Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/23VNmymlnV-ASn0bCq-9fMOL4oI.roa
File: 23VNmymlnV-ASn0bCq-9fMOL4oI.roa (raw, json)
Hash identifier: 9LlX1PM/cBjkxPiRp2IocqOHc89It42FGCg27pHWzFU=
Subject key identifier: DB:75:4D:9B:29:A5:9D:5F:80:4A:7D:1B:0A:AF:BD:7C:C3:8B:E2:82
Certificate issuer: /CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Certificate serial: 045D61D6
Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/23VNmymlnV-ASn0bCq-9fMOL4oI.roa
Signing time: Mon 11 Apr 2022 16:04:56 +0000
ROA not before: Mon 11 Apr 2022 16:04:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58073
IP address blocks: 45.145.252.0/22 maxlen: 22
193.104.186.0/24 maxlen: 24
45.152.192.0/22 maxlen: 22
37.220.32.0/21 maxlen: 24
45.10.116.0/22 maxlen: 22
45.129.176.0/22 maxlen: 22
185.38.12.0/22 maxlen: 24
2.58.20.0/22 maxlen: 22
45.82.44.0/22 maxlen: 22
45.88.16.0/22 maxlen: 22
45.93.32.0/22 maxlen: 22
46.182.104.0/24 maxlen: 24
46.182.105.0/24 maxlen: 24
46.182.108.0/24 maxlen: 24
46.182.106.0/24 maxlen: 24
46.182.107.0/24 maxlen: 24
46.182.111.0/24 maxlen: 24
46.182.109.0/24 maxlen: 24
46.182.110.0/24 maxlen: 24
2a02:2a38::/32 maxlen: 32
2a02:2a38:37::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73228758 (0x45d61d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Validity
Not Before: Apr 11 16:04:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db754d9b29a59d5f804a7d1b0aafbd7cc38be282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:60:7e:d1:a0:80:44:74:a5:67:dc:a7:38:b3:
70:b6:34:4a:13:76:27:84:da:5e:ad:e1:05:38:8a:
b5:b1:21:4c:05:23:1d:81:c5:80:41:42:2e:63:c1:
29:3d:e2:fb:0a:5d:6d:28:d2:c5:98:c7:22:52:4f:
0f:30:f9:f8:42:28:d5:3e:e4:ef:f3:79:f5:ff:17:
71:a3:58:3e:b6:71:8b:1c:47:bf:46:8c:e6:ac:d2:
3a:ad:da:e6:30:30:5f:9e:de:13:00:be:78:0c:41:
f2:b8:41:7d:38:6e:fd:9c:e8:56:2a:c9:eb:29:59:
32:81:3b:c4:ad:fe:d7:88:0f:40:2c:3e:f0:e5:6a:
f3:a9:88:9c:03:13:62:c5:8e:0d:54:ba:21:9c:8f:
61:17:4c:1b:1b:0a:36:8d:59:36:c9:31:05:8e:50:
7c:9e:ee:03:ca:01:7d:01:11:4b:59:2f:39:43:f7:
40:e9:4c:83:60:08:5f:24:8f:bf:59:09:28:4b:93:
77:88:4a:4e:f2:b2:a0:02:ba:df:7b:0c:77:c9:dc:
68:2b:34:57:1e:3d:6c:1e:46:5f:74:0e:f7:ef:fb:
dd:d7:93:f5:fe:f4:0e:b0:db:fd:8f:8f:a7:7c:0e:
cc:75:8e:1d:d7:82:c9:71:4a:83:1f:53:2c:ed:57:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:75:4D:9B:29:A5:9D:5F:80:4A:7D:1B:0A:AF:BD:7C:C3:8B:E2:82
X509v3 Authority Key Identifier:
keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/23VNmymlnV-ASn0bCq-9fMOL4oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.20.0/22
37.220.32.0/21
45.10.116.0/22
45.82.44.0/22
45.88.16.0/22
45.93.32.0/22
45.129.176.0/22
45.145.252.0/22
45.152.192.0/22
46.182.104.0/21
185.38.12.0/22
193.104.186.0/24
IPv6:
2a02:2a38::/32
Signature Algorithm: sha256WithRSAEncryption
15:45:8d:56:86:32:ba:c4:b8:7a:d1:ea:77:83:d5:14:42:52:
d4:39:f4:60:a2:7a:cb:6a:97:61:05:c4:d8:cb:11:37:ba:6c:
82:fa:46:0a:94:b6:d6:1d:69:3a:c2:bb:6f:e4:e1:3c:88:b6:
22:39:04:8a:33:8b:d5:17:a7:44:3e:cc:a1:61:e0:4b:2b:05:
b0:d4:9d:17:2c:2d:d0:99:e0:fa:2d:4b:68:af:ff:15:c0:5f:
0e:50:5c:5a:06:dc:37:16:e7:ac:9a:0f:b9:7b:7a:55:cd:af:
23:53:ee:96:02:70:cf:4d:94:f4:c9:9b:02:9c:24:72:2e:3b:
a7:81:1b:da:2a:23:45:91:77:07:93:a0:e2:57:77:06:2e:98:
0c:85:b6:3d:61:9b:cf:70:41:a8:2b:12:f9:a0:d4:9e:c2:2c:
66:c2:73:1e:3f:08:1e:ac:86:62:37:0a:7b:1a:3d:91:cf:a2:
a3:3e:cc:03:ac:b1:f9:ea:8b:b5:e9:f0:d9:7f:0f:8c:92:86:
84:ec:01:0b:68:79:19:84:78:6f:06:75:96:62:de:ef:d8:25:
8a:35:53:c1:c2:bb:8b:0f:b6:36:24:3f:f6:e5:a4:aa:d3:a4:
d2:4f:e0:cf:5a:02:2b:2f:b8:63:65:dc:b0:05:73:e9:a9:1a:
73:c3:c2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:20 2023 by rpki-client on console-fra.rpki-client.org