Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gDorHOaiQPJXfAXRMhWTCnl5qKU.roa
File: gDorHOaiQPJXfAXRMhWTCnl5qKU.roa (raw, json)
Hash identifier: StNutSCb3fyM91N+82lBMOfLwLyisDLGbE/1RmQDG5A=
Subject key identifier: 80:3A:2B:1C:E6:A2:40:F2:57:7C:05:D1:32:15:93:0A:79:79:A8:A5
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 07ACFA98
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gDorHOaiQPJXfAXRMhWTCnl5qKU.roa
Signing time: Sat 01 Jan 2022 16:06:03 +0000
ROA not before: Sat 01 Jan 2022 16:06:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58110
IP address blocks: 45.9.13.0/24 maxlen: 24
45.83.148.0/24 maxlen: 24
45.88.169.0/24 maxlen: 24
194.76.136.0/24 maxlen: 24
45.15.140.0/24 maxlen: 24
45.92.162.0/24 maxlen: 24
45.89.97.0/24 maxlen: 24
45.15.184.0/24 maxlen: 24
92.118.229.0/24 maxlen: 24
171.22.119.0/24 maxlen: 24
45.83.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128776856 (0x7acfa98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 16:06:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=803a2b1ce6a240f2577c05d13215930a7979a8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:e0:d5:c2:87:d7:52:b7:bc:d3:8a:0b:a8:
56:fb:d3:12:68:73:60:57:41:bf:f0:99:34:1e:37:
11:b4:fe:00:5b:0e:46:4a:29:41:fd:5d:08:62:81:
0f:e9:20:bc:83:69:5f:ed:80:9e:e2:ec:ab:bc:65:
87:3f:5f:82:37:ff:b1:77:df:ef:7f:9a:31:ad:a1:
a2:2f:ec:09:80:76:14:ea:7e:7b:f5:90:bc:f5:d3:
69:8e:2d:39:14:c8:5f:91:89:67:73:21:55:46:c7:
f6:15:ee:c1:2a:b5:06:68:43:36:ef:57:c7:9e:8b:
c1:89:a0:cb:bf:e8:72:bb:28:b8:cc:20:b8:72:be:
8f:53:fd:f0:a6:8e:77:28:28:91:0e:62:45:ee:a2:
5e:13:10:c3:06:e6:8f:8a:7a:a8:df:a6:b0:77:63:
4a:6e:4b:e1:d2:a3:79:9b:5c:6c:34:c5:3a:0e:da:
cd:bd:5f:02:2c:bb:68:b0:92:51:0c:2c:4b:19:96:
f0:f5:5a:af:69:c2:a7:b8:ac:f6:e5:09:0e:9f:b4:
48:7e:96:08:cf:a4:af:aa:c4:dd:cb:5c:93:43:00:
ea:c4:ec:3e:d0:99:e7:2d:3f:27:f3:5b:ff:be:32:
8d:d6:34:27:bd:73:00:4e:51:e6:bd:e6:e1:5d:9e:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3A:2B:1C:E6:A2:40:F2:57:7C:05:D1:32:15:93:0A:79:79:A8:A5
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gDorHOaiQPJXfAXRMhWTCnl5qKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.13.0/24
45.15.140.0/24
45.15.184.0/24
45.83.141.0/24
45.83.148.0/24
45.88.169.0/24
45.89.97.0/24
45.92.162.0/24
92.118.229.0/24
171.22.119.0/24
194.76.136.0/24
Signature Algorithm: sha256WithRSAEncryption
10:8b:8c:03:d0:dc:75:0d:75:f8:30:39:c5:b1:84:4f:77:50:
08:9e:39:7b:5f:ad:87:8a:a3:e6:53:2d:67:15:e2:c2:45:85:
07:67:3b:c5:e3:6a:ab:a8:eb:9a:42:5a:f5:6a:b4:bd:1f:38:
c7:ac:2e:92:d0:0a:35:e0:51:cc:a7:57:72:5a:86:1a:6d:6f:
27:34:df:05:30:a5:05:ea:76:29:d7:46:0a:e3:b3:95:e9:d2:
57:06:a3:fb:35:fc:52:73:5c:18:ae:12:a7:ee:90:55:a4:2b:
55:64:69:56:6f:fb:bb:27:13:8f:1b:5d:fc:a3:86:74:36:95:
7e:10:0f:48:4c:b9:37:eb:5a:5b:c2:c4:7e:e7:55:1a:d6:c7:
96:80:28:5f:97:7e:58:80:18:cd:30:cf:93:49:49:e6:a9:9a:
d5:44:a4:d6:4c:97:9c:36:b1:7d:10:3c:0e:6f:ab:74:3d:2b:
e2:90:1e:ef:66:09:b1:b2:fb:51:9c:86:40:20:27:b1:9d:a5:
1f:ac:d1:d8:1d:15:d5:9b:0b:3b:b5:39:5b:74:4d:e7:58:46:
b6:df:06:e7:c5:09:68:57:4f:bf:06:42:d5:f7:da:21:be:2f:
7b:be:40:37:3d:71:77:95:e5:ac:62:01:ad:d7:64:7e:e0:3b:
13:3e:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:42 2025 by rpki-client