Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/DwWK1-KpK2UdiuzuaIRgrWBXESU.roa
File: DwWK1-KpK2UdiuzuaIRgrWBXESU.roa (raw, json)
Hash identifier: l4po1TcnjiM5WYG6FA1Hb8auFHsIqmp8bsMMjpTOsSI=
Subject key identifier: 0F:05:8A:D7:E2:A9:2B:65:1D:8A:EC:EE:68:84:60:AD:60:57:11:25
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01837E3028CA092EFEF7CD0C339309B738FD
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/DwWK1-KpK2UdiuzuaIRgrWBXESU.roa
Signing time: Tue 27 Sep 2022 09:03:48 +0000
ROA not before: Tue 27 Sep 2022 09:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1103
IP address blocks: 145.97.16.0/22 maxlen: 22
145.137.128.0/18 maxlen: 18
145.97.20.0/22 maxlen: 22
145.97.24.0/21 maxlen: 21
145.124.0.0/15 maxlen: 15
145.23.0.0/19 maxlen: 19
145.23.0.0/16 maxlen: 16
192.87.0.0/16 maxlen: 16
145.97.48.0/20 maxlen: 20
194.171.0.0/16 maxlen: 16
145.107.0.0/16 maxlen: 22
145.33.0.0/16 maxlen: 16
145.20.0.0/16 maxlen: 16
145.97.128.0/18 maxlen: 18
145.138.0.0/16 maxlen: 16
145.74.0.0/15 maxlen: 15
145.37.0.0/16 maxlen: 16
145.144.0.0/12 maxlen: 12
145.97.64.0/18 maxlen: 18
145.76.0.0/16 maxlen: 16
145.116.128.0/18 maxlen: 18
145.103.0.0/16 maxlen: 16
145.140.0.0/14 maxlen: 14
145.2.0.0/15 maxlen: 15
145.109.128.0/17 maxlen: 17
145.96.0.0/16 maxlen: 16
145.116.64.0/18 maxlen: 18
145.116.224.0/19 maxlen: 19
145.127.0.0/17 maxlen: 17
145.100.0.0/15 maxlen: 15
145.90.0.0/16 maxlen: 16
145.90.10.0/23 maxlen: 23
145.117.0.0/16 maxlen: 16
145.19.0.0/16 maxlen: 16
145.116.192.0/20 maxlen: 20
145.120.0.0/14 maxlen: 14
145.9.0.0/16 maxlen: 16
145.28.0.0/15 maxlen: 15
145.92.0.0/15 maxlen: 15
145.146.0.0/16 maxlen: 25
145.48.0.0/15 maxlen: 15
145.102.0.0/16 maxlen: 16
145.38.0.0/15 maxlen: 15
145.116.0.0/20 maxlen: 20
145.52.0.0/16 maxlen: 16
145.116.16.0/21 maxlen: 21
145.116.24.0/21 maxlen: 21
145.136.0.0/15 maxlen: 15
145.126.0.0/16 maxlen: 16
145.108.0.0/16 maxlen: 16
145.44.0.0/16 maxlen: 16
145.98.0.0/16 maxlen: 16
145.0.0.0/16 maxlen: 16
145.97.192.0/18 maxlen: 18
145.91.0.0/16 maxlen: 16
145.118.0.0/16 maxlen: 16
145.81.0.0/16 maxlen: 16
145.95.0.0/16 maxlen: 16
145.85.0.0/16 maxlen: 16
145.24.0.0/16 maxlen: 16
145.88.0.0/15 maxlen: 15
145.51.0.0/16 maxlen: 16
195.169.0.0/16 maxlen: 16
2001:610::/29 maxlen: 29
2001:610:130::/48 maxlen: 64
2001:610::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7e:30:28:ca:09:2e:fe:f7:cd:0c:33:93:09:b7:38:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Sep 27 09:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f058ad7e2a92b651d8aecee688460ad60571125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:95:ec:b9:ea:80:9b:bc:4f:08:24:51:d1:
ab:60:c5:e2:cc:1b:92:a1:8d:86:30:d6:0d:ce:78:
97:ff:97:74:e4:ff:b1:44:c0:bf:3d:5e:ea:01:3d:
1c:0a:1d:15:69:31:a5:e0:de:3e:da:a8:b9:80:77:
f9:d4:18:fc:32:5e:06:4a:08:0f:3f:b3:53:e1:1a:
43:ce:bb:80:44:66:f8:56:36:ea:83:82:2d:30:f0:
4f:51:56:64:5f:23:19:1d:da:10:7f:c9:d6:d6:50:
cc:20:24:b5:e8:1e:c1:d4:6d:5e:1e:ec:ec:17:dc:
a7:f5:2e:ad:df:58:b0:a3:c0:42:5c:95:70:0d:40:
54:ae:c1:65:10:2b:7a:9c:3b:2f:06:82:ed:66:bc:
3b:d8:22:14:04:0e:0c:6c:37:39:ab:ae:a3:02:23:
64:7e:8d:5a:f0:2e:3e:df:15:77:05:c2:27:8c:a3:
62:55:f6:f8:99:ca:f6:85:bf:bd:05:43:19:77:26:
d5:57:c6:47:6e:c1:64:e9:48:10:87:7d:b5:4d:a5:
6b:d1:8d:de:6a:dc:da:3a:a6:d7:a9:5b:ee:18:1d:
f5:23:53:45:e0:5c:5e:a7:17:e5:c9:5b:50:86:30:
a6:d3:53:21:dd:db:89:b6:90:d6:dd:c3:50:af:47:
32:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:05:8A:D7:E2:A9:2B:65:1D:8A:EC:EE:68:84:60:AD:60:57:11:25
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/DwWK1-KpK2UdiuzuaIRgrWBXESU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.0.0.0/16
145.2.0.0/15
145.9.0.0/16
145.19.0.0-145.20.255.255
145.23.0.0-145.24.255.255
145.28.0.0/15
145.33.0.0/16
145.37.0.0-145.39.255.255
145.44.0.0/16
145.48.0.0/15
145.51.0.0-145.52.255.255
145.74.0.0-145.76.255.255
145.81.0.0/16
145.85.0.0/16
145.88.0.0-145.93.255.255
145.95.0.0-145.96.255.255
145.97.16.0/20
145.97.48.0-145.98.255.255
145.100.0.0/14
145.107.0.0-145.108.255.255
145.109.128.0/17
145.116.0.0/19
145.116.64.0-145.116.207.255
145.116.224.0-145.118.255.255
145.120.0.0-145.127.127.255
145.136.0.0-145.138.255.255
145.140.0.0-145.159.255.255
192.87.0.0/16
194.171.0.0/16
195.169.0.0/16
IPv6:
2001:610::/29
Signature Algorithm: sha256WithRSAEncryption
41:00:0c:0c:ee:b1:85:75:c1:fb:55:58:be:67:17:97:d8:44:
12:1d:c9:24:c1:0d:08:ab:66:6c:0b:50:73:98:4c:d1:4b:a4:
ec:15:54:64:f2:b2:e5:e6:54:86:d2:6f:d6:c1:73:4f:53:83:
61:b2:77:f6:60:e9:0f:4a:61:b0:28:a4:8d:d6:02:dd:fb:e5:
d1:bf:2d:93:ef:0b:50:e9:77:9f:2a:38:53:30:c9:23:36:ac:
91:e1:62:37:db:d2:c1:a1:ef:30:5b:a2:5e:25:a6:99:f3:df:
6a:28:c2:6e:80:3d:b3:cf:a9:fc:fb:41:cb:37:46:c5:ae:7f:
04:77:9b:13:b7:0c:87:93:1d:01:da:71:e4:0e:f6:36:ae:26:
d9:65:69:9d:50:39:a2:5a:83:0c:83:74:b2:d2:7a:e6:82:5f:
b5:79:c1:4e:bd:4a:b7:2f:42:2f:b7:19:56:5e:0f:ea:58:f7:
99:76:f5:7d:d5:8e:c3:75:34:a2:06:4e:21:76:59:eb:0c:b0:
1e:aa:03:d6:46:25:e2:e5:f8:c3:56:34:d9:51:5b:74:f4:1e:
fd:1d:ef:25:98:68:d8:1b:92:98:8f:2f:cd:e2:e1:14:61:10:
45:4c:3e:df:ba:37:54:d1:88:c3:a7:11:af:b1:d9:b7:83:4a:
89:03:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org