Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/DHArwRWDwUX7h0Pof3kYL--VHcg.roa
File: DHArwRWDwUX7h0Pof3kYL--VHcg.roa (raw, json)
Hash identifier: BZaSSFHlWpKVIBkcKgho09yh/pRHLtGAQCd7MqrfF8A=
Subject key identifier: 0C:70:2B:C1:15:83:C1:45:FB:87:43:E8:7F:79:18:2F:EF:95:1D:C8
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 018769E2790AB7EB2403B001F15281C80E7A
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/DHArwRWDwUX7h0Pof3kYL--VHcg.roa
Signing time: Mon 10 Apr 2023 06:37:42 +0000
ROA not before: Mon 10 Apr 2023 06:37:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59588
IP address blocks: 45.153.119.0/24 maxlen: 24
45.153.116.0/24 maxlen: 24
45.153.116.0/23 maxlen: 23
45.153.117.0/24 maxlen: 24
45.153.118.0/23 maxlen: 23
45.153.118.0/24 maxlen: 24
198.160.168.0/24 maxlen: 24
151.236.160.0/24 maxlen: 24
151.236.161.0/24 maxlen: 24
151.236.162.0/23 maxlen: 23
151.236.162.0/24 maxlen: 24
151.236.163.0/24 maxlen: 24
151.236.160.0/23 maxlen: 23
151.236.164.0/23 maxlen: 23
151.236.164.0/24 maxlen: 24
151.236.165.0/24 maxlen: 24
151.236.166.0/24 maxlen: 24
151.236.167.0/24 maxlen: 24
151.236.168.0/23 maxlen: 23
151.236.168.0/24 maxlen: 24
151.236.169.0/24 maxlen: 24
151.236.170.0/24 maxlen: 24
151.236.170.0/23 maxlen: 23
151.236.166.0/23 maxlen: 23
151.236.172.0/24 maxlen: 24
151.236.171.0/24 maxlen: 24
151.236.172.0/23 maxlen: 23
151.236.173.0/24 maxlen: 24
151.236.176.0/23 maxlen: 23
151.236.175.0/24 maxlen: 24
151.236.176.0/24 maxlen: 24
151.236.177.0/24 maxlen: 24
151.236.174.0/23 maxlen: 23
151.236.174.0/24 maxlen: 24
151.236.178.0/23 maxlen: 23
151.236.178.0/24 maxlen: 24
151.236.179.0/24 maxlen: 24
151.236.186.0/24 maxlen: 24
151.236.182.0/24 maxlen: 24
151.236.182.0/23 maxlen: 24
151.236.183.0/24 maxlen: 24
151.236.180.0/24 maxlen: 24
151.236.180.0/23 maxlen: 23
151.236.181.0/24 maxlen: 24
151.236.189.0/24 maxlen: 24
151.236.190.0/24 maxlen: 24
151.236.190.0/23 maxlen: 23
151.236.191.0/24 maxlen: 24
151.236.188.0/23 maxlen: 23
151.236.188.0/24 maxlen: 24
2a10:2200:b::/48 maxlen: 48
2a10:2200:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:69:e2:79:0a:b7:eb:24:03:b0:01:f1:52:81:c8:0e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Apr 10 06:37:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c702bc11583c145fb8743e87f79182fef951dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:58:23:05:6b:a9:66:21:70:9f:b8:5f:7e:b3:
33:21:79:0d:1a:50:3f:fe:11:fd:41:86:e3:5d:8c:
da:4c:52:64:c9:16:2f:b4:39:d7:09:83:42:b9:24:
24:bc:49:4d:5f:f0:36:0c:6a:8d:a4:e1:82:20:b8:
c3:5c:35:3c:5a:45:7b:9f:70:6d:62:9d:b2:af:52:
0a:5b:7b:79:d3:02:8f:52:47:22:89:47:99:0c:da:
17:98:41:aa:1a:05:c4:35:96:92:5e:e7:4a:f2:af:
8d:ec:d0:cf:a0:9d:8b:a4:e5:0d:fc:1d:58:f6:c1:
69:59:11:50:a4:16:c0:27:12:af:df:1c:54:f5:62:
ef:84:be:90:f7:75:0e:2d:bf:8b:f9:5c:51:9e:68:
39:72:8b:b7:d8:8e:7d:e0:0d:f6:c4:74:03:23:2c:
a4:c2:a6:09:8a:b1:87:7a:91:65:3a:48:15:16:92:
67:c7:03:4f:98:41:7d:ab:6a:c0:4e:bf:0c:69:fb:
1f:ba:74:fd:2a:18:45:40:8d:d3:21:d6:4b:b2:c0:
1e:0d:8d:9b:39:8f:c1:21:e3:f5:c8:c4:00:50:3f:
a8:8c:69:a0:6e:47:9d:f3:5a:02:67:90:2f:de:49:
a7:7f:d9:0e:cf:a9:19:74:83:71:d9:6b:51:0f:af:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:70:2B:C1:15:83:C1:45:FB:87:43:E8:7F:79:18:2F:EF:95:1D:C8
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/DHArwRWDwUX7h0Pof3kYL--VHcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.116.0/22
151.236.160.0-151.236.183.255
151.236.186.0/24
151.236.188.0/22
198.160.168.0/24
IPv6:
2a10:2200:2::/48
2a10:2200:b::/48
Signature Algorithm: sha256WithRSAEncryption
1e:eb:9d:71:51:cd:17:01:13:93:92:f2:97:39:90:e2:fb:08:
df:ff:7d:88:29:25:ce:8e:d3:3b:44:7f:72:0d:4b:28:34:22:
06:de:df:f3:b4:1f:e2:57:f9:d4:e8:8b:fe:a1:18:03:65:d1:
62:19:80:d3:9c:59:e8:30:e3:b6:30:19:02:79:67:71:3a:63:
ce:41:09:38:b9:b5:9c:c7:45:e3:e5:70:db:dd:71:f3:a9:01:
cd:ed:3f:14:35:07:18:b0:ad:31:73:80:13:d0:9d:29:99:32:
07:4a:11:1b:63:87:9c:58:84:dc:56:13:4a:18:9c:06:92:81:
46:da:4d:c3:08:6c:e7:c7:a8:b3:cc:09:8f:57:06:d7:f5:bd:
46:e4:3d:cf:28:8b:73:d4:81:65:eb:22:7c:cc:2f:97:5a:be:
a9:f3:c8:2b:d2:c2:99:fa:81:51:2b:e2:74:ce:ea:d3:79:55:
6e:07:0d:2e:7f:1c:0a:78:c5:c0:54:f6:19:ac:c6:50:0d:9d:
94:a9:06:3d:9d:52:a2:36:a7:b5:6e:ae:72:60:c7:28:c7:e8:
b0:2c:18:27:e6:30:95:1d:8f:44:07:0c:8f:be:cf:37:ba:78:
98:ed:07:a5:90:f7:35:22:11:0a:fe:33:2c:ae:c3:1c:32:5b:
8f:7a:1d:d9
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAYdp4nkKt+skA7AB8VKByA56MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTkyZThkNzg1NTgxZjcyYjE4NjQ0MjI0YmQ4YzNmYThh
MmQxMWIwHhcNMjMwNDEwMDYzNzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzcwMmJjMTE1ODNjMTQ1ZmI4NzQzZTg3Zjc5MTgyZmVmOTUxZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlgjBWupZiFwn7hffrMzIXkNGlA/
/hH9QYbjXYzaTFJkyRYvtDnXCYNCuSQkvElNX/A2DGqNpOGCILjDXDU8WkV7n3Bt
Yp2yr1IKW3t50wKPUkciiUeZDNoXmEGqGgXENZaSXudK8q+N7NDPoJ2LpOUN/B1Y
9sFpWRFQpBbAJxKv3xxU9WLvhL6Q93UOLb+L+VxRnmg5cou32I594A32xHQDIyyk
wqYJirGHepFlOkgVFpJnxwNPmEF9q2rATr8MafsfunT9KhhFQI3TIdZLssAeDY2b
OY/BIeP1yMQAUD+ojGmgbked81oCZ5Av3kmnf9kOz6kZdINx2WtRD6/BywIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFAxwK8EVg8FF+4dD6H95GC/vlR3IMB8GA1UdIwQY
MBaAFJIZLo14VYH3KxhkQiS9jD+ootEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1Mzct
MDA4NWEzNjVhMjVmLzEvREhBcndSV0R3VVg3aDBQb2Yza1lMLS1WSGNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1MzctMDA4NWEzNjVhMjVm
LzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAsBAIAATAmAwQCLZl0MAwD
BAWX7KADBAOX7LADBACX7LoDBAKX7LwDBADGoKgwGAQCAAIwEgMHACoQIgAAAgMH
ACoQIgAACzANBgkqhkiG9w0BAQsFAAOCAQEAHuudcVHNFwETk5LylzmQ4vsI3/99
iCklzo7TO0R/cg1LKDQiBt7f87Qf4lf51OiL/qEYA2XRYhmA05xZ6DDjtjAZAnln
cTpjzkEJOLm1nMdF4+Vw291x86kBze0/FDUHGLCtMXOAE9CdKZkyB0oRG2OHnFiE
3FYTShicBpKBRtpNwwhs58eos8wJj1cG1/W9RuQ9zyiLc9SBZesifMwvl1q+qfPI
K9LCmfqBUSvidM7q03lVbgcNLn8cCnjFwFT2GazGUA2dlKkGPZ1SojantW6ucmDH
KMfosCwYJ+YwlR2PRAcMj77PN7p4mO0HpZD3NSIRCv4zLK7DHDJbj3od2Q==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:26 2025 by rpki-client