Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/EuXswmUz61Yrx-GPEbUSIOm6FHg.roa
File: EuXswmUz61Yrx-GPEbUSIOm6FHg.roa (raw, json)
Hash identifier: j/pLkopa7ATNUqNP3/JBzHB7EFfXqLE0vJEio83rENQ=
Subject key identifier: 12:E5:EC:C2:65:33:EB:56:2B:C7:E1:8F:11:B5:12:20:E9:BA:14:78
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 38C582FA
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/EuXswmUz61Yrx-GPEbUSIOm6FHg.roa
Signing time: Sat 01 Jan 2022 07:55:06 +0000
ROA not before: Sat 01 Jan 2022 07:55:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1103
IP address blocks: 145.97.16.0/22 maxlen: 22
145.97.20.0/22 maxlen: 22
145.97.24.0/21 maxlen: 21
145.124.0.0/15 maxlen: 15
145.23.0.0/19 maxlen: 19
145.23.0.0/16 maxlen: 16
145.97.48.0/20 maxlen: 20
194.171.0.0/16 maxlen: 16
145.107.0.0/16 maxlen: 22
145.33.0.0/16 maxlen: 16
145.20.0.0/16 maxlen: 16
145.97.128.0/18 maxlen: 18
145.138.0.0/16 maxlen: 16
145.74.0.0/15 maxlen: 15
145.37.0.0/16 maxlen: 16
145.144.0.0/12 maxlen: 12
145.97.64.0/18 maxlen: 18
145.76.0.0/16 maxlen: 16
145.116.128.0/18 maxlen: 18
145.103.0.0/16 maxlen: 16
145.140.0.0/14 maxlen: 14
145.2.0.0/15 maxlen: 15
145.109.128.0/17 maxlen: 17
145.96.0.0/16 maxlen: 16
145.116.64.0/18 maxlen: 18
145.116.224.0/19 maxlen: 19
145.127.0.0/17 maxlen: 17
145.100.0.0/15 maxlen: 15
145.90.0.0/16 maxlen: 16
145.90.10.0/23 maxlen: 23
145.117.0.0/16 maxlen: 16
145.19.0.0/16 maxlen: 16
145.116.192.0/20 maxlen: 20
145.120.0.0/14 maxlen: 14
145.9.0.0/16 maxlen: 16
145.28.0.0/15 maxlen: 15
145.92.0.0/15 maxlen: 15
145.48.0.0/15 maxlen: 15
145.102.0.0/16 maxlen: 16
145.38.0.0/15 maxlen: 15
145.116.0.0/20 maxlen: 20
145.52.0.0/16 maxlen: 16
145.116.16.0/21 maxlen: 21
145.116.24.0/21 maxlen: 21
145.136.0.0/15 maxlen: 15
145.126.0.0/16 maxlen: 16
145.108.0.0/16 maxlen: 16
145.44.0.0/16 maxlen: 16
145.98.0.0/16 maxlen: 16
145.0.0.0/16 maxlen: 16
145.97.192.0/18 maxlen: 18
145.91.0.0/16 maxlen: 16
145.118.0.0/16 maxlen: 16
145.81.0.0/16 maxlen: 16
145.95.0.0/16 maxlen: 16
145.24.0.0/16 maxlen: 16
145.88.0.0/15 maxlen: 15
145.51.0.0/16 maxlen: 16
195.169.0.0/16 maxlen: 16
2001:610::/29 maxlen: 29
2001:610::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 952468218 (0x38c582fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 07:55:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12e5ecc26533eb562bc7e18f11b51220e9ba1478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:e3:91:13:92:c2:15:15:42:f4:44:b8:25:
fa:1d:df:bc:7e:17:92:7c:6f:91:01:7c:17:fb:ee:
39:b3:09:ca:af:23:d7:70:d8:ae:05:d7:4a:7a:e0:
bc:ce:2c:0e:5e:23:5e:a5:6e:b3:86:7f:28:35:17:
9d:f9:8c:67:d9:85:d7:e5:f3:32:b6:e3:5b:5f:9f:
1c:06:bd:91:2b:36:23:0c:06:ec:b2:ff:92:ed:12:
55:b9:33:9e:fe:ce:78:b2:b7:82:a9:f7:df:98:93:
e1:de:fe:42:22:81:95:7f:8e:9d:60:dd:fb:b1:be:
ce:c5:17:d5:8d:8a:0a:1c:e3:29:62:77:d8:5f:72:
7c:27:a9:1a:8f:eb:30:d6:be:e2:2c:91:44:60:06:
28:89:dc:66:97:48:96:f4:be:90:04:a2:bc:34:33:
ba:3b:10:b1:ef:93:43:7d:79:75:27:de:93:32:16:
ad:38:20:9a:ea:6b:80:2e:d1:46:2f:4b:45:f4:e3:
f4:2e:b9:1f:a8:a3:92:d9:df:95:8c:9f:f3:fe:92:
81:31:a7:b7:dc:23:89:c2:5e:b6:40:f2:9c:36:10:
5a:09:76:61:48:d8:1e:d6:eb:8b:82:67:71:9d:93:
a9:f7:fe:0c:18:1b:82:ab:9d:8b:65:d7:76:ba:20:
3e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E5:EC:C2:65:33:EB:56:2B:C7:E1:8F:11:B5:12:20:E9:BA:14:78
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/EuXswmUz61Yrx-GPEbUSIOm6FHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.0.0.0/16
145.2.0.0/15
145.9.0.0/16
145.19.0.0-145.20.255.255
145.23.0.0-145.24.255.255
145.28.0.0/15
145.33.0.0/16
145.37.0.0-145.39.255.255
145.44.0.0/16
145.48.0.0/15
145.51.0.0-145.52.255.255
145.74.0.0-145.76.255.255
145.81.0.0/16
145.88.0.0-145.93.255.255
145.95.0.0-145.96.255.255
145.97.16.0/20
145.97.48.0-145.98.255.255
145.100.0.0/14
145.107.0.0-145.108.255.255
145.109.128.0/17
145.116.0.0/19
145.116.64.0-145.116.207.255
145.116.224.0-145.118.255.255
145.120.0.0-145.127.127.255
145.136.0.0-145.138.255.255
145.140.0.0-145.159.255.255
194.171.0.0/16
195.169.0.0/16
IPv6:
2001:610::/29
Signature Algorithm: sha256WithRSAEncryption
a8:36:10:a4:1d:36:bf:e2:07:6c:26:18:6b:0e:13:c3:0c:cf:
f0:58:7a:86:9d:f5:5e:b5:66:1c:a8:af:31:52:6e:c5:10:6c:
d0:ac:67:f0:36:0c:9a:f5:77:13:42:5a:de:2a:56:aa:5b:0f:
30:28:8b:05:dd:ba:bf:aa:d2:ba:39:e5:c3:a4:6e:be:38:f9:
eb:c6:59:69:6d:0e:10:59:85:34:a7:c9:30:44:72:0b:a5:c8:
40:d6:13:7d:37:ab:55:90:c4:e9:22:1c:73:85:e5:d3:e7:66:
5b:36:e8:98:bd:2b:78:a1:22:d4:23:38:7c:e7:0d:70:97:0e:
03:22:07:c3:fd:cc:8d:ff:cb:70:b7:63:4f:56:5a:4f:04:9a:
13:3f:11:5b:84:6c:43:bc:0b:75:33:88:5b:09:4a:71:d7:f2:
ae:3b:ca:5c:15:b3:a9:f8:e0:64:39:8f:e5:07:71:85:d3:79:
7d:6f:45:1d:30:de:66:70:e4:57:d8:fd:d9:f4:90:4e:9c:ca:
a8:3f:56:c0:04:af:df:c2:55:93:d6:ba:fe:95:83:b4:3f:b9:
eb:53:11:0e:51:15:1c:ca:01:05:76:99:ee:0d:b9:06:92:ce:
57:10:f0:15:88:3e:d6:e9:ab:34:4c:4b:af:bf:8b:b7:f8:a2:
9f:93:4b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org