Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/2xGESN_1I_f4UZxQsNLuXWEvs6A.roa
File: 2xGESN_1I_f4UZxQsNLuXWEvs6A.roa (raw, json)
Hash identifier: wpDoGIWU2fqEL1RVt6qbhG5BzILpCeXf+co+t+iapnM=
Subject key identifier: DB:11:84:48:DF:F5:23:F7:F8:51:9C:50:B0:D2:EE:5D:61:2F:B3:A0
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 0187487279ED8A75F3C1A3A7369CDBD2536D
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/2xGESN_1I_f4UZxQsNLuXWEvs6A.roa
Signing time: Mon 03 Apr 2023 18:47:54 +0000
ROA not before: Mon 03 Apr 2023 18:47:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59588
IP address blocks: 45.153.119.0/24 maxlen: 24
45.153.116.0/24 maxlen: 24
45.153.116.0/23 maxlen: 23
45.153.117.0/24 maxlen: 24
45.153.118.0/23 maxlen: 23
45.153.118.0/24 maxlen: 24
151.236.160.0/24 maxlen: 24
151.236.161.0/24 maxlen: 24
151.236.162.0/23 maxlen: 23
151.236.162.0/24 maxlen: 24
151.236.163.0/24 maxlen: 24
151.236.160.0/23 maxlen: 23
151.236.164.0/23 maxlen: 23
151.236.164.0/24 maxlen: 24
151.236.165.0/24 maxlen: 24
151.236.166.0/24 maxlen: 24
151.236.167.0/24 maxlen: 24
151.236.168.0/23 maxlen: 23
151.236.168.0/24 maxlen: 24
151.236.169.0/24 maxlen: 24
151.236.170.0/24 maxlen: 24
151.236.170.0/23 maxlen: 23
151.236.166.0/23 maxlen: 23
151.236.172.0/24 maxlen: 24
151.236.171.0/24 maxlen: 24
151.236.172.0/23 maxlen: 23
151.236.173.0/24 maxlen: 24
151.236.176.0/23 maxlen: 23
151.236.175.0/24 maxlen: 24
151.236.176.0/24 maxlen: 24
151.236.177.0/24 maxlen: 24
151.236.174.0/23 maxlen: 23
151.236.174.0/24 maxlen: 24
151.236.178.0/23 maxlen: 23
151.236.178.0/24 maxlen: 24
151.236.179.0/24 maxlen: 24
151.236.186.0/24 maxlen: 24
151.236.182.0/23 maxlen: 23
151.236.182.0/24 maxlen: 24
151.236.180.0/24 maxlen: 24
151.236.180.0/23 maxlen: 23
151.236.181.0/24 maxlen: 24
151.236.189.0/24 maxlen: 24
151.236.190.0/24 maxlen: 24
151.236.190.0/23 maxlen: 23
151.236.191.0/24 maxlen: 24
151.236.188.0/23 maxlen: 23
151.236.188.0/24 maxlen: 24
2a10:2200:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:48:72:79:ed:8a:75:f3:c1:a3:a7:36:9c:db:d2:53:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Apr 3 18:47:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db118448dff523f7f8519c50b0d2ee5d612fb3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:ee:f1:bc:a0:23:ae:c4:1f:18:f3:d6:ca:
6b:e0:ca:60:a7:19:2c:9e:c2:de:fa:ee:13:9c:bf:
f5:b5:52:c8:a8:4d:7b:cf:be:25:7f:0f:4b:23:94:
2e:34:d1:52:4e:4a:58:e5:30:d1:48:1d:c4:be:15:
fe:8f:a2:84:9e:ae:86:c4:86:2d:f2:27:ed:4c:f8:
50:d0:f8:3a:b8:00:ab:d2:f5:4b:55:35:47:41:d7:
04:8d:a0:05:25:10:0d:37:8d:16:5c:43:3f:5e:06:
d7:df:82:66:80:c0:22:96:bd:a7:55:e3:37:3a:06:
e1:a7:a1:df:f3:4c:c7:d5:f3:8b:e5:46:af:99:bd:
00:27:86:6e:c9:4d:2f:73:e2:27:9f:d4:6f:7b:a7:
7b:5d:85:6d:85:26:9e:15:b5:7d:ec:5a:a0:65:28:
72:06:31:02:c5:ec:9d:89:20:d9:7f:69:b1:e8:d8:
90:9f:e1:e9:26:fb:3d:0e:ab:77:f1:9f:1c:00:15:
e7:ff:6d:5c:e6:cc:04:08:19:2a:ab:db:84:4d:01:
5e:dc:dd:4f:49:eb:2f:b5:4b:79:2e:47:4b:74:c1:
e4:85:0f:db:1f:81:6d:89:1d:8d:8d:05:f5:c9:0e:
22:35:e1:b6:46:71:1f:2b:00:ea:d2:ff:30:54:f2:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:11:84:48:DF:F5:23:F7:F8:51:9C:50:B0:D2:EE:5D:61:2F:B3:A0
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/2xGESN_1I_f4UZxQsNLuXWEvs6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.116.0/22
151.236.160.0-151.236.183.255
151.236.186.0/24
151.236.188.0/22
IPv6:
2a10:2200:2::/48
Signature Algorithm: sha256WithRSAEncryption
85:6a:07:fe:ce:4d:a6:4f:8f:7f:11:4d:3c:96:22:e9:55:3e:
83:98:41:1b:9c:e3:7e:5e:e4:1b:85:ae:35:18:40:b1:dc:a6:
a2:85:0d:97:57:20:8c:3b:ab:c9:be:ab:41:63:d4:fc:ca:08:
28:33:f1:2c:cd:95:90:dc:21:52:a2:75:26:8d:bc:1e:26:16:
a4:3f:e7:56:5d:3f:26:bc:92:56:16:b6:67:34:d1:48:b5:ce:
a4:cc:90:2b:fd:24:01:4b:78:2f:ef:30:34:8e:6d:04:b3:ac:
18:8a:a0:92:4b:51:c1:da:29:30:6f:e8:ad:f4:33:3a:b3:5e:
53:41:eb:3e:3e:31:b5:65:96:cc:f1:5d:5e:2c:48:8b:bd:58:
40:1c:e9:1c:4e:ac:5e:f8:1a:cd:3b:0c:61:60:d9:d2:5b:98:
fc:90:55:78:30:fe:e1:fa:63:5c:aa:fb:e8:41:76:b9:52:e0:
dd:7a:c7:48:bd:24:c2:96:7d:49:d9:72:e8:e1:42:47:cf:6e:
d4:1c:e1:23:43:c4:a6:ce:47:ab:e6:48:0f:19:96:c6:28:d7:
dc:30:e0:09:b9:67:60:7c:44:50:99:9f:f4:24:f4:b6:7c:f5:
7c:17:a5:77:ee:9b:c3:3b:57:3a:c3:4b:a5:8c:b1:84:ec:56:
c8:cf:26:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:33 2025 by rpki-client