:1a:51:
41:57:6b:f7:30:a0:8a:cf:a7:8d:f9:e1:39:72:53:
c2:93:a2:dd:38:42:ce:29:1b:2f:4f:f2:8f:d2:eb:
c1:e8:88:16:e1:9f:f0:50:3e:32:a5:b5:e2:4b:90:
a9:87:0a:34:f3:95:1e:68:33:08:08:b0:99:18:d6:
09:01:bc:39:e7:a4:e0:d1:1f:ff:39:43:b8:cd:4a:
6a:42:60:de:77:c6:61:16:5f:10:2e:38:0a:9a:88:
67:c3:87:19:29:bb:ec:26:fb:53:b5:1b:29:f6:94:
58:cb:0b:af:43:06:9f:2e:05:88:f8:9f:91:51:5c:
ce:5f:4f:4e:b5:b9:63:58:ab:06:4b:cd:84:37:36:
62:9b:54:ed:fe:df:cf:d2:3d:00:f1:15:33:3f:d0:
23:19:b0:9d:7a:9b:c9:5a:28:88:ef:c5:a5:47:76:
24:4a:cd:92:63:e0:37:f2:87:67:a6:7d:8c:e4:da:
cb:69:cc:d8:27:ea:05:1d:20:1e:db:90:51:3c:48:
47:b0:8f:f6:27:4d:79:e7:34:75:ea:60:1d:13:d7:
01:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A5:9E:49:DC:1A:6C:EE:0D:09:FE:B6:70:E6:9F:C0:68:B0:50:B4
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/MaWeSdwabO4NCf62cOafwGiwULQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/21
94.74.137.0/24
94.74.156.0/24
94.74.158.0/23
94.74.168.0/23
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/21
176.46.128.0-176.46.136.255
176.46.138.0-176.46.159.255
Signature Algorithm: sha256WithRSAEncryption
45:fb:93:f4:e7:eb:3e:ab:4d:a7:85:83:8e:94:18:ce:ab:fc:
d0:b5:ad:7d:89:1a:d9:d1:ac:0d:e3:5a:d6:c9:a0:a4:97:ed:
5a:94:d7:61:fd:f1:f9:c9:0f:c9:b3:93:6b:b5:3d:ac:9d:51:
91:e2:06:5a:07:5d:48:13:c4:a0:5c:06:5e:72:b3:ed:c1:a7:
23:50:e7:8c:56:29:4d:3c:c0:4d:84:eb:e3:cd:44:fe:59:37:
7b:e9:02:24:ae:2e:44:56:eb:aa:fb:80:60:b8:e5:20:9f:b8:
a9:a6:8f:5e:d6:43:cc:9c:32:7d:95:b9:93:f1:b0:1a:e1:a2:
2c:1a:60:75:f5:88:e2:e3:5c:ba:9a:c2:28:a8:e7:ec:2f:da:
30:2f:18:1d:0a:00:cd:88:6a:11:3e:c6:87:10:36:d0:83:bf:
eb:93:f9:70:60:07:42:e4:77:65:24:be:c1:5f:85:d7:6c:ba:
cc:15:fc:7e:09:47:1f:11:ed:6e:d6:60:be:12:46:fe:87:76:
5a:35:45:6d:a8:5d:d1:26:0d:ec:f9:35:79:77:12:84:a1:84:
13:f8:e2:4b:d5:d3:7d:a7:80:15:c8:92:34:c7:e6:1e:27:ae:
e5:72:a7:05:e4:9e:20:4c:9a:5e:79:a8:eb:3e:7f:63:a5:54:
a0:a5:b9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:38 2025 by rpki-client