Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/60ahp5hxHpaBqXsTI6JWWGqmQRI.roa
File: 60ahp5hxHpaBqXsTI6JWWGqmQRI.roa (raw, json)
Hash identifier: k6fcXvLqUEz1zZfFlxkkJjjkhLn+rti8YhDcGKPgSWA=
Subject key identifier: EB:46:A1:A7:98:71:1E:96:81:A9:7B:13:23:A2:56:58:6A:A6:41:12
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01850C26E45C89C3FCFAFC2A173FDE66A319
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/60ahp5hxHpaBqXsTI6JWWGqmQRI.roa
Signing time: Tue 13 Dec 2022 15:42:33 +0000
ROA not before: Tue 13 Dec 2022 15:42:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 45.83.148.0/22 maxlen: 24
2.56.172.0/22 maxlen: 24
2.56.176.0/22 maxlen: 24
194.33.36.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
185.161.69.0/24 maxlen: 24
185.161.70.0/23 maxlen: 24
45.15.124.0/22 maxlen: 24
45.86.64.0/22 maxlen: 24
45.15.128.0/22 maxlen: 24
45.86.76.0/22 maxlen: 24
45.86.72.0/22 maxlen: 24
45.92.160.0/22 maxlen: 24
45.89.96.0/22 maxlen: 24
45.92.192.0/22 maxlen: 24
45.89.100.0/22 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.112.0/22 maxlen: 24
45.9.16.0/22 maxlen: 24
45.12.128.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
194.76.136.0/22 maxlen: 24
45.83.84.0/22 maxlen: 24
45.82.244.0/22 maxlen: 24
185.153.180.0/22 maxlen: 24
45.82.248.0/22 maxlen: 24
45.89.196.0/22 maxlen: 24
213.59.112.0/20 maxlen: 24
45.15.176.0/22 maxlen: 24
171.22.116.0/22 maxlen: 24
45.15.184.0/22 maxlen: 24
31.12.92.0/22 maxlen: 24
171.22.120.0/22 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.168.0/22 maxlen: 24
185.149.20.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
45.92.124.0/22 maxlen: 24
185.166.152.0/22 maxlen: 24
185.166.160.0/22 maxlen: 24
92.119.40.0/22 maxlen: 24
45.128.72.0/22 maxlen: 24
2a0d:e000::/29 maxlen: 48
2a09:ae80::/29 maxlen: 48
2a0b:a0c0::/29 maxlen: 48
2a13:4bc0::/29 maxlen: 48
2a09:b440::/48 maxlen: 48
2a09:96c0::/29 maxlen: 48
2a06:e5c0::/29 maxlen: 48
2a0a:d040::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:26:e4:5c:89:c3:fc:fa:fc:2a:17:3f:de:66:a3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Dec 13 15:42:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb46a1a798711e9681a97b1323a256586aa64112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:70:38:9a:06:42:dd:1b:55:cd:01:6e:ed:
f3:83:a3:a4:56:48:f0:93:10:cc:26:41:f7:b1:0d:
ca:d1:e4:2e:8c:a3:c2:16:e4:03:da:11:db:7b:4c:
fb:5a:f0:fb:10:11:04:5f:f7:50:d8:10:78:53:5b:
aa:50:ef:00:2e:eb:7f:2b:0a:12:a9:19:bb:55:44:
6f:4d:c1:c7:4c:79:24:a7:ef:2a:1c:b5:0c:87:eb:
85:e3:14:69:b2:50:bb:8a:5e:b5:0e:c9:3a:08:ac:
eb:8c:2c:c0:8e:7e:d6:8a:aa:e7:cf:81:a5:d9:a3:
ff:29:33:1c:98:0c:f1:7f:21:0f:c2:25:98:71:43:
ee:93:b6:66:23:77:9e:1a:0d:c5:11:75:b8:1f:b4:
81:39:2a:f2:9d:6e:cf:9f:40:68:be:e3:4e:9f:8c:
0c:48:ff:b3:dc:48:92:3d:34:16:bb:37:2c:be:48:
f9:9e:6c:15:91:bf:e7:2d:18:97:72:00:58:bb:a7:
04:76:b7:ed:44:d7:70:f8:a6:ee:cd:5e:6c:3d:1f:
5e:c0:2b:5d:02:a4:07:b0:b8:b0:6e:4e:7e:48:65:
24:41:04:75:89:a6:54:47:69:b2:07:ad:e8:66:40:
b1:ae:07:42:64:ae:c5:2a:ef:be:44:fd:9f:a3:d2:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:46:A1:A7:98:71:1E:96:81:A9:7B:13:23:A2:56:58:6A:A6:41:12
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/60ahp5hxHpaBqXsTI6JWWGqmQRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.172.0-2.56.179.255
31.12.92.0/22
45.9.16.0/22
45.12.108.0-45.12.115.255
45.12.128.0/22
45.12.136.0/22
45.15.124.0-45.15.131.255
45.15.176.0/22
45.15.184.0/22
45.82.244.0-45.82.251.255
45.83.84.0/22
45.83.140.0/22
45.83.148.0/22
45.86.64.0/22
45.86.72.0/21
45.88.160.0/22
45.88.168.0/22
45.89.96.0/21
45.89.196.0/22
45.92.124.0/22
45.92.160.0/22
45.92.192.0/22
45.128.72.0/22
92.119.40.0/22
171.22.116.0-171.22.123.255
185.149.20.0/22
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.71.255
185.166.152.0/22
185.166.160.0/22
194.33.36.0/22
194.76.136.0/22
213.59.112.0/20
IPv6:
2a06:e5c0::/29
2a09:96c0::/29
2a09:ae80::/29
2a09:b440::/48
2a0a:d040::/29
2a0b:a0c0::/29
2a0d:e000::/29
2a13:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
c5:76:87:82:08:9d:39:ef:93:dc:01:bf:23:ba:59:fb:03:c4:
0e:24:01:2c:51:ba:35:7b:e4:3d:d0:ce:ff:84:ef:c3:b5:5c:
84:d3:94:0b:64:e1:2e:9d:4e:d5:bb:f7:81:c6:4d:70:68:06:
fc:b8:ae:a2:eb:ec:41:8e:a3:67:9c:83:89:ae:06:fb:31:70:
19:e7:c2:84:9b:b0:d8:8b:6c:cb:b3:7b:74:76:d7:e5:90:88:
b8:30:94:56:21:08:8c:eb:ad:d3:95:42:3a:a5:f6:50:25:92:
72:5a:59:0a:29:27:c0:cf:84:bf:b4:51:f1:53:63:d9:62:f5:
a1:3d:95:9b:f4:ab:0d:61:96:ef:ff:5c:ba:22:23:ad:e7:05:
1c:2c:d8:85:bb:7d:bc:d8:7a:c7:72:bb:25:ed:c2:41:38:a8:
be:8c:ed:f5:16:af:5f:79:b3:06:93:d5:fd:a1:4b:f4:dc:ab:
8b:b4:e5:9e:48:a8:db:cf:d9:be:0d:37:9b:6f:a2:68:2e:5e:
2c:5b:07:9b:c1:a3:74:33:ba:6d:e0:a6:a7:f3:c1:31:fa:95:
94:de:53:4f:15:e3:30:39:4c:8a:8e:1d:a4:0f:a6:2e:3c:68:
cf:eb:ea:02:a6:77:ef:bb:fe:7a:a4:1d:14:33:e9:6d:49:e6:
97:ac:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:44 2025 by rpki-client