Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/N1k_94fIeP1aj9XV1g3jFELCNho.roa
File: N1k_94fIeP1aj9XV1g3jFELCNho.roa (raw, json)
Hash identifier: vK5gvapFP9XGCXugE5vyt+b6r2Gfprm6qA+onVRP2pM=
Subject key identifier: 37:59:3F:F7:87:C8:78:FD:5A:8F:D5:D5:D6:0D:E3:14:42:C2:36:1A
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018AC209CED6BF6CEF5F21700BB17A6A68F0
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/N1k_94fIeP1aj9XV1g3jFELCNho.roa
Signing time: Sat 23 Sep 2023 12:35:37 +0000
ROA not before: Sat 23 Sep 2023 12:35:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 95.214.248.0/22 maxlen: 24
185.161.69.0/24 maxlen: 24
185.161.70.0/23 maxlen: 24
185.106.97.0/24 maxlen: 24
185.106.98.0/23 maxlen: 24
45.86.60.0/22 maxlen: 24
45.86.64.0/23 maxlen: 24
45.86.64.0/21 maxlen: 24
45.86.68.0/22 maxlen: 24
45.86.67.0/24 maxlen: 24
45.86.74.0/23 maxlen: 24
45.86.76.0/22 maxlen: 24
45.86.72.0/24 maxlen: 24
45.92.165.0/24 maxlen: 24
45.92.164.0/24 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.160.0/21 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/23 maxlen: 24
45.92.194.0/24 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.112.0/22 maxlen: 24
45.12.128.0/22 maxlen: 24
45.12.132.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.12.149.0/24 maxlen: 24
45.12.150.0/23 maxlen: 24
185.153.180.0/22 maxlen: 24
213.59.112.0/20 maxlen: 24
141.98.160.0/22 maxlen: 24
141.98.164.0/22 maxlen: 24
92.118.232.0/23 maxlen: 24
92.118.230.0/23 maxlen: 24
92.118.229.0/24 maxlen: 24
92.118.236.0/22 maxlen: 24
92.118.234.0/24 maxlen: 24
185.166.152.0/22 maxlen: 24
45.92.140.0/22 maxlen: 24
45.83.148.0/22 maxlen: 24
2.56.172.0/22 maxlen: 24
2.56.176.0/22 maxlen: 24
2.56.117.0/24 maxlen: 24
2.56.118.0/23 maxlen: 24
2.56.120.0/22 maxlen: 24
2.56.124.0/22 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
139.28.233.0/24 maxlen: 24
139.28.234.0/23 maxlen: 24
45.15.125.0/24 maxlen: 24
45.15.128.0/22 maxlen: 24
45.15.126.0/23 maxlen: 24
45.15.142.0/24 maxlen: 24
45.15.140.0/23 maxlen: 24
45.15.144.0/22 maxlen: 24
45.89.96.0/24 maxlen: 24
45.89.98.0/24 maxlen: 24
45.89.105.0/24 maxlen: 24
45.89.106.0/23 maxlen: 24
45.89.108.0/22 maxlen: 24
171.22.138.0/24 maxlen: 24
45.9.12.0/22 maxlen: 24
45.9.16.0/22 maxlen: 24
171.22.136.0/23 maxlen: 24
194.76.136.0/22 maxlen: 24
45.83.84.0/22 maxlen: 24
45.82.245.0/24 maxlen: 24
45.15.152.0/22 maxlen: 24
45.82.246.0/23 maxlen: 24
45.82.248.0/22 maxlen: 24
45.82.252.0/22 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.89.196.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
171.22.110.0/23 maxlen: 24
45.15.176.0/24 maxlen: 24
171.22.112.0/22 maxlen: 24
171.22.109.0/24 maxlen: 24
45.15.178.0/23 maxlen: 24
171.22.116.0/22 maxlen: 24
45.15.184.0/22 maxlen: 24
45.83.20.0/22 maxlen: 24
45.83.24.0/22 maxlen: 24
171.22.120.0/22 maxlen: 24
171.22.124.0/22 maxlen: 24
171.22.128.0/22 maxlen: 24
171.22.132.0/22 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.168.0/22 maxlen: 24
45.88.176.0/22 maxlen: 24
45.88.181.0/24 maxlen: 24
45.88.182.0/23 maxlen: 24
185.203.4.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.58.0/24 maxlen: 24
45.128.52.0/22 maxlen: 24
45.128.56.0/23 maxlen: 24
45.128.74.0/24 maxlen: 24
45.128.72.0/22 maxlen: 24
45.128.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c2:09:ce:d6:bf:6c:ef:5f:21:70:0b:b1:7a:6a:68:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 23 12:35:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37593ff787c878fd5a8fd5d5d60de31442c2361a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:d8:fa:ef:a8:3a:46:ce:39:0c:be:1f:7c:
43:c5:39:0f:ad:9a:83:96:8e:d3:9c:e2:25:bb:36:
96:3a:e2:cf:c4:18:5f:9a:3d:b8:d8:84:d8:98:79:
9e:3f:65:6b:da:c6:8f:ef:a1:44:46:96:3c:ef:4e:
e2:5c:11:28:f0:98:8d:66:30:d2:7b:02:ee:1c:22:
0f:03:df:25:11:fc:0d:17:ff:3e:5c:ec:f3:89:f1:
55:40:a0:f7:08:9d:41:e8:d5:2b:83:1a:a2:d9:0e:
23:d3:bf:ca:5c:23:fc:2d:48:c6:65:54:cf:46:9b:
4c:93:19:77:57:ac:49:c6:93:14:9b:6b:1c:0d:2f:
32:b5:1b:98:39:7f:e0:b5:87:8d:0c:08:21:56:f5:
bb:8e:a7:c7:db:60:63:78:73:d8:22:c9:7d:cd:b0:
1e:3c:30:2c:40:cd:8c:df:e6:1a:d2:9b:28:4b:c6:
45:d0:5a:ee:44:a0:97:dd:bc:16:46:31:ef:2a:62:
17:29:dd:01:74:8f:f6:a0:dd:43:c7:bf:e2:c5:11:
01:6e:78:46:8a:07:82:26:bd:d5:9e:66:45:88:ac:
ae:fa:7a:1e:f0:39:6e:ff:1c:d1:7d:54:6e:02:3a:
c5:b6:aa:be:d6:35:13:dd:7c:38:b1:6e:c8:bd:44:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:59:3F:F7:87:C8:78:FD:5A:8F:D5:D5:D6:0D:E3:14:42:C2:36:1A
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/N1k_94fIeP1aj9XV1g3jFELCNho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.117.0-2.56.127.255
2.56.172.0-2.56.179.255
45.9.12.0-45.9.19.255
45.12.108.0-45.12.115.255
45.12.128.0-45.12.147.255
45.12.149.0-45.12.151.255
45.15.125.0-45.15.131.255
45.15.140.0-45.15.142.255
45.15.144.0/22
45.15.152.0/22
45.15.160.0-45.15.171.255
45.15.176.0/24
45.15.178.0/23
45.15.184.0/22
45.82.245.0-45.82.255.255
45.83.20.0-45.83.27.255
45.83.84.0/22
45.83.128.0/22
45.83.140.0/22
45.83.148.0/22
45.86.60.0-45.86.72.255
45.86.74.0-45.86.79.255
45.88.160.0/22
45.88.168.0/22
45.88.176.0/22
45.88.181.0-45.88.183.255
45.89.96.0/24
45.89.98.0/24
45.89.105.0-45.89.111.255
45.89.196.0/22
45.92.140.0/22
45.92.160.0/21
45.92.192.0-45.92.194.255
45.128.48.0-45.128.58.255
45.128.72.0/22
92.118.229.0-92.118.234.255
92.118.236.0/22
95.214.248.0/22
139.28.233.0-139.28.235.255
141.98.160.0/21
171.22.109.0-171.22.138.255
185.106.97.0-185.106.99.255
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.71.255
185.166.152.0/22
185.203.4.0/22
194.76.136.0/22
213.59.112.0/20
Signature Algorithm: sha256WithRSAEncryption
28:cd:e5:cd:bc:f5:2d:c0:86:88:9e:bf:28:59:c9:e8:b3:e5:
b2:01:c0:33:14:87:09:42:51:6f:2e:fa:8e:9e:70:29:fc:4c:
17:98:77:2d:45:83:26:61:31:50:09:d5:0e:81:cc:3f:88:5c:
45:c3:2d:b0:8b:cc:88:3a:ad:a9:76:2e:92:cf:f2:9c:da:a2:
c7:6f:5f:9e:3e:34:ed:90:a0:3b:68:54:df:82:71:de:83:19:
14:50:c3:99:65:0a:5d:37:2f:18:1f:b7:98:bd:b9:4d:96:79:
2e:38:50:b5:e3:e7:25:29:32:43:7b:74:0b:f3:ec:46:8d:5d:
9e:92:1d:6f:01:44:d0:71:2a:26:04:16:8b:59:9e:f2:54:39:
48:ba:a5:65:57:0c:d4:2b:36:99:65:fd:07:1a:b3:8b:30:76:
10:be:65:6f:94:d4:eb:24:51:8f:3e:a1:af:1a:16:40:36:2d:
a0:ef:e7:20:3a:54:46:a5:18:9c:d8:72:da:ae:1d:8d:97:45:
fb:b2:83:cd:ed:c7:56:39:45:7e:36:bf:d8:00:a7:63:b3:69:
ff:aa:2b:79:1c:41:85:c1:db:f2:59:03:fa:21:ec:e9:d8:e6:
b0:f6:a1:8a:a5:86:06:f0:02:31:15:93:25:fb:d6:ed:87:58:
d3:20:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:15 2025 by rpki-client