Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ZItN0RZ_7-LxC1wAuoDBFCbhYQg.roa
File: ZItN0RZ_7-LxC1wAuoDBFCbhYQg.roa (raw, json)
Hash identifier: 6rg4j9rOB5FYPFmZYPRnW2z/1Tys9Z5MV5n8Vw6pfsc=
Subject key identifier: 64:8B:4D:D1:16:7F:EF:E2:F1:0B:5C:00:BA:80:C1:14:26:E1:61:08
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0183997E3455AC7F0C6F5E66DF2B5382310B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ZItN0RZ_7-LxC1wAuoDBFCbhYQg.roa
Signing time: Sun 02 Oct 2022 16:18:48 +0000
ROA not before: Sun 02 Oct 2022 16:18:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 45.88.160.0/22 maxlen: 24
45.83.148.0/22 maxlen: 24
45.88.168.0/22 maxlen: 24
2.56.172.0/22 maxlen: 24
2.56.176.0/22 maxlen: 24
194.33.36.0/22 maxlen: 24
185.149.20.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
45.92.124.0/22 maxlen: 24
185.166.152.0/22 maxlen: 24
185.166.160.0/22 maxlen: 24
185.161.69.0/24 maxlen: 24
185.161.70.0/23 maxlen: 24
92.119.40.0/22 maxlen: 24
45.128.72.0/22 maxlen: 24
45.15.124.0/22 maxlen: 24
45.86.64.0/22 maxlen: 24
45.15.128.0/22 maxlen: 24
45.86.76.0/22 maxlen: 24
45.86.72.0/22 maxlen: 24
45.92.160.0/22 maxlen: 24
45.89.96.0/22 maxlen: 24
45.92.192.0/22 maxlen: 24
45.89.100.0/22 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.112.0/22 maxlen: 24
45.9.16.0/22 maxlen: 24
45.12.128.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
194.76.136.0/22 maxlen: 24
45.83.84.0/22 maxlen: 24
45.82.244.0/22 maxlen: 24
185.153.180.0/22 maxlen: 24
45.82.248.0/22 maxlen: 24
45.89.196.0/22 maxlen: 24
213.59.112.0/20 maxlen: 24
45.15.176.0/22 maxlen: 24
171.22.116.0/22 maxlen: 24
45.15.184.0/22 maxlen: 24
31.12.92.0/22 maxlen: 24
171.22.120.0/22 maxlen: 24
2a09:b440::/48 maxlen: 48
2a09:96c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:99:7e:34:55:ac:7f:0c:6f:5e:66:df:2b:53:82:31:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 2 16:18:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=648b4dd1167fefe2f10b5c00ba80c11426e16108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:56:36:c6:43:17:d3:87:7b:13:04:7c:90:6c:
a8:34:5f:75:21:d3:66:30:55:45:d4:84:1c:7e:cc:
cf:d6:7b:14:81:66:47:1b:c8:98:6f:1f:b4:b1:90:
db:ca:a6:25:f1:75:cc:33:ad:ac:2a:74:ac:42:06:
1b:d9:79:74:4a:7a:50:b5:04:26:ba:d3:00:ca:41:
fd:3c:9b:d9:b7:be:ca:18:1e:e8:c8:3e:a6:47:ea:
c0:1c:1a:11:3b:9d:fa:87:a2:09:a3:ff:a3:8d:f4:
94:d7:fe:c6:fa:42:17:b3:82:0c:27:28:31:a6:f3:
e7:e8:65:7e:3b:42:54:7b:3d:92:87:51:4a:29:cc:
df:45:50:f0:27:d5:a2:10:15:6b:a0:4e:21:b0:a4:
a6:d2:95:cd:24:28:cc:c6:f7:52:86:91:d1:7e:b3:
76:5a:70:85:4f:93:1d:a3:42:31:13:34:f8:fc:87:
48:7c:2c:31:e7:2e:8d:3f:85:f1:59:4e:13:22:f1:
45:8d:ce:45:4b:ac:50:fa:7b:89:ff:cd:23:da:43:
89:20:a7:c4:9b:9e:66:44:c0:b4:03:90:0e:a0:2e:
47:4a:95:06:95:be:d8:08:56:ae:44:c5:1c:be:89:
b0:84:db:e1:22:e2:1b:d2:c7:e3:7b:95:ae:bc:0c:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8B:4D:D1:16:7F:EF:E2:F1:0B:5C:00:BA:80:C1:14:26:E1:61:08
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ZItN0RZ_7-LxC1wAuoDBFCbhYQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.172.0-2.56.179.255
31.12.92.0/22
45.9.16.0/22
45.12.108.0-45.12.115.255
45.12.128.0/22
45.12.136.0/22
45.15.124.0-45.15.131.255
45.15.176.0/22
45.15.184.0/22
45.82.244.0-45.82.251.255
45.83.84.0/22
45.83.140.0/22
45.83.148.0/22
45.86.64.0/22
45.86.72.0/21
45.88.160.0/22
45.88.168.0/22
45.89.96.0/21
45.89.196.0/22
45.92.124.0/22
45.92.160.0/22
45.92.192.0/22
45.128.72.0/22
92.119.40.0/22
171.22.116.0-171.22.123.255
185.149.20.0/22
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.71.255
185.166.152.0/22
185.166.160.0/22
194.33.36.0/22
194.76.136.0/22
213.59.112.0/20
IPv6:
2a09:96c0::/29
2a09:b440::/48
Signature Algorithm: sha256WithRSAEncryption
18:c0:f0:d4:9f:30:6c:6a:17:cc:7f:5f:cc:e0:9c:ba:26:0c:
d4:d0:90:aa:dc:6d:e7:12:cd:07:b2:57:ae:87:87:a3:94:ae:
c7:13:49:4f:f4:3f:a4:97:7d:e8:02:c9:bb:58:6d:30:a5:1e:
27:37:c7:0f:55:36:5f:d7:f2:64:61:9b:d6:f9:b7:d3:99:77:
15:51:db:8a:93:de:ca:8d:0f:47:77:75:66:0d:b3:ed:c0:d3:
55:40:08:3d:43:93:37:4e:d0:97:61:91:8c:4a:e0:46:8e:79:
21:7c:40:20:c4:a2:c7:bc:05:74:99:64:3b:b2:50:75:db:46:
92:43:ea:3b:6c:da:18:33:e0:76:93:c4:43:d0:8a:ae:1f:66:
b5:92:c7:ef:ab:ae:c3:b6:fd:cd:40:45:0a:12:0a:5c:3d:77:
56:5d:7b:0e:f1:05:da:59:88:75:38:e1:15:c7:7f:31:44:49:
a1:82:1f:9f:ed:ff:a6:5e:04:69:0f:d5:7b:9a:82:10:ac:d8:
d2:13:ae:ec:a4:11:bc:c7:a8:48:9f:ec:dd:51:fe:11:0c:1c:
65:bb:a9:f7:e4:98:f5:3a:7f:97:28:f5:08:53:7e:5e:40:14:
22:09:f0:e6:03:9d:cf:b3:c1:d6:09:ed:b3:d3:c9:d5:37:17:
48:a6:79:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org