Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_4-VSeJ39WzjVdYsgMc3HwkwBjY.roa
File: _4-VSeJ39WzjVdYsgMc3HwkwBjY.roa (raw, json)
Hash identifier: snVP73Mr7DNOUj1+Jc96VswcN7XuQ0ftskBpx/SBuaU=
Subject key identifier: FF:8F:95:49:E2:77:F5:6C:E3:55:D6:2C:80:C7:37:1F:09:30:06:36
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 07AAE275
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_4-VSeJ39WzjVdYsgMc3HwkwBjY.roa
Signing time: Sat 01 Jan 2022 16:06:01 +0000
ROA not before: Sat 01 Jan 2022 16:06:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 45.83.148.0/22 maxlen: 24
2.56.172.0/22 maxlen: 24
95.214.248.0/22 maxlen: 24
2.56.176.0/22 maxlen: 24
194.33.36.0/22 maxlen: 24
2.56.116.0/22 maxlen: 24
2.56.124.0/22 maxlen: 24
2.56.120.0/22 maxlen: 24
45.83.116.0/22 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
185.161.70.0/23 maxlen: 24
185.161.69.0/24 maxlen: 24
185.106.96.0/22 maxlen: 24
139.28.232.0/22 maxlen: 24
45.15.124.0/22 maxlen: 24
45.86.64.0/22 maxlen: 24
45.86.60.0/22 maxlen: 24
45.15.128.0/22 maxlen: 24
45.86.68.0/22 maxlen: 24
45.15.144.0/22 maxlen: 24
45.15.140.0/22 maxlen: 24
45.86.76.0/22 maxlen: 24
45.86.72.0/22 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/22 maxlen: 24
45.89.96.0/22 maxlen: 24
45.89.104.0/22 maxlen: 24
45.89.100.0/22 maxlen: 24
45.89.108.0/22 maxlen: 24
45.9.12.0/22 maxlen: 24
171.22.136.0/22 maxlen: 24
45.9.16.0/22 maxlen: 24
45.12.112.0/22 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.128.0/22 maxlen: 24
45.12.132.0/22 maxlen: 24
194.76.136.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.83.84.0/22 maxlen: 24
45.12.148.0/22 maxlen: 24
45.15.152.0/22 maxlen: 24
45.82.244.0/22 maxlen: 24
45.82.252.0/22 maxlen: 24
45.82.248.0/22 maxlen: 24
185.153.180.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
213.59.112.0/20 maxlen: 24
45.89.196.0/22 maxlen: 24
45.15.176.0/22 maxlen: 24
171.22.112.0/22 maxlen: 24
171.22.108.0/22 maxlen: 24
45.83.24.0/22 maxlen: 24
45.15.184.0/22 maxlen: 24
45.83.20.0/22 maxlen: 24
171.22.116.0/22 maxlen: 24
31.12.92.0/22 maxlen: 24
171.22.124.0/22 maxlen: 24
171.22.120.0/22 maxlen: 24
171.22.132.0/22 maxlen: 24
171.22.128.0/22 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.168.0/22 maxlen: 24
45.88.176.0/22 maxlen: 24
45.88.180.0/22 maxlen: 24
185.149.20.0/22 maxlen: 24
185.203.4.0/22 maxlen: 24
141.98.164.0/22 maxlen: 24
141.98.160.0/22 maxlen: 24
45.88.148.0/22 maxlen: 24
92.118.228.0/22 maxlen: 24
92.118.232.0/22 maxlen: 24
92.118.236.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
185.166.152.0/22 maxlen: 24
45.92.124.0/22 maxlen: 24
185.166.160.0/22 maxlen: 24
45.92.140.0/22 maxlen: 24
92.119.40.0/22 maxlen: 24
45.128.56.0/22 maxlen: 24
45.128.52.0/22 maxlen: 24
45.128.72.0/22 maxlen: 24
45.128.48.0/22 maxlen: 24
141.98.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128639605 (0x7aae275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 16:06:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff8f9549e277f56ce355d62c80c7371f09300636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:70:f1:dc:84:f8:a2:1d:02:67:67:0e:55:d9:
c6:a5:c9:31:27:a9:c8:e4:10:ec:ee:73:0f:97:d0:
e0:b0:15:4c:97:2e:12:51:8d:e4:3e:92:aa:88:14:
89:99:fd:fd:de:06:09:fd:4a:44:a8:fd:26:9e:89:
7e:2a:70:25:1a:88:74:ec:0d:73:0c:85:91:40:bc:
c1:05:c8:ee:f4:93:7f:83:3b:da:d8:5c:60:03:31:
97:cc:87:cc:7f:ed:7d:99:3d:3e:fb:a5:d1:7e:e0:
2b:7d:14:d8:69:49:09:79:8b:be:39:03:9e:ad:4a:
3a:e8:f3:b9:6c:dc:ac:be:47:77:5c:29:08:30:4c:
a7:7d:1a:6c:ec:93:f4:31:3e:a6:41:d3:6e:06:6d:
ad:c6:27:3a:3c:0f:b0:87:b0:37:1c:ed:4a:7b:ae:
47:9b:29:ca:3f:13:e6:c8:5f:d1:bd:21:44:f2:cf:
b9:3f:93:1b:e5:5d:45:42:ae:f2:34:12:fa:d7:06:
c1:63:94:0e:42:3c:5d:37:2c:11:a5:2b:c7:93:6a:
b8:6b:cb:38:25:7a:c8:08:31:31:b4:3d:c1:cb:30:
1a:58:03:31:cf:78:f9:f7:64:1a:47:85:b3:26:b0:
38:1f:9d:d2:59:2d:a7:17:3e:0f:f7:6b:80:a3:4b:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8F:95:49:E2:77:F5:6C:E3:55:D6:2C:80:C7:37:1F:09:30:06:36
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_4-VSeJ39WzjVdYsgMc3HwkwBjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.116.0-2.56.127.255
2.56.172.0-2.56.179.255
31.12.92.0/22
45.9.12.0-45.9.19.255
45.12.108.0-45.12.115.255
45.12.128.0-45.12.151.255
45.15.124.0-45.15.131.255
45.15.140.0-45.15.147.255
45.15.152.0/22
45.15.160.0-45.15.171.255
45.15.176.0/22
45.15.184.0/22
45.82.244.0-45.82.255.255
45.83.20.0-45.83.27.255
45.83.84.0/22
45.83.116.0/22
45.83.128.0/22
45.83.140.0/22
45.83.148.0/22
45.86.60.0-45.86.79.255
45.88.148.0/22
45.88.160.0/22
45.88.168.0/22
45.88.176.0/21
45.89.96.0/20
45.89.196.0/22
45.92.124.0/22
45.92.140.0/22
45.92.160.0/21
45.92.192.0/22
45.128.48.0-45.128.59.255
45.128.72.0/22
92.118.228.0-92.118.239.255
92.119.40.0/22
95.214.248.0/22
139.28.232.0/22
141.98.132.0/22
141.98.160.0/21
171.22.108.0-171.22.139.255
185.106.96.0/22
185.149.20.0/22
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.71.255
185.166.152.0/22
185.166.160.0/22
185.203.4.0/22
194.33.36.0/22
194.76.136.0/22
213.59.112.0/20
Signature Algorithm: sha256WithRSAEncryption
90:76:48:db:b3:3c:af:ab:8c:75:fc:56:73:ca:85:36:62:77:
22:26:92:71:61:24:ce:9d:71:34:cc:a8:c6:76:97:3d:45:a3:
17:dd:50:ef:77:93:4b:73:8e:9c:d3:14:e6:ff:90:ed:94:da:
49:69:18:2e:5c:2f:d9:7c:15:f0:83:56:fd:da:a0:eb:30:d0:
01:c5:f4:76:fb:3f:1b:f8:02:88:39:e0:92:a0:41:db:87:32:
ab:03:3f:b3:e3:8d:c2:12:a7:3b:0b:df:7a:55:14:52:56:14:
e7:86:b8:06:3f:d0:17:e8:29:0b:a4:d7:9b:ea:5c:ad:17:7d:
31:9b:a8:53:51:21:6e:7f:3d:4a:98:56:a3:b1:6b:e3:07:69:
af:37:97:d3:21:bb:12:18:2f:85:cc:6f:4e:7e:a8:4e:a2:fc:
5f:22:ae:6c:f1:1c:3c:b0:6a:f2:3a:32:72:f1:77:f5:eb:8e:
75:49:9e:32:fa:87:47:1d:cf:51:fd:f7:2c:76:1e:f1:24:42:
8b:a8:1c:20:ed:bc:0b:b8:7b:54:4f:c1:33:89:65:f1:e2:6a:
75:eb:45:d4:2f:52:0b:d2:36:e8:91:31:30:41:c7:b5:a7:69:
de:2a:7a:6c:8a:33:cb:57:95:be:d4:df:c0:64:bd:6e:1c:ff:
cf:3d:4c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org