Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BKG6DneZdyudTPPcsKjDYST7aIQ.roa
File: BKG6DneZdyudTPPcsKjDYST7aIQ.roa (raw, json)
Hash identifier: IcUBo+XByyYb1c/wiMWX3odE9qohr+cfaIDEktwudI0=
Subject key identifier: 04:A1:BA:0E:77:99:77:2B:9D:4C:F3:DC:B0:A8:C3:61:24:FB:68:84
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01866AE4179959CB02B79A322CF7AB295950
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BKG6DneZdyudTPPcsKjDYST7aIQ.roa
Signing time: Sun 19 Feb 2023 18:16:18 +0000
ROA not before: Sun 19 Feb 2023 18:16:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 45.83.148.0/22 maxlen: 24
2.56.172.0/22 maxlen: 24
95.214.248.0/22 maxlen: 24
2.56.176.0/22 maxlen: 24
194.33.36.0/22 maxlen: 24
2.56.116.0/22 maxlen: 24
2.56.124.0/22 maxlen: 24
2.56.120.0/22 maxlen: 24
45.83.116.0/22 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
185.161.70.0/23 maxlen: 24
185.161.69.0/24 maxlen: 24
185.106.96.0/22 maxlen: 24
139.28.232.0/22 maxlen: 24
45.15.124.0/22 maxlen: 24
45.86.64.0/22 maxlen: 24
45.86.60.0/22 maxlen: 24
45.15.128.0/22 maxlen: 24
45.86.68.0/22 maxlen: 24
45.15.144.0/22 maxlen: 24
45.15.140.0/22 maxlen: 24
45.86.76.0/22 maxlen: 24
45.86.72.0/22 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/22 maxlen: 24
45.89.96.0/22 maxlen: 24
45.89.104.0/22 maxlen: 24
45.89.100.0/22 maxlen: 24
45.89.108.0/22 maxlen: 24
45.9.12.0/22 maxlen: 24
171.22.136.0/22 maxlen: 24
45.9.16.0/22 maxlen: 24
45.12.112.0/22 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.128.0/22 maxlen: 24
45.12.132.0/22 maxlen: 24
194.76.136.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.83.84.0/22 maxlen: 24
45.12.148.0/22 maxlen: 24
45.15.152.0/22 maxlen: 24
45.82.244.0/22 maxlen: 24
45.82.252.0/22 maxlen: 24
45.82.248.0/22 maxlen: 24
185.153.180.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
213.59.112.0/20 maxlen: 24
45.89.196.0/22 maxlen: 24
45.15.176.0/22 maxlen: 24
171.22.112.0/22 maxlen: 24
171.22.108.0/22 maxlen: 24
45.83.24.0/22 maxlen: 24
45.15.184.0/22 maxlen: 24
45.83.20.0/22 maxlen: 24
171.22.116.0/22 maxlen: 24
31.12.92.0/22 maxlen: 24
171.22.124.0/22 maxlen: 24
171.22.120.0/22 maxlen: 24
171.22.132.0/22 maxlen: 24
171.22.128.0/22 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.168.0/22 maxlen: 24
45.88.176.0/22 maxlen: 24
45.88.180.0/22 maxlen: 24
185.149.20.0/22 maxlen: 24
185.203.4.0/22 maxlen: 24
141.98.164.0/22 maxlen: 24
141.98.160.0/22 maxlen: 24
45.88.148.0/22 maxlen: 24
92.118.228.0/22 maxlen: 24
92.118.232.0/22 maxlen: 24
92.118.236.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
185.166.152.0/22 maxlen: 24
45.92.124.0/22 maxlen: 24
185.166.160.0/22 maxlen: 24
45.92.140.0/22 maxlen: 24
92.119.40.0/22 maxlen: 24
45.128.56.0/22 maxlen: 24
45.128.52.0/22 maxlen: 24
45.128.72.0/22 maxlen: 24
45.128.48.0/22 maxlen: 24
141.98.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6a:e4:17:99:59:cb:02:b7:9a:32:2c:f7:ab:29:59:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 19 18:16:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04a1ba0e7799772b9d4cf3dcb0a8c36124fb6884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:56:22:93:9d:bd:00:60:8d:58:c1:d7:d6:57:
b7:f5:78:cd:4e:e9:41:c4:37:14:5a:cd:70:24:06:
10:0e:53:d5:fd:ec:94:8a:90:6e:45:01:c5:c7:6a:
b0:6f:fd:07:5d:63:5d:f6:12:f4:af:42:c5:24:70:
77:78:f9:92:08:7f:49:a1:f8:03:48:6d:aa:70:7c:
83:b0:f6:5e:b1:f0:2f:cd:bb:0a:36:45:c2:f6:53:
60:17:74:d6:b6:fe:13:93:06:84:f2:8e:4c:5b:f0:
e0:35:9f:ff:40:a2:71:e8:76:b2:43:af:34:e6:25:
40:f7:13:a5:f9:1d:a1:6b:ef:fe:a1:9a:6c:c9:d4:
a2:d2:f7:f7:52:b5:6e:6a:d5:6b:ad:fa:90:2c:0f:
2c:c8:af:f2:ac:0e:cf:22:75:78:c2:2e:a7:64:bc:
8c:bb:57:18:20:a0:f9:d7:7a:ed:28:fa:68:4a:8c:
85:6c:12:45:f8:4d:20:24:be:a6:f7:b1:e0:9f:35:
7a:ef:2f:80:e8:cc:55:0f:f6:9f:1c:fa:d2:12:19:
55:12:1a:17:46:2a:58:3d:3b:9f:3a:cf:09:23:e9:
c8:8d:2e:56:bd:a7:96:ff:7c:82:af:f1:8f:ce:7a:
61:fd:5a:fd:8e:f0:d9:b2:b7:53:32:40:fd:8e:21:
6d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A1:BA:0E:77:99:77:2B:9D:4C:F3:DC:B0:A8:C3:61:24:FB:68:84
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BKG6DneZdyudTPPcsKjDYST7aIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.116.0-2.56.127.255
2.56.172.0-2.56.179.255
31.12.92.0/22
45.9.12.0-45.9.19.255
45.12.108.0-45.12.115.255
45.12.128.0-45.12.151.255
45.15.124.0-45.15.131.255
45.15.140.0-45.15.147.255
45.15.152.0/22
45.15.160.0-45.15.171.255
45.15.176.0/22
45.15.184.0/22
45.82.244.0-45.82.255.255
45.83.20.0-45.83.27.255
45.83.84.0/22
45.83.116.0/22
45.83.128.0/22
45.83.140.0/22
45.83.148.0/22
45.86.60.0-45.86.79.255
45.88.148.0/22
45.88.160.0/22
45.88.168.0/22
45.88.176.0/21
45.89.96.0/20
45.89.196.0/22
45.92.124.0/22
45.92.140.0/22
45.92.160.0/21
45.92.192.0/22
45.128.48.0-45.128.59.255
45.128.72.0/22
92.118.228.0-92.118.239.255
92.119.40.0/22
95.214.248.0/22
139.28.232.0/22
141.98.132.0/22
141.98.160.0/21
171.22.108.0-171.22.139.255
185.106.96.0/22
185.149.20.0/22
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.71.255
185.166.152.0/22
185.166.160.0/22
185.203.4.0/22
194.33.36.0/22
194.76.136.0/22
213.59.112.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:82:d6:4c:15:b2:46:ff:c9:65:1a:ed:9a:00:1a:92:8c:69:
56:84:da:fd:ff:6d:7e:18:9b:fd:ec:66:50:98:56:21:66:38:
fb:a3:bd:a1:9f:25:6c:da:56:bb:9f:06:f3:a1:80:65:c8:9f:
75:b7:e1:ae:ff:b7:64:f1:4a:f8:53:42:9d:33:3b:1d:1b:15:
77:b1:98:3e:4f:07:00:8b:cd:77:8a:b3:3d:6b:46:28:b7:a2:
be:ff:5d:a7:e0:fa:a4:b7:5f:b6:ca:55:21:14:c6:11:6c:d9:
fc:35:f1:78:a0:5f:ac:ac:68:5d:d9:90:af:fe:39:8e:38:6e:
e7:74:57:ec:0e:96:03:93:ab:cf:d4:5c:b6:98:0c:a7:e9:67:
45:58:b7:a4:b4:65:fc:07:c0:3f:0d:4a:99:67:c3:28:39:bc:
fd:95:83:fe:a0:d6:84:54:ff:ff:41:c0:c8:b5:56:02:1b:22:
e4:5c:ae:30:2b:a4:08:d5:da:c4:c8:2d:a0:0a:b0:95:fc:bf:
dc:40:28:64:14:49:c4:23:ce:b4:e3:e6:46:c5:33:01:da:a4:
e1:72:14:a8:a6:79:8b:72:39:14:e4:c7:93:83:5e:6b:ac:d9:
64:1d:52:a1:46:58:73:b7:ea:00:b8:24:eb:3b:2a:a6:3a:da:
69:6f:b4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:43 2025 by rpki-client