Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mVzyyWtjHlygWE7_WS8dugmAEWo.roa
File: mVzyyWtjHlygWE7_WS8dugmAEWo.roa (raw, json)
Hash identifier: gXeqRw6AG2+mWOdpaTd81SAc+qzf3xL8+OTOhdYNpq0=
Subject key identifier: 99:5C:F2:C9:6B:63:1E:5C:A0:58:4E:FF:59:2F:1D:BA:09:80:11:6A
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018A5F2E4DC73D370E6972737DCC2ADBEC5A
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mVzyyWtjHlygWE7_WS8dugmAEWo.roa
Signing time: Mon 04 Sep 2023 07:53:04 +0000
ROA not before: Mon 04 Sep 2023 07:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.83.148.0/22 maxlen: 24
194.33.36.0/22 maxlen: 24
45.83.116.0/22 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
185.161.70.0/23 maxlen: 24
185.161.69.0/24 maxlen: 24
45.86.60.0/22 maxlen: 24
45.86.64.0/22 maxlen: 24
45.86.68.0/22 maxlen: 24
45.86.72.0/22 maxlen: 24
45.86.76.0/22 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/22 maxlen: 24
45.89.96.0/22 maxlen: 24
45.89.100.0/22 maxlen: 24
45.89.104.0/22 maxlen: 24
45.89.108.0/22 maxlen: 24
194.76.136.0/22 maxlen: 24
45.83.84.0/22 maxlen: 24
45.82.244.0/22 maxlen: 24
45.82.248.0/22 maxlen: 24
45.82.252.0/22 maxlen: 24
185.153.180.0/22 maxlen: 24
213.59.112.0/20 maxlen: 24
45.89.196.0/22 maxlen: 24
45.15.176.0/22 maxlen: 24
45.83.20.0/22 maxlen: 24
45.83.24.0/22 maxlen: 24
45.15.184.0/22 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.168.0/22 maxlen: 24
45.88.176.0/22 maxlen: 24
45.88.180.0/22 maxlen: 24
185.203.4.0/22 maxlen: 24
45.88.148.0/22 maxlen: 24
92.118.228.0/22 maxlen: 24
92.118.232.0/22 maxlen: 24
92.118.236.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
185.166.152.0/22 maxlen: 24
45.92.124.0/22 maxlen: 24
185.166.160.0/22 maxlen: 24
45.92.140.0/22 maxlen: 24
45.128.56.0/22 maxlen: 24
45.128.52.0/22 maxlen: 24
45.128.72.0/22 maxlen: 24
45.128.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:2e:4d:c7:3d:37:0e:69:72:73:7d:cc:2a:db:ec:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 4 07:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=995cf2c96b631e5ca0584eff592f1dba0980116a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:21:8c:bf:c1:5c:59:58:e4:13:0e:1c:5e:
04:f4:39:4b:57:9c:44:08:e2:57:46:1d:3a:ed:42:
cd:02:1e:45:8a:bc:a2:13:c5:88:7b:07:71:c7:18:
2e:45:69:e3:dd:99:29:d7:c1:36:dc:14:85:54:20:
18:b8:e3:56:53:5a:52:91:3c:c9:00:ba:99:b2:9a:
9d:ee:88:e9:b1:ed:0a:cf:42:a6:da:5b:66:fc:f2:
3f:6b:da:da:03:06:b5:ef:3a:91:b3:dd:f1:b6:61:
0c:d8:21:8b:8c:9f:6e:ad:01:bc:78:4c:73:82:2f:
d7:55:37:77:ce:ed:58:83:6a:fc:d2:31:9a:d1:9e:
d5:c9:c9:47:d7:61:04:85:37:87:e4:99:66:eb:96:
b0:7b:50:64:27:ea:1c:1c:39:83:8f:e9:ed:74:41:
36:7d:e3:0d:5b:fb:7e:d3:62:2a:eb:ec:53:11:56:
73:07:d6:c9:35:62:f7:e0:d8:71:ac:3b:e6:18:89:
48:86:87:0b:78:d7:bd:42:78:a4:da:c2:bf:11:67:
32:a1:9a:c5:22:5b:d2:da:8f:5d:72:72:3b:24:17:
c9:7d:4b:b4:49:38:72:1c:2c:c5:a3:9a:df:d0:69:
7c:8f:c3:78:14:f6:44:88:c2:90:a9:5e:bd:66:a9:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5C:F2:C9:6B:63:1E:5C:A0:58:4E:FF:59:2F:1D:BA:09:80:11:6A
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mVzyyWtjHlygWE7_WS8dugmAEWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.176.0/22
45.15.184.0/22
45.82.244.0-45.82.255.255
45.83.20.0-45.83.27.255
45.83.84.0/22
45.83.116.0/22
45.83.128.0/22
45.83.140.0/22
45.83.148.0/22
45.86.60.0-45.86.79.255
45.88.148.0/22
45.88.160.0/22
45.88.168.0/22
45.88.176.0/21
45.89.96.0/20
45.89.196.0/22
45.92.124.0/22
45.92.140.0/22
45.92.160.0/21
45.92.192.0/22
45.128.48.0-45.128.59.255
45.128.72.0/22
92.118.228.0-92.118.239.255
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.71.255
185.166.152.0/22
185.166.160.0/22
185.203.4.0/22
194.33.36.0/22
194.76.136.0/22
213.59.112.0/20
Signature Algorithm: sha256WithRSAEncryption
70:a1:dd:75:b7:04:6c:ce:5b:12:fe:ec:c3:d1:f4:99:54:eb:
f0:5d:b1:dd:43:91:bb:6e:d7:0f:6d:d3:38:7b:0c:fc:e6:d2:
77:f9:2a:ba:a5:55:03:02:b8:2d:16:ed:47:75:07:08:93:33:
78:b3:da:08:c7:72:f6:10:b8:09:ac:8e:c5:7c:41:d7:c8:87:
8d:41:48:60:c5:5e:3d:0b:fa:9c:99:06:a2:ed:e8:8c:54:bc:
81:7d:08:82:5d:50:bc:d2:85:bb:d6:6a:d0:17:ac:9e:8c:ee:
36:fd:bb:a2:ce:0e:83:8a:0a:26:92:f0:3f:38:0c:1c:42:b2:
4e:76:cd:23:15:72:a8:da:33:42:76:53:3f:c2:bc:0b:7e:45:
4f:5c:97:7e:39:6e:c0:4c:d4:ed:3b:5c:7e:6b:fa:b6:73:cb:
8f:f8:87:98:d1:22:df:ed:85:46:f9:f9:d6:6d:df:25:64:0e:
63:40:bc:8d:8f:30:df:e1:66:b8:7c:0c:12:01:26:01:22:49:
3e:b7:c3:00:83:0c:6a:c8:f6:b1:c5:da:86:e1:4f:5c:b9:18:
92:56:3e:22:e6:73:91:34:19:f0:64:7f:d8:5d:6f:0f:72:d2:
c0:78:ec:e4:26:02:33:1b:74:5f:4c:3c:49:fd:79:95:18:86:
f3:f6:76:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:31 2025 by rpki-client